| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Trying to do SaveQMgr with minimum permissions |
« View previous topic :: View next topic » |
| Author |
Message
|
| JKulcyk |
 Posted: Tue Jun 16, 2009 10:22 am Post subject: Trying to do SaveQMgr with minimum permissions |
 |
|
Novice
Joined: 24 Apr 2009
Posts: 16
|
I have created a service ID on all our systems with which to do SaveQMgr pulls from a central location. I am trying to give this id the least amount of permissions possible (+dsp), but am running into troubles.
I tried giving it +all permssions on everything, but am still getting a 2035 error at the point SaveQMgr tries to report Auth data. From a recent post by PeterPotkay:
| PeterPotkay wrote: |
| It's a known issue / feature of MQ: only users in the mqm group can do anything against the 'SYSTEM.AUTH.DATA.QUEUE' queue, even harmless things like +dsp. Annoying. |
Does this mean that the ID needs to belong to the mqm group? If that is true, if I remove permissions from that id (-all +dsp) will those permissions be effective, or if the id is in the mqm group does that override permissions?
Thanks in advance.
-John |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Tue Jun 16, 2009 10:57 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
SYSTEM.AUTH.DATA.QUEUE is unavailable to anyone not in mqm.
Nothing done with setmqaut applies to users in mqm. |
|
| Back to top |
|
|
| JKulcyk |
| Posted: Tue Jun 16, 2009 11:05 am Post subject: SaveQMgr Permissions |
|
|
Novice
Joined: 24 Apr 2009
Posts: 16
|
| mqjeff wrote: |
SYSTEM.AUTH.DATA.QUEUE is unavailable to anyone not in mqm.
Nothing done with setmqaut applies to users in mqm. |
So if I understand it correctly, the only way to inquire on permissions is from a user who has unlimited permissions.
Not the answer I wanted, but I'll deal with it. Thanks for your help! |
|
| Back to top |
|
|
| exerk |
| Posted: Wed Jun 17, 2009 12:34 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
If you look in the Readme for MS03, it gives you instructions on how to run it as a service within WMQ...might be a partial answer to your problem.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
