ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Disable REFRESH SSL option in MQ Explorer?

Post new topic  Reply to topic Goto page Previous  1, 2
 Disable REFRESH SSL option in MQ Explorer? « View previous topic :: View next topic » 
Author Message
mqjeff
PostPosted: Fri Mar 26, 2010 4:22 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

JasonE wrote:
Try 7.0.1.* and you should find there is appropriate checking on the user requesting the command.

5.3, 6.0 (and 7.0.0.*) did not do any checking (I presume, and its a guess, because readonly explorer wasnt considered since the product didnt easily provide it and hence users already had to have write access to the command queue) - the solution to this was therefore designed and implemented for 7.0.1.


So the table in the v7 info center is out of date?
Back to top
View user's profile Send private message
JasonE
PostPosted: Fri Mar 26, 2010 5:28 am    Post subject: Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

No idea - can you post a link to that please and I'll have a look!

... and can someone confirm we are talking about the same issue and give feedback on whether the same problem is reproducable at 7011 or not please?
Back to top
View user's profile Send private message
tgow
PostPosted: Mon Mar 29, 2010 10:22 am    Post subject: Reply with quote

Novice

Joined: 02 Dec 2004
Posts: 15
Location: Reston, VA

when we are saying "upgrade to 7+" is that upgrade explorer I assume? The qmgrs i need to run this on are 6.0.2.1. I currently have explorer 7.0 and the upgrade is causing me a bit of a headache because of the proxy we have in between me and the internet... it's a complicated auto configuring sorta thing.

[EDIT:]
I just upgraded explorer to 7.0.1* and I can still refresh security through the explorer going to a 6.0.2.1 QMGR. I just double checked my mqauth stuff and it's all what i listed previously. I have no permissions on channels at all, I cannot even see them in explorer. i only have dsp inq and connect on the qmgr.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Mon Mar 29, 2010 10:48 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

No, what we're saying is that if you need any security checking on REFRESH SECURITY then you need to upgrade the qmgr to version 7.0.1.x.

The documentation for version 6.0 is correct, as far as I'm aware. It's only in 7.0.1.x that the command server was changed to do the same amount of checking that runmqsc does, which added checks for REFRESH SECURITY.

Using Explorer 7 to talk to a v6 qmgr won't change the fact that the v6 qmgr doesn't do this checking.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Goto page Previous  1, 2 Page 2 of 2

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » Disable REFRESH SSL option in MQ Explorer?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.