| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Refresh Authorization Service from Command Line |
« View previous topic :: View next topic » |
| Author |
Message
|
| abiondo |
 Posted: Tue Oct 07, 2008 1:56 pm Post subject: Refresh Authorization Service from Command Line |
 |
|
Novice
Joined: 30 Aug 2007
Posts: 21
Location: Philadelphia, PA
|
I wrote a script to grant authorizations to queue manager and queues for specific teams, but I think I need to refresh the Authorization Service after the permissions have been updated. Is there a way to refresh this service from the command line? I am on Windows 2003 platform.
thanks,
Anthony
_________________
Anthony J Biondo Jr
Manager, Web Services
AmeriHealth Mercy |
|
| Back to top |
|
 |
| PeterPotkay |
| Posted: Tue Oct 07, 2008 2:27 pm Post subject: Re: Refresh Authorization Service from Command Line |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| abiondo wrote: |
| I wrote a script to grant authorizations to queue manager and queues for specific teams, but I think I need to refresh the Authorization Service after the permissions have been updated. |
You don't.
Only if you changed group permissions do you need to refresh security with the REFRESH SECURITY command in runmqsc. If you are changing things with setmqaut commands, the changes are made immediatly.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| abiondo |
| Posted: Tue Oct 07, 2008 2:31 pm Post subject: |
|
|
Novice
Joined: 30 Aug 2007
Posts: 21
Location: Philadelphia, PA
|
Thanks. I appreciate the answer. I have another one, that has been causing trouble for us.
We have a Windows 2003 Cluster Active/Passive with MQ on both systems. If I try to use groupname@domain it does not seem to work for getting the users access to the queues and qm.
I did notice that the MQ Service is running under a local user. The thing that is strange is that domain users can be granted access.
If anyone can help it would be much appreciated.
thanks,
Anthony
_________________
Anthony J Biondo Jr
Manager, Web Services
AmeriHealth Mercy |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Tue Oct 07, 2008 2:50 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
When dealing with a QM running under MSCS, you have to grant all the setmqaut commands against domain IDs. Under the covers MQ is holding the info against the SID, which is different across servers even if the locally defined "friendly name" is the same. But a domain ID has the same SID across all servers, so your setmqaut info held by the QM will be valid regardless of which cluster node it comes up on.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
