|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
Disable REFRESH SSL option in MQ Explorer? |
« View previous topic :: View next topic » |
Author |
Message
|
mqjeff |
Posted: Fri Mar 26, 2010 4:22 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
JasonE wrote: |
Try 7.0.1.* and you should find there is appropriate checking on the user requesting the command.
5.3, 6.0 (and 7.0.0.*) did not do any checking (I presume, and its a guess, because readonly explorer wasnt considered since the product didnt easily provide it and hence users already had to have write access to the command queue) - the solution to this was therefore designed and implemented for 7.0.1. |
So the table in the v7 info center is out of date? |
|
Back to top |
|
 |
JasonE |
Posted: Fri Mar 26, 2010 5:28 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003 Posts: 1220 Location: Hursley
|
No idea - can you post a link to that please and I'll have a look!
... and can someone confirm we are talking about the same issue and give feedback on whether the same problem is reproducable at 7011 or not please? |
|
Back to top |
|
 |
tgow |
Posted: Mon Mar 29, 2010 10:22 am Post subject: |
|
|
Novice
Joined: 02 Dec 2004 Posts: 15 Location: Reston, VA
|
when we are saying "upgrade to 7+" is that upgrade explorer I assume? The qmgrs i need to run this on are 6.0.2.1. I currently have explorer 7.0 and the upgrade is causing me a bit of a headache because of the proxy we have in between me and the internet... it's a complicated auto configuring sorta thing.
[EDIT:]
I just upgraded explorer to 7.0.1* and I can still refresh security through the explorer going to a 6.0.2.1 QMGR. I just double checked my mqauth stuff and it's all what i listed previously. I have no permissions on channels at all, I cannot even see them in explorer. i only have dsp inq and connect on the qmgr. |
|
Back to top |
|
 |
mqjeff |
Posted: Mon Mar 29, 2010 10:48 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
No, what we're saying is that if you need any security checking on REFRESH SECURITY then you need to upgrade the qmgr to version 7.0.1.x.
The documentation for version 6.0 is correct, as far as I'm aware. It's only in 7.0.1.x that the command server was changed to do the same amount of checking that runmqsc does, which added checks for REFRESH SECURITY.
Using Explorer 7 to talk to a v6 qmgr won't change the fact that the v6 qmgr doesn't do this checking. |
|
Back to top |
|
 |
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|