| Author |
Message
|
| BBM |
 Posted: Mon Dec 12, 2005 5:20 am Post subject: Problems authorising users to administrate MQ |
 |
|
Master
Joined: 10 Nov 2005
Posts: 217
Location: London, UK
|
Hi,
We've had a new guy join our team and I'm trying to confer MQ admin rights to him.
Do I need to refresh security if I'm adding him to the domain MQM group -as the domain MQM group is already a member of the local MQM group.
In other words does MQ cache info on users who are members of a domain group as well as a local group?
My new guy cannot access MQ at all and he has exactly the same group memberships as me.
The system admin manual is a bit vague on REFRESH SECURITY and just says you should use it after adding a user to a group... maybe it means all groups...
Thanks for your help and apologies in advance if this has already been covered here...
BBM |
|
| Back to top |
|
 |
| jsware |
| Posted: Mon Dec 12, 2005 5:23 am Post subject: Re: Problems authorising users to administrate MQ |
|
|
Chevalier
Joined: 17 May 2001
Posts: 455
|
| BBM wrote: |
| Do I need to refresh security if I'm adding him to the domain MQM group -as the domain MQM group is already a member of the local MQM group. |
Yes you should refresh security if you change the group membership. I am not aware of a negative impact to performing a refresh security when not strictly necessary (except for the time wated on your own part perhaps  )
_________________
Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
| Back to top |
|
|
| EddieA |
| Posted: Mon Dec 12, 2005 10:03 am Post subject: |
|
|
Jedi
Joined: 28 Jun 2001
Posts: 2453
Location: Los Angeles
|
| Quote: |
| The system admin manual is a bit vague on REFRESH SECURITY and just says you should use it after adding a user to a group... maybe it means all groups... |
REFRESH SECURITY should be used whenever you've changed any security at the underlying operation system level and you want MQ to pick up those changes. MQ grabs the OS security information at start-up and caches it, so doesn't see changes "on the fly.
Cheers,
_________________
Eddie Atherton
IBM Certified Solution Developer - WebSphere Message Broker V6.1
IBM Certified Solution Developer - WebSphere Message Broker V7.0 |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Dec 12, 2005 3:00 pm Post subject: Re: Problems authorising users to administrate MQ |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| BBM wrote: |
Hi,
We've had a new guy join our team and I'm trying to confer MQ admin rights to him.
Do I need to refresh security if I'm adding him to the domain MQM group -as the domain MQM group is already a member of the local MQM group.
In other words does MQ cache info on users who are members of a domain group as well as a local group?
My new guy cannot access MQ at all and he has exactly the same group memberships as me.
The system admin manual is a bit vague on REFRESH SECURITY and just says you should use it after adding a user to a group... maybe it means all groups...
Thanks for your help and apologies in advance if this has already been covered here...
BBM |
I thought that MQ does not resolve embedded groups !
Enjoy  |
|
| Back to top |
|
|
| BBM |
| Posted: Tue Dec 13, 2005 1:19 am Post subject: |
|
|
Master
Joined: 10 Nov 2005
Posts: 217
Location: London, UK
|
| Quote: |
| I thought that MQ does not resolve embedded groups ! |
This was what I thought too - hence the question...
I'm happy to report that refresh security solved the problem -
Thanks everyone!
BBM |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Dec 13, 2005 4:19 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I think domain mqm is resolved separately.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
