| Author |
Message
|
| nandanbal |
 Posted: Fri Feb 27, 2009 6:36 am Post subject: mq authorities not getting set properly |
 |
|
Newbie
Joined: 16 Feb 2009
Posts: 4
|
I am trying to restrict the access for SYSTEM queues to application ids.
I am using
setmaut -m TESTQM -t queue -n "SYSTEM.**" -g grptest -all +inq
When I issue command on linux machine , and verify it using save authorities support pac i get -
setmqaut -m TESTQM -n SYSTEM.** -t queue -g grptest +inquire
Save authorities change to setamqut while saving the authorities..
I tried using SYSTEM.\*\*, 'SYSTEM.**' , ksh -c " the above command"
even tried to change the login SHELL to ksh.
Nothing is working out.
By issusing above command I am expecting only the inquire access should be set to all SYSTEM queues for the group grptest . Once getting success, I would further refine the access. |
|
| Back to top |
|
 |
| Toronto_MQ |
| Posted: Fri Feb 27, 2009 8:16 am Post subject: |
|
|
Master
Joined: 10 Jul 2002
Posts: 263
Location: read my name
|
I don't underetand your issue? It looks to me like the command you issued worked and the output from the supportpac is accurate.
What were you expecting? Or have I missed something? |
|
| Back to top |
|
|
| ramkumarm83 |
| Posted: Sat Feb 28, 2009 5:06 pm Post subject: |
|
|
Apprentice
Joined: 16 May 2007
Posts: 27
|
Hi,
AFAIK, By default mqm group only have the permission for System queues. other user should not have...
Check using the command amqoamd -m queue_manager_name -s or dspmqaut , whether the authorization setup properly or not. |
|
| Back to top |
|
|
| MQEnthu |
| Posted: Sun Mar 01, 2009 10:27 pm Post subject: |
|
|
Partisan
Joined: 06 Oct 2008
Posts: 329
Location: India
|
Are you sure that the user is not a member of MQM group or any other group?
Please note that if a user is a member of multiple groups and if the groups have conflicting authorization levels then you will not be able to reset the authorization. The user will have authorization even if one of the groups has been given access.
_________________
-----------------------------------------------
It is good to remember the past,
but don't let past capture your future |
|
| Back to top |
|
|
| vol |
| Posted: Sun Mar 01, 2009 10:47 pm Post subject: |
|
|
Acolyte
Joined: 01 Feb 2009
Posts: 69
|
| I do not think that the save auth support pack lists - auths, only the + ones, and assumes that no auth are set to start with, so the +inq auth for the user is correct. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Mar 02, 2009 7:39 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9471
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| AFAIK, By default mqm group only have the permission for System queues. other user should not have... |
MQM system admin group has all authority to all mq objects.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
