|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
Question on security for a training class |
« View previous topic :: View next topic » |
Author |
Message
|
lnm |
Posted: Tue Jun 11, 2002 9:29 am Post subject: Question on security for a training class |
|
|
Apprentice
Joined: 12 Mar 2002 Posts: 43 Location: Florida
|
We are planning a training class and don't really want to put everyone in an mqm group. Is there another way to allow users to create qmgrs, queues, etc? There is another QManager running on the box and we don't really want them to be able to access it. However, everyone does need the access to create queues, qmanagers, etc.
Can we add all the users to a group and then add the group to the mqm group?
Any suggestions would be appreciated. |
|
Back to top |
|
 |
muralidhar |
Posted: Tue Jun 11, 2002 11:46 am Post subject: |
|
|
 Acolyte
Joined: 28 Feb 2002 Posts: 50
|
You can create a user group and assign access rights to that group on a particular QManager and queues using setmqaut command. |
|
Back to top |
|
 |
lnm |
Posted: Wed Jun 12, 2002 3:43 am Post subject: |
|
|
Apprentice
Joined: 12 Mar 2002 Posts: 43 Location: Florida
|
The only problem with that is that we need everyone to be able to create qmanagers. This is like an admin boot camp class |
|
Back to top |
|
 |
dgolding |
Posted: Wed Jun 12, 2002 4:11 am Post subject: |
|
|
 Yatiri
Joined: 16 May 2001 Posts: 668 Location: Switzerland
|
Use the admin support wrapper from IBM (not all platforms - AIX, HPUX, Solaris and NT only):
http://www-3.ibm.com/software/ts/mqseries/txppacs/ms0e.html
This gives selected users temporary MQ privilege. It's also pretty sophisticated so I THINK you can steer them away from your "live" queue manager.
But, best practise in a training environment is to have a stand-alone training machine and let your users run riot there  |
|
Back to top |
|
 |
muralidhar |
Posted: Wed Jun 12, 2002 7:28 am Post subject: |
|
|
 Acolyte
Joined: 28 Feb 2002 Posts: 50
|
I think MQSeries Administration Wrapper is neat idea. If you can't afford to have another machine for training, consider taking a ghost image/backup of the system before training. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|