ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » WRKMQMLSR/ENDMQMLSR and *ALLOBJ authority on iSeries

Post new topic  Reply to topic
 WRKMQMLSR/ENDMQMLSR and *ALLOBJ authority on iSeries « View previous topic :: View next topic » 
Author Message
Hassan
PostPosted: Fri Apr 28, 2006 8:12 am    Post subject: WRKMQMLSR/ENDMQMLSR and *ALLOBJ authority on iSeries Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

Name . . . . . . . . . : WebSphere MQ
Version . . . . . . . : 6.0.1.0
CMVC level . . . . . . : p600-100-051012
BuildType . . . . . . : IKAP - (Production)

On the iSeries (AS/400) has anyone encountered problem(s) with issuing either a WRKMQMLSR or an ENDMQMLSR without *ALLOBJ auhtority? The User is part of QMQMADM group but still requires *ALLOBJ to either see the listeners using WRKMQMLSR or to end them.

Thanks!
Hassan

ps. Google provided no help.
Back to top
View user's profile Send private message
Toronto_MQ
PostPosted: Fri Apr 28, 2006 8:34 am    Post subject: Reply with quote

Master

Joined: 10 Jul 2002
Posts: 263
Location: read my name

Hi Hassan,

We're running 6.0.1.0 and my ID, which has QMQMADM as supplemental group profile, does not have *ALLOBJ - and I can issue these commands. Have you checked to ensure that QMQMADM has *USE for these commands (I can't imagine why it wouldn't)?

Display Object Authority

Object . . . . . . . : WRKMQMLSR Owner . . . . . . . : QSYS
Library . . . . . : QSYS Primary group . . . : *NONE
Object type . . . . : *CMD ASP device . . . . . : *SYSBAS

Object secured by authorization list . . . . . . . . . . . . : *NONE

Object
User Group Authority
*GROUP QMQMADM *USE

Cheers
Steve
Back to top
View user's profile Send private message
Hassan
PostPosted: Fri Apr 28, 2006 8:52 am    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

Thanks! Steve, strangely enough the user is not stopped from using the command. It is just that he cannot see any listeners on any of the Queue Managers without *ALLOBJ. It is as if the listeners are not running.

I have seen APARs for V5.2 & V5.3 suggesting there were some PTFs to fix this but nothing for V6.0

Display Object Authority

Object . . . . . . . : WRKMQMLSR Owner . . . . . . . : QSYS
Library . . . . . : QSYS Primary group . . . : *NONE
Object type . . . . : *CMD ASP device . . . . . : *SYSBAS

Object secured by authorization list . . . . . . . . . . . . : *NONE

Object
User Group Authority
*PUBLIC *EXCLUDE
QMQM *ALL
QMQMADM *USE
Back to top
View user's profile Send private message
Hassan
PostPosted: Fri Apr 28, 2006 10:23 am    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

Hi! Steve, is it possible for you to check the authorities on

/QIBM/UserData/mqm/qmgrs/QMANAGER_Name/listener

It's just a shot in the dark.

Thanks!
Back to top
View user's profile Send private message
Toronto_MQ
PostPosted: Fri Apr 28, 2006 12:37 pm    Post subject: Reply with quote

Master

Joined: 10 Jul 2002
Posts: 263
Location: read my name

You know, it's funny you mention it - now I see what you're saying.

Work with Listeners
06/04/28 16:34:12
Type options, press Enter.
2=Change Job 4=End Job 5=Display Job 7=Display Job Log

Opt Queue Manager Port

(No Jobs to display)

- even though I do have listeners up. Since V6, I've been going through the panels to display, stop and start them - with no issues. I'm not sure whay they wouldn't show up in WRKMQMLSR, either by design or by bug?

I assume you know how to get into them via the panels?

Work with MQ Listener objects
06/04/28 16:34:08
Queue Manager Name . . : xxxxxx

Type options, press Enter.
2=Change 3=Copy 4=Delete 5=Display 14=Start 15=End
18=Display authority 19=Grant authority 20=Revoke authority ...

Opt Name Status Port
LISTENER.TCP.1414 RUNNING 1414
SYSTEM.DEFAULT.LISTENER.TCP INACTIVE 0


Cheers
Steve
Back to top
View user's profile Send private message
Hassan
PostPosted: Fri Apr 28, 2006 7:43 pm    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

Exactly .... but the problem is that since an Id without *ALLOBJ cannot "see" these listeners it cannot end them either. We are trying to end these listeners through a pgm or a user defined menu option. I think IBM might have a magical PTF coming out soon. I'll update if I find out anything, I'd appreciate if you could do the same.

