| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Can Accees the QM after disabling mcauser |
« View previous topic :: View next topic » |
| Author |
Message
|
| xtreme_machine |
 Posted: Thu Oct 18, 2007 12:38 am Post subject: Can Accees the QM after disabling mcauser |
 |
|
Novice
Joined: 17 Sep 2007
Posts: 23
|
Hi Guys,
we are on AIX 5.2MQ 5.3 CSD11
I just altered my SYSTEM.DEF.SVRCONN CHANNEL to have mcauser as nobody. I stopped and then started the channel. To test, I tried putting a message from other user in the same as mqm, and it was able to access.
My question is
1. can mqm user id still access the QM through the SVRCONN CHANNEL
as i tested from mqm id from different system and was able to access the same. i did a refresh security also ?
what i am doing wrong ?
or i am missing something on the concept that mqm will always able to access the QM t no matter what mcauser id u set.
i dont think it should be the case.. or else it will be disaster...
thx |
|
| Back to top |
|
 |
| Vitor |
| Posted: Thu Oct 18, 2007 12:42 am Post subject: Re: Can Accees the QM after disabling mcauser |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| xtreme_machine wrote: |
| To test, I tried putting a message from other user in the same as mqm, and it was able to access. |
The same what? Group? Unix permissions are at group level AFAIK
How did you do the put? Are you certain it was a client connection via that channel?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| xtreme_machine |
| Posted: Thu Oct 18, 2007 12:59 am Post subject: |
|
|
Novice
Joined: 17 Sep 2007
Posts: 23
|
hi vitor,
i used mqm group id only but from different machine
$export MQSERVER="SYSTEM.DEF.SVRCONN/tcp/IP ADDRESS WHERE QM IS RUNNING(PORT NO WHERE MQ IS RUNNING)"
$amqsput <qname> QMNAME |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Oct 18, 2007 1:06 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| xtreme_machine wrote: |
$export MQSERVER="SYSTEM.DEF.SVRCONN/tcp/IP ADDRESS WHERE QM IS RUNNING(PORT NO WHERE MQ IS RUNNING)"
$amqsput <qname> QMNAME |
amqsput runs against a local queue manager, which may well have a link to your target.
If you want to test the client connection, use amqsputc
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| xtreme_machine |
| Posted: Thu Oct 18, 2007 1:12 am Post subject: |
|
|
Novice
Joined: 17 Sep 2007
Posts: 23
|
Hi Vitor,
100/100 to you. you were right !! thanks for showing the way!!
thx |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
