| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
| No security configured but user not authorized to runmqsc |
« View previous topic :: View next topic » |
| Author |
Message
|
| User100 |
 Posted: Mon Jan 10, 2011 11:14 pm Post subject: |
 |
|
Novice
Joined: 10 Jan 2011
Posts: 13
Location: Berlin, Germany
|
So now I have altered the qmgr value AUTHOREV to (ENABLED) and tried again to access the runmqsc...
Only a message in the SYSTEM.ADMIN.QMGR.EVENT.msgs is generated but without helpful information 
The SYSTEM.AUTH.DATA.QUEUE has no new messages!
A VER 2
A RPT 0
A MST 8
A EXP -1
A FDB 0
A ENC 546
A CCS 819
A FMT MQEVENT
A PRI 0
A PER 0
A MSI 414D5120475044532E514D475220202083B92A4D11260020
A COI 000000000000000000000000000000000000000000000000
A BOC 0
A RTQ
A RTM GPDS.QMGR
A USR
A ACC 0000000000000000000000000000000000000000000000000000000000000000
A AID
A PAT 7
A PAN GPDS.QMGR
A PTD 20110111
A PTT 07094178
A AOD
A GRP 000000000000000000000000000000000000000000000000
A MSQ 1
A OFF 0
A MSF 0
A ORL -1
X 0700000024000000010000002C000000010000000100000001 <....$.......,............>
X 000000F3070000050000000400000044000000DF0700000000 <...............D.........>
X 000030000000475044532E514D475220202020202020202020 <..0...GPDS.QMGR >
X 20202020202020202020202020202020202020202020202020 < >
X 202020200300000010000000FC030000010000000400000020 < .................... >
X 000000D10B0000000000000C0000006E77656964656D612020 <...............user >
X 20200300000010000000010000000600000004000000300000 < ....................0..>
X 00D00B0000000000001C00000072756E6D7173632020202020 <.............runmqsc >
X 20202020202020202020202020202020 < > |
|
| Back to top |
|
 |
| skoobee |
| Posted: Mon Jan 10, 2011 11:58 pm Post subject: |
|
|
Acolyte
Joined: 26 Nov 2010
Posts: 52
|
[quote]Could this be the problem?
user@server:/opt/mqm/bin> ls -la | grep runmqsc
-r-xr-x--- 1 mqm mqm 17209 2010-08-12 15:32 runmqsc
[/quote]
Yes, this is the problem. To execute runmqsc you must be in the mqm group, and the effective user must be mqm. This is done by setting the setuid/setgid (NOT sticky!) bits on the binary.
Somebody has altered these permissions, either by using chmod, or perhaps by copying the binary.
Many other binary and library files in WMQ need the setuid/setgid bits set. The easiest solution would be to uninstall WMQ and reinstall, so the correct permissions are set on all the files. |
|
| Back to top |
|
|
| User100 |
| Posted: Tue Jan 11, 2011 12:12 am Post subject: |
|
|
Novice
Joined: 10 Jan 2011
Posts: 13
Location: Berlin, Germany
|
Thank you for your help 
I have now set the SUID and GUID for runmqsc with chmod u+s,g+s runmqsc and it works.
I don't know who has set these wrong permissions... but now it is ok for me, having a lot of other things to do 
So see you next time
greetings from Berlin |
|
| Back to top |
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