Thanks!
Hassan
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sat Apr 29, 2006 4:22 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Have you tried the
Code:
DISPLAY LSSTATUS(*)
command set in runmqsc (or as400 equivalent) under mqm authority?
Remember in 6.0 you can now manipulate listeners without being at os level.

_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Hassan
PostPosted: Mon May 01, 2006 5:28 am    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

Thanks fjb_saper. On the AS/400s RUNMQSC commands have to be submitted in batch from a text input file, these cannot be run interactively. However this is not a problem, the issue is starting & ending the listener.

Is there a way to start and end the listener wihtout being at the OS level?


Regards,
Hassan
Back to top
View user's profile Send private message
Hassan
PostPosted: Mon May 01, 2006 9:44 am    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

Just got confirmation from IBM. They "know" about it and is supposed to be fixed in Fix Pack 6.0.1.1 for iSeries/AS400s ETA is sometime in May 2006.


regards,
Hassan
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Mon May 01, 2006 5:23 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Hassan wrote:
Thanks fjb_saper. On the AS/400s RUNMQSC commands have to be submitted in batch from a text input file, these cannot be run interactively. However this is not a problem, the issue is starting & ending the listener.

Is there a way to start and end the listener wihtout being at the OS level?


Regards,
Hassan


Have you tried the runmqsc equivalent
Code:
start listener(lname)
stop listener(lname)


?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Toronto_MQ
PostPosted: Tue May 02, 2006 7:04 am    Post subject: Reply with quote

Master

Joined: 10 Jul 2002
Posts: 263
Location: read my name

I'm not sure I understand the issue; is it not sufficient to be able to see them and end them through the panels (option 27 against the queue manager) as I mentioned? You do *not* need *ALLOBJ to do this, it is effectively the same as the equivalent runmqsc command (not at the OS level).

Also, you *can* run RUNMQSC interactively, from v5.3 forward: option 26 on the queue manager. However, note that there is a bug with this in v6. When you enter the command processor it immediately kicks you out. This did work in 5.3, and is supposed to be fixed in 6.0.1.1 as well.

Cheers
Steve
Back to top
View user's profile Send private message
Hassan
PostPosted: Tue May 02, 2006 10:52 am    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

You are right Steve, MQSC can be run interactively even on 6.0.1.0 so we don't have to wait for 6.0.1.1 (I checked it and MQSC did not kick me out)

Interactive options will not work for us, as the developers need to stop and start the listeners from within their programs.
Why? you may ask.... I am asking the same question and have been "promised" a logical reply soon. If they manage to enlighten me I would share the wisdom with you.

As for the endmqmlsr and wrkmqmlsr for Ids without *ALLOBJ we will have to wait for 6.0.1.1

Cheers!
Hassan
Back to top
View user's profile Send private message
Toronto_MQ
PostPosted: Tue May 02, 2006 11:21 am    Post subject: Reply with quote

Master

Joined: 10 Jul 2002
Posts: 263
Location: read my name

You're right. I do have to ask why?

I would NEVER let developers have this sort of control. I can't think of any good reason to either.

Steve
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Tue May 02, 2006 12:27 pm    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

Hassan wrote:
as the developers need to stop and start the listeners from within their programs.
Why? you may ask.... I am asking the same question and have been "promised" a logical reply soon.

THIS I gotta hear!
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
Hassan
PostPosted: Fri May 05, 2006 6:06 am    Post subject: Reply with quote

Voyager

Joined: 01 Apr 2004
Posts: 81
Location: Toronto, Canada

As promised here's the explanation I got, and I am surprised that it does make some sense......

Our operations have been told a few million times to shut down the Queue Manager gracefully before ending the subsystem QMQM and/or IPLing the iSeries System, but we keep on having Ooops after Ooops. As a result we have suffered through damaged MQ objects, etc.

The developers are trying to optionize the shutdown procedures so the operators do not have access to command line and just go through a few options to shutdown the system.

I buy that and will wait for 6.0.1.1 to become available and check if the problem with *ALLOBJ is fixed.

Cheers!
Hassan
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » WRKMQMLSR/ENDMQMLSR and *ALLOBJ authority on iSeries
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.