| Author |
Message
|
| mqrules |
 Posted: Wed Nov 22, 2006 7:42 am Post subject: Basic MQ authority question -- urgent |
 |
|
Centurion
Joined: 01 Jun 2005
Posts: 100
Location: US
|
QM1 (on server1-Windows) -- > QM2 (hopping qmgr on server2-UNIX) -- > QM3 (on server3-UNIX).
There are SDR-RCVR channels between QM1 & QM2, QM2 and QM3.
If I put a message under the userid user123 (via client connection) to a remote queue Q1 on QM1, and the message is supposed to end up on Q3 on QM3, does the user123 need put authority on QM2 and QM3 as well? I thought so. But I am told that it is not required, user123 only needs to put auth on the remote queue Q1. Is it true?
Thanks!!!
MR |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Wed Nov 22, 2006 7:44 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
What happens when you try it?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| mqrules |
| Posted: Wed Nov 22, 2006 7:47 am Post subject: |
|
|
Centurion
Joined: 01 Jun 2005
Posts: 100
Location: US
|
| Unfortunately I cannot try it between the servers. I tried it only on my own computer. the userid of the MQMD flows thru. So I assume it needs auth on all the qmgrs on the way --in clusding the source and the target qmgrs. |
|
| Back to top |
|
|
| mqrules |
| Posted: Wed Nov 22, 2006 8:06 am Post subject: |
|
|
Centurion
Joined: 01 Jun 2005
Posts: 100
Location: US
|
| If the MCAUSER is blank on the RCVR channel then the userid in the MQMD of the msg should have a put auth on the destination queue. But I am told that the msgs are put by the RCVR MCA with the authority of the id that the MQ is running under. True? Any ideas ,please??? |
|
| Back to top |
|
|
| killer |
| Posted: Wed Nov 22, 2006 8:26 am Post subject: |
|
|
Apprentice
Joined: 06 Jul 2006
Posts: 35
|
It's fine.You don't need to set authority to Q3.
The Q in which U are putting the message ,onlt in that authority is required. |
|
| Back to top |
|
|
| bbburson |
| Posted: Wed Nov 22, 2006 8:29 am Post subject: |
|
|
Partisan
Joined: 06 Jan 2004
Posts: 378
Location: Nowhere near a queue manager
|
mqrules,
An interesting experiment for a slow pre-holiday day. I set up a multihop test like you describe:
QM1 QR(MULTIHOP) RNAME(MULTIHOP) RQMNAME(QM2)
-- add authorization for my non-mqm userid +put
QM2 QR(MULTIHOP) RNAME(MULTIHOP) RQMNAME(QM3)
-- no authorization for my non-mqm userid
QM3 QL(MULTIHOP)
-- my non-mqm userid DOESN'T EVEN EXIST on this server
I put a message to the QR on QM1, and it winds up on the QL on QM3. Browse it with the MA01 q utility and I see my non-mqm userid in the MQMD UserId field.
Hope this helps.
-BTW, this post takes me to "master" which as jeff points out means what it means.  |
|
| Back to top |
|
|
| mqrules |
| Posted: Wed Nov 22, 2006 8:42 am Post subject: |
|
|
Centurion
Joined: 01 Jun 2005
Posts: 100
Location: US
|
Killer and bbburson: Thank you soooo much....
MR |
|
| Back to top |
|
|
|
|
