ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Command Catch !!!!

Post new topic  Reply to topic
 Command Catch !!!! « View previous topic :: View next topic » 
Author Message
abiram8
PostPosted: Sun Jul 14, 2002 7:56 am    Post subject: Command Catch !!!! Reply with quote

Master

Joined: 27 Mar 2002
Posts: 207
Location: India

Hi,

I have the following Scenario its purely related to Unix Command in our application n nos of persons knows root uid & pwd (Admin rights) At a time all are connected to AIX Server

If some one issues the command say endmqm or strmqm etc .., in this case I want to know which user has issued this command since all N member are logged in as a root so "who" or any simple command will not be helpful

My requirment is sitting in my seat & only using my telnet session I want to know Which Machine (or which IP Address) has issued endmqm or strmqm

I tried in many ways since all the N people have the same uid & pwd of root I couldnot get it


If some one who knows such command please let me know

Thanks
R.Abiram
Back to top
View user's profile Send private message Send e-mail
bduncan
PostPosted: Sun Jul 14, 2002 11:02 am    Post subject: Reply with quote

Padawan

Joined: 11 Apr 2001
Posts: 1554
Location: Silicon Valley

I would recommend putting all these people in the mqm group, and requiring them to log in as themselves whenever issuing strmqm or endmqm. It's bad system administration to allow n number of people to log in with the same account. root is a special case, but nobody should ever log in as root anyways. If anyone needs to do things that only root can do, they should have 'sudo' access. This way, I log in as say bduncan, I issue 'sudo endmqm' and assuming I have sudo access, the system log will say "at such and such a time, user bduncan issued the sudo command: endmqm" etc...
_________________
Brandon Duncan
IBM Certified MQSeries Specialist
MQSeries.net forum moderator
Back to top
View user's profile Send private message Visit poster's website AIM Address
abiram8
PostPosted: Mon Jul 15, 2002 1:45 am    Post subject: Reply with quote

Master

Joined: 27 Mar 2002
Posts: 207
Location: India

Hi,

Thanks for the diffrent & the best solutions but the problem here application is Distributed Application & around the N Countries same application implemented in diffrent countries all the Administrator have same login as root & work with the main Back up server if there is problem

otherwise they work independently in their own server

Is there Solution to my problem as I have posted remember say mqsilist gives which lists QM is connected to which Broker

same way is there any command in UNIX which lists me which Host or Telnet has issued which Commands


Thanks
R.Abiram
Back to top
View user's profile Send private message Send e-mail
mrlinux
PostPosted: Mon Jul 15, 2002 6:23 am    Post subject: Reply with quote

Grand Master

Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA

Well I have to agree with bduncan, you should consider following his Ideas.

But you could solve your problem by getting a copy of the telnetd source
and modifing it to log endmqm/strmqm commands.

The other option is to change the names of the commands strmqm/endmqm and place scripts in there place that will log the info
you need and then call the new name of strmqm/endmqm.
_________________
Jeff

IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries
Back to top
View user's profile Send private message Send e-mail
abiram8
PostPosted: Mon Jul 15, 2002 11:28 am    Post subject: Reply with quote

Master

Joined: 27 Mar 2002
Posts: 207
Location: India

Hi,

Thanks for great ideas I will surely implement both in case of best posibilities since all the instructions are given by the Client & we need to follow & come up with the diffrent solutions as you know

Thanks Any way I will try as you both instructed



R.Abiram
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Command Catch !!!!
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.