| Author |
Message
|
| HubertKleinmanns |
 Posted: Mon Feb 27, 2006 5:05 am Post subject: |
 |
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| jefflowrey wrote: |
| mquseless wrote: |
| Quote: |
| [-p Principal | -g Group] |
The [] brackets mean that the parameter is optional.
The description of dspmqaut says that authorities for all users for the named object are listed. |
Yes. But the command doesn't actually FUNCTION the way it's documented to work. |
I had this problem on Unix systems too. The short online help, the documentation in the manual and how the tool really works, were different for MQ version 5.1. What always worked (in my environments) was:
| Code: |
dspmqaut -m <your_qmgr> -t qmgr -p <your_principal>
dspmqaut -m <your_qmgr> -t q -n <your_queue> -p <your_principal>
dspmqaut -m <your_qmgr> -t qmgr -g <your_group>
dspmqaut -m <your_qmgr> -t q -n <your_queue> -g <your_group> |
_________________
Regards
Hubert |
|
| Back to top |
|
 |
| HubertKleinmanns |
| Posted: Mon Feb 27, 2006 5:06 am Post subject: |
|
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| mquseless wrote: |
In the book, rather than the online doc, the -n ObjectName is not in [] brackets, whch must mean that it is required. So, how about trying the command:
dspmqaut -m QMGR -n QUEUE -t q -n '*' |
Generic permissions are available since MQ version 5.3, but unfortunately you cannot display these with dspmqaut. You have to use amqoamd -s -m <your_qmgr> instead.
_________________
Regards
Hubert |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Mon Feb 27, 2006 5:13 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| Tibor wrote: |
| A korn shell script 'saveauth': |
Korn shell? On VMS?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| HubertKleinmanns |
| Posted: Mon Feb 27, 2006 5:19 am Post subject: |
|
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| jefflowrey wrote: |
| ... You haven't been paying attention ... |
May be, but still the command dspmqaut only displays permissions for one object (queue etc.). You have to write a loop, to display all objects (like amqoamd does for version 5.3).
That's what I'm trying to say 
_________________
Regards
Hubert |
|
| Back to top |
|
|
| Tibor |
| Posted: Mon Feb 27, 2006 5:24 am Post subject: |
|
|
Grand Master
Joined: 20 May 2001
Posts: 1033
Location: Hungary
|
| jefflowrey wrote: |
| Tibor wrote: |
| A korn shell script 'saveauth': |
Korn shell? On VMS? |
(1) can run it even on winxp - over cygwin 
(2) can run on vms with GNV (http://gnv.sourceforge.net/)
However, this is only an example for a VMS scripting guru.
Tibor |
|
| Back to top |
|
|
| billybong |
| Posted: Wed Mar 01, 2006 12:22 am Post subject: |
|
|
Disciple
Joined: 22 Jul 2005
Posts: 150
Location: Stockholm, Sweden
|
| Tibor wrote: |
However, this is only an example for a VMS scripting guru.
|
Too bad I'm not one of those then... 
Thanks for the help guys, seems strange that the MQ developers didn't see the need for this until 5.3
_________________
IBM Certified Solution Developer - WebSphere Message Broker V6.1
IBM Certified Solution Developer - WebSphere Integration Developer V6.0
IBM Certified System Administrator - WebSphere MQ V6.0
IBM Certified Solution Developer - WebSphere DataPower |
|
| Back to top |
|
|
| HubertKleinmanns |
| Posted: Wed Mar 01, 2006 7:58 am Post subject: |
|
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| billybong wrote: |
| ... seems strange that the MQ developers didn't see the need for this until 5.3 |
Billybong,
Unixers in 5.1 had the ksh script, in 5.2 there was another support pac and now they have amqoamd (which should exist on VMS too). So there were tools on the most used distributed plattforms.
Otherwise in the past Unix systems were quite small and used by one application exclusively. So security may have been no big issue. Nevertheless it was possible, to use the OAM, but only storing and cloning of the security was not built into the software.
Maybe it is possible, to copy the security files from your disk - I am not sure. At least you can get the permissions out of these files (in [...MQM.QMGRS.<your_qmgr>.AUTH] or so).
_________________
Regards
Hubert |
|
| Back to top |
|
|
|
|
