| Author |
Message
|
| dp111443 |
 Posted: Wed Feb 25, 2004 2:45 am Post subject: MQ Object Security |
 |
|
Voyager
Joined: 25 Feb 2004
Posts: 82
|
Hi everyone,
I'm a new user on this forum and glad I found it 
I have a slight issue. We are currently using BMC Patrol for MQ to carry out the administration for MQ. It is a fab tool, however it lacks options on setting up security.
You can setup MQ authorisation easily but only per object basis. Same as an setmqauth command if you like.
I have been given the job of adding a new login for our Helpdesk so they only have limited athorities to perform on MQ objects. As we already have several Queue Managers and lots of objects, is there an easier way of setting security on a selection of queues or channels. etc as a group rather than per object?
There may be a way of automating this using a script OR using the BMC Patrol Admin GUI. Not sure!!
I'm sure someone out there has already been here. Can anyone help?
Many thanks,
dp111443
_________________
Integration Design/Developer
IBM Certified System Administrator -
WebSphere MQ V5.3 |
|
| Back to top |
|
 |
| crossland |
| Posted: Wed Feb 25, 2004 3:21 am Post subject: |
|
|
Master
Joined: 26 Jun 2001
Posts: 248
|
Can't comment on BMC patrol. However, if you are looking to give access to a group of users to queues, this can be done using ACF2/RACF on the mainframe or setmquat on the distributed platforms.
Regards,
Tim Crossland
http://www.solent-consultancy.com |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed Feb 25, 2004 4:25 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Which platform? Generic profiles enables 5.3 distributed to eg.
setmqaut -m QM -t q -n SYS* -g fred +all (or something like that!) ie authorize all queues starting with "SYS" etc. |
|
| Back to top |
|
|
| dp111443 |
| Posted: Wed Feb 25, 2004 5:47 am Post subject: |
|
|
Voyager
Joined: 25 Feb 2004
Posts: 82
|
It's on unix platforms (HPUX and Solaris) and we have MQ 5.3.
I thought about using the setmqaut command to set per object but wasn't aware of the fact that you could do it on multiple objects (i.e. SYS*) like you mentioned.
Would i be able to do the following:
setmqaut -m QM -t q -n * -g fred +all
in other words - all q's on that QM?
Many thanks,
Dharmesh
_________________
Integration Design/Developer
IBM Certified System Administrator -
WebSphere MQ V5.3 |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed Feb 25, 2004 5:53 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
| As far as I know, yes (seemed to work here!). Not sure what happens with dynamic queues, but I guess (warning : big guess...!) they inherit their security from the model or the default queue. |
|
| Back to top |
|
|
| dp111443 |
| Posted: Wed Feb 25, 2004 6:40 am Post subject: |
|
|
Voyager
Joined: 25 Feb 2004
Posts: 82
|
Thanks for the information.
I have a few ideas what I can do...just a matter of implementing them now. Many thanks for your help.
_________________
Integration Design/Developer
IBM Certified System Administrator -
WebSphere MQ V5.3 |
|
| Back to top |
|
|
|
|
