| Author |
Message
|
| Blomman |
 Posted: Wed Feb 14, 2007 2:45 am Post subject: Accounts + HPUX |
 |
|
Master
Joined: 31 Oct 2006
Posts: 230
|
Hi!
Running MQ 5.3 on HPUX 11..
Having these accounts: mqm, mqbrk, mquser and the accounts having passwords, i usally log in as root and then su - mqm without having to use password, but at password was set creating these accounts.
Now i want too lock these accounts and my question is, will it affect MQ in some way?
Best Regards!
/Micke |
|
| Back to top |
|
 |
| dgolding |
| Posted: Wed Feb 14, 2007 4:32 am Post subject: |
|
|
Yatiri
Joined: 16 May 2001
Posts: 668
Location: Switzerland
|
Depends what you mean by locked - if you mean to block people logging directly on to it, so access is *only* via. "su". This is a normal procedure.
Just remember in your startup scripts on reboot to do a "su - mqm -c <start_qmgr_script> |
|
| Back to top |
|
|
| Blomman |
| Posted: Wed Feb 14, 2007 5:03 am Post subject: |
|
|
Master
Joined: 31 Oct 2006
Posts: 230
|
| dgolding wrote: |
Depends what you mean by locked - if you mean to block people logging directly on to it, so access is *only* via. "su". This is a normal procedure.
Just remember in your startup scripts on reboot to do a "su - mqm -c <start_qmgr_script> |
yes this is what i mean idont want the accounts to be able to log in directly, ok then i can lock them..
Yepp my scripts use "su -c mqm <strmqm_etc>"
/Micke |
|
| Back to top |
|
|
| dgolding |
| Posted: Wed Feb 14, 2007 5:06 am Post subject: |
|
|
Yatiri
Joined: 16 May 2001
Posts: 668
Location: Switzerland
|
| su - mqm -c is better, the first "-" ensures that the .profile is run so all PATHs are set up correctly (for instance) |
|
| Back to top |
|
|
| Blomman |
| Posted: Wed Feb 14, 2007 5:33 am Post subject: |
|
|
Master
Joined: 31 Oct 2006
Posts: 230
|
| dgolding wrote: |
| su - mqm -c is better, the first "-" ensures that the .profile is run so all PATHs are set up correctly (for instance) |
Yepp u right, i typed it wrong..
So i can now lock mqm, mgbrk etc using "passwd -l mqm" without any affect?
Just want too be 100% sure that no problems occure.
/Micke |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Feb 14, 2007 5:59 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
There's some stuff in the support information for Broker about locking accounts.
You might not be able to do this on all platforms.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| dgolding |
| Posted: Wed Feb 14, 2007 6:00 am Post subject: |
|
|
Yatiri
Joined: 16 May 2001
Posts: 668
Location: Switzerland
|
Well, there will be an effect, you won't be able to log into those accounts....
But AFAIK you should be OK for MQ running with the account locked - it spawns other processes directly via. fork() [AFAIK] so this should be OK.
I suppose similar for "mqbrk" and "mquser" but I don't use those so I can't tell you. Good luck....
E&OE [Errors & Omissions Excluded] |
|
| Back to top |
|
|
| Blomman |
| Posted: Wed Feb 14, 2007 6:34 am Post subject: |
|
|
Master
Joined: 31 Oct 2006
Posts: 230
|
| jefflowrey wrote: |
There's some stuff in the support information for Broker about locking accounts.
You might not be able to do this on all platforms. |
Can u show me where to find this "support information for Broker" i cant find it.
/Micke  |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Feb 14, 2007 6:38 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
|
| Back to top |
|
|
|
|
