| Author |
Message
|
| lanny boy |
 Posted: Wed Apr 19, 2006 1:54 am Post subject: MQ Explorer V6 |
 |
|
Voyager
Joined: 24 Nov 2003
Posts: 79
Location: UK
|
I am trying to give support users access to display queues and channels when they are not members of mqm. I have done this using a number of setmqaut commands to assign the requisite OAM permissions.
I have discovered that it is impossible to give access the queues SYSTEM.DATA.AUTH.QUEUE for non mqm users. The PCF command from Explorer has to succeed for all objects, so since it fails for the auth queue, the whole command fails and no queues are displayed.
I am trying to show the rest of the queues by applying a filter to omit this and other SYSTEM queues. However i am having some difficulties.
Does anyone know how i can filter out all System queues?
I would have thought ensuring the "Show System Objects"icon was not selected would do this automatically, however this is not the case.
Furthermore the filter option only allows me to Filter IN queues not filter OUT, because the option "Queue Name" "Like" is mandatory. this means to view all my queues i must have a huge number of filters.
Does anyone know of anyway around this??
Thanks |
|
| Back to top |
|
 |
| pfarrel |
| Posted: Mon Apr 24, 2006 7:01 am Post subject: |
|
|
Centurion
Joined: 16 Mar 2004
Posts: 120
Location: Kansas City
|
I have 2 suggestions:
1. Change the Description field of the systems queues which cause a problem, to something like SYSTEM. Then build a filter which selected queues with "Description not equal to SYSTEM". ( let me know if you need help with this ).
I have done this, and it works ( for non- mqm users )
2. Wait for APAR IC49051, which will be in 6.0.2.0. This APAR will simply ignore the queues for which you don't have authority.
Here are the queues which present a problem:
SYSTEM.AUTH.DATA.QUEUE
SYSTEM.ADMIN.COMMAND.QUEUE
SYSTEM.DEFAULT.LOCAL.QUEUE
SYSTEM.DEFAULT.MODEL.QUEUE ( needed for AIX )
These are the ones that will need a different description field if you go with suggestion number 1 above.
You will need some grants for the non-mqm user, here are my suggestions:
setmqaut -m MQWX1 -t qmgr -p user1 +connect +inq +dsp
setmqaut -m MQWX1 -t q -n SYSTEM.DEFAULT.MODEL.QUEUE -p user1 +get +browse +inq +dsp +put
setmqaut -m MQWX1 -t q -n SYSTEM.ADMIN.COMMAND.QUEUE -p user1 +get +browse +inq +put
setmqaut -m MQWX1 -t q -n SYSTEM.ADMIN.QMGR.EVENT -p user1 +get +browse +inq +dsp
setmqaut -m MQWX1 -t channel -n ** -p user1 +dsp
setmqaut -m MQWX1 -t q -n ** -p user1 +dsp +inq +browse
setmqaut -m MQWX1 -t q -n SYSTEM.MQEXPLORER.** -p user1 +all
setmqaut -m MQWX1 -t prcs -n ** -p user1 +dsp
setmqaut -m MQWX1 -t listener -n ** -p user1 +dsp
setmqaut -m MQWX1 -t clntconn -n ** -p user1 +dsp
setmqaut -m MQWX1 -t service -n ** -p user1 +dsp
setmqaut -m MQWX1 -t nl -n ** -p user1 +dsp
Where user1 is a non-mqm user.
You might make this a group, to simplify adding new non-mqm users. |
|
| Back to top |
|
|
| lanny boy |
| Posted: Thu May 11, 2006 12:41 am Post subject: |
|
|
Voyager
Joined: 24 Nov 2003
Posts: 79
Location: UK
|
Hi pfarrell,
thanks very much for your reply. Aplogies for the delay in getting back to you, i have been away for a while.
Your reply was very helpful and offers some good workarounds for me in a test environment. However i think we will wait until 6.0.2 before we can roll out explorer for production support/monitoring users
Thanks again. |
|
| Back to top |
|
|
| Tibor |
| Posted: Thu May 11, 2006 1:42 am Post subject: |
|
|
Grand Master
Joined: 20 May 2001
Posts: 1033
Location: Hungary
|
| pfarrel wrote: |
| ...You might make this a group, to simplify adding new non-mqm users. |
It is highly recommended using groups and not users when you run setmqaut on unix, because the authority system is group-based. Just ask the rights after granting...
Tibor |
|
| Back to top |
|
|
| hdykens |
| Posted: Fri Feb 29, 2008 5:34 am Post subject: non-mqm Explorer view of QREMOTE QALIAS and RECVR Channels |
|
|
Newbie
Joined: 29 Feb 2008
Posts: 1
|
Is this fixed with the FIX?
Is this ever going to be fixed? |
|
| Back to top |
|
|
| manicminer |
| Posted: Fri Feb 29, 2008 6:07 am Post subject: Re: non-mqm Explorer view of QREMOTE QALIAS and RECVR Channe |
|
|
Disciple
Joined: 11 Jul 2007
Posts: 177
|
| hdykens wrote: |
Is this fixed with the FIX?
Is this ever going to be fixed? |
Have you checked the fix list for the latest fix pack?
http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27007069
Search for the APAR mentioned above (IC49051) and discover that the fix went in, as mentioned, to 6.0.2.0
It only took about 1 min to find out  |
|
| Back to top |
|
|
|
|
