ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » How to add new user authorities on WMQ 6 that under MSCS?

Post new topic  Reply to topic
 How to add new user authorities on WMQ 6 that under MSCS? « View previous topic :: View next topic » 
Author Message
KoGor
PostPosted: Thu Sep 26, 2013 7:26 am    Post subject: How to add new user authorities on WMQ 6 that under MSCS? Reply with quote

Voyager

Joined: 09 Nov 2005
Posts: 81
Location: Moscow,Russia.

Recently, I have faced with unexpected WMQ behavior.
Customer has WMQ 6 that runs on Windows 2003 EE R2 under MSCS control. There is simple two node cluster, nothing special.
There was a necessity to add to the queue manager and several queues special authorities for the local group.
I didn't find in WMQ documentation any requirements for MSCS cluster so we did it as usual.
1) Create group "MDUsers" on both Windows servers
2) Create couple users and add them to the group "MDUsers", again on both servers
3) Then I assigned special authorities to the MQ manager and queues o one server.
4) Checked access from external MQ Client, new authorities work just fine.
5) Then I moved MQ manager to the second MSCS node and checked authorities there. I was surprised but there wasn't any. So I have returned MQ Manager to the first node and authorities were there.

So I puzzled a little bit. It looks like I must set special authorities on both MSCS nodes. Am I right? As I said I didn't find any recommendations in Info Center yet.

Where do WMQ Object authority manager store the authority information then? Do each MSCS node has its own OAM or after all it is on shared disk where WMQ data and logs located?

Thank you in advance!
Back to top
View user's profile Send private message
JosephGramig
PostPosted: Thu Sep 26, 2013 10:59 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA

The authority is recorded by SID. The SID is different on the two boxes. Repeat the grants once failed over.

Or, use UNIX and don't have this problem.
Back to top
View user's profile Send private message AIM Address
fjb_saper
PostPosted: Thu Sep 26, 2013 11:24 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

When using the cluster you should only be using domain ids and groups
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » How to add new user authorities on WMQ 6 that under MSCS?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.