ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Question on access

Post new topic  Reply to topic
 Question on access « View previous topic :: View next topic » 
Author Message
klamerus
PostPosted: Sat Aug 13, 2005 6:57 pm    Post subject: Question on access Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

Well, I'm puzzled. I inherited a system at work that is based on MQ. It's written in MS VS and runs on Windows 2000. There are several of these servers in production and non-production environments.

I can look at the queues in all these via MQ Explorer from my desktop (WinXP) with the exception of one. This baffles me. I'm sure it's related to security, and this is where I'm stuck.

Isn't there some sort of tool that will show all of the current security levels on a queue manager and queues? I know about dspmqaut, but it only works for a specified user. I'd like to see what the queues look like that I can work with and compare.

BTW, I can browse queues and everything fine if I actually log on to the server. The problem is only when I'm remote.
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
klamerus
PostPosted: Sat Aug 13, 2005 7:43 pm    Post subject: Dump Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

Bascially, I'm looking for a full security dump.

Something that will dump out all the authorized users and their level of access.
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
jefflowrey
PostPosted: Sun Aug 14, 2005 5:58 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

amqoamd...

and dmpmqaut...
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sun Aug 14, 2005 6:11 am    Post subject: Re: Dump Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

klamerus wrote:
Bascially, I'm looking for a full security dump.

Something that will dump out all the authorized users and their level of access.


You might as well need to take a serious look at svrconn channel mcausers (system.admin.svrconn) and take a serious look into the users part of the mqm group for the corresponding qmgr.

A difference there might explain your symptoms.. just as well as a difference in authorizations.
Remember MQ does not like inbricated groups...

Enjoy
Back to top
View user's profile Send private message Send e-mail
PeterPotkay
PostPosted: Sun Aug 14, 2005 6:46 am    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

http://www.mqseries.net/phpBB2/viewtopic.php?t=21424
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
klamerus
PostPosted: Sun Aug 14, 2005 7:17 am    Post subject: Ya gotta love it Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

This is why I like this place. Provided one can ask a question clearly (which isn't always easy), answers abound.

The documentation tool looks pretty neat, but I'm thinking that dmpmqaut will probably get me most of the way there.

One thing that worries me is that although I have a network logon, I don't log on to the company network. So, when i go to file shares, I'm prompted for my username/password. This doesn't happen with most of the QMs I'm asking about and I can work on them freely from my desktop, but the one that I have to actually log on to the server for is the one we care the least about (it's our very early on test machine).

I'd better start looking into this as it leave me concerned that our production QMs are "wide open".
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
klamerus
PostPosted: Sun Aug 14, 2005 7:20 am    Post subject: Preferences Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

Both amqoamd and dmpmqaut look pretty similar in what they do.

Any reasons to choose one over another for any particular use?
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
klamerus
PostPosted: Sun Aug 14, 2005 8:06 am    Post subject: Piping Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

It also doesn't look like (on windows) that it's possible to direct the output of dmpmqaut into a file.

I can do amqoamd > foo.txt

but I can't do dmpmqaut > bar.txt

The output is pretty verbose. I don't see any options on the command syntax for this either. Any known way to capture?
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
jefflowrey
PostPosted: Sun Aug 14, 2005 8:50 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

dmpmqaut apparently writes to stderr instead of stdout.

dmpmqaut 2> out.txt

works just fine on Windows.
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
klamerus
PostPosted: Sun Aug 14, 2005 9:52 am    Post subject: Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

Thx.

I was trying the old ">&" and other stuff. Didn't get to that one.

Appreciate it.
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
klamerus
PostPosted: Sun Aug 14, 2005 10:35 am    Post subject: Reply with quote

Disciple

Joined: 05 Jul 2004
Posts: 199
Location: Detroit, MI

Well, that did it. I was able to see a group that I needed to be added into and now I can work with the QM on this remaining server perfectly.
Back to top
View user's profile Send private message Send e-mail AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Question on access
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.