Author |
Message
|
klamerus |
Posted: Sat Aug 13, 2005 6:57 pm Post subject: Question on access |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
Well, I'm puzzled. I inherited a system at work that is based on MQ. It's written in MS VS and runs on Windows 2000. There are several of these servers in production and non-production environments.
I can look at the queues in all these via MQ Explorer from my desktop (WinXP) with the exception of one. This baffles me. I'm sure it's related to security, and this is where I'm stuck.
Isn't there some sort of tool that will show all of the current security levels on a queue manager and queues? I know about dspmqaut, but it only works for a specified user. I'd like to see what the queues look like that I can work with and compare.
BTW, I can browse queues and everything fine if I actually log on to the server. The problem is only when I'm remote. |
|
Back to top |
|
 |
klamerus |
Posted: Sat Aug 13, 2005 7:43 pm Post subject: Dump |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
Bascially, I'm looking for a full security dump.
Something that will dump out all the authorized users and their level of access. |
|
Back to top |
|
 |
jefflowrey |
Posted: Sun Aug 14, 2005 5:58 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
amqoamd...
and dmpmqaut... _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
fjb_saper |
Posted: Sun Aug 14, 2005 6:11 am Post subject: Re: Dump |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
klamerus wrote: |
Bascially, I'm looking for a full security dump.
Something that will dump out all the authorized users and their level of access. |
You might as well need to take a serious look at svrconn channel mcausers (system.admin.svrconn) and take a serious look into the users part of the mqm group for the corresponding qmgr.
A difference there might explain your symptoms.. just as well as a difference in authorizations.
Remember MQ does not like inbricated groups...
Enjoy  |
|
Back to top |
|
 |
PeterPotkay |
Posted: Sun Aug 14, 2005 6:46 am Post subject: |
|
|
 Poobah
Joined: 15 May 2001 Posts: 7722
|
|
Back to top |
|
 |
klamerus |
Posted: Sun Aug 14, 2005 7:17 am Post subject: Ya gotta love it |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
This is why I like this place. Provided one can ask a question clearly (which isn't always easy), answers abound.
The documentation tool looks pretty neat, but I'm thinking that dmpmqaut will probably get me most of the way there.
One thing that worries me is that although I have a network logon, I don't log on to the company network. So, when i go to file shares, I'm prompted for my username/password. This doesn't happen with most of the QMs I'm asking about and I can work on them freely from my desktop, but the one that I have to actually log on to the server for is the one we care the least about (it's our very early on test machine).
I'd better start looking into this as it leave me concerned that our production QMs are "wide open". |
|
Back to top |
|
 |
klamerus |
Posted: Sun Aug 14, 2005 7:20 am Post subject: Preferences |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
Both amqoamd and dmpmqaut look pretty similar in what they do.
Any reasons to choose one over another for any particular use? |
|
Back to top |
|
 |
klamerus |
Posted: Sun Aug 14, 2005 8:06 am Post subject: Piping |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
It also doesn't look like (on windows) that it's possible to direct the output of dmpmqaut into a file.
I can do amqoamd > foo.txt
but I can't do dmpmqaut > bar.txt
The output is pretty verbose. I don't see any options on the command syntax for this either. Any known way to capture? |
|
Back to top |
|
 |
jefflowrey |
Posted: Sun Aug 14, 2005 8:50 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
dmpmqaut apparently writes to stderr instead of stdout.
dmpmqaut 2> out.txt
works just fine on Windows. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
klamerus |
Posted: Sun Aug 14, 2005 9:52 am Post subject: |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
Thx.
I was trying the old ">&" and other stuff. Didn't get to that one.
Appreciate it. |
|
Back to top |
|
 |
klamerus |
Posted: Sun Aug 14, 2005 10:35 am Post subject: |
|
|
 Disciple
Joined: 05 Jul 2004 Posts: 199 Location: Detroit, MI
|
Well, that did it. I was able to see a group that I needed to be added into and now I can work with the QM on this remaining server perfectly. |
|
Back to top |
|
 |
|