| Author |
Message
|
| sfari |
 Posted: Wed Apr 21, 2004 10:50 pm Post subject: Deleting authority of invalid group |
 |
|
Centurion
Joined: 15 Apr 2003
Posts: 144
|
I had to change the name (string) of a UNIX-group the id (number) has been kept.
After this change we have set the same authorities for the new group name.
How can I delete the old authorities without switching back the group name?
With dmpmqaut it is still shown although the group does not exist anymore.
The command
| Quote: |
| setmqaut ..... -g oldgroup -all |
prints out
| Quote: |
| AMQ7026: A principal or group name was invalid |
.
How can I get rid off this authority zombie? |
|
| Back to top |
|
 |
| Michael Dag |
| Posted: Wed Apr 21, 2004 11:22 pm Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
it's either switch back to the old group and remove authority or
remove the queue and define it again...
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
| sfari |
| Posted: Thu Apr 22, 2004 2:36 am Post subject: |
|
|
Centurion
Joined: 15 Apr 2003
Posts: 144
|
Thanks, for the answer!
Could it be a problem to have such authorities for groups, which do not exist? If not I would just leave it for now! |
|
| Back to top |
|
|
| mrlinux |
| Posted: Thu Apr 22, 2004 12:50 pm Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
You shouldnt have to change anything if you are using the GID number from the old group.
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| sfari |
| Posted: Thu Apr 22, 2004 11:26 pm Post subject: |
|
|
Centurion
Joined: 15 Apr 2003
Posts: 144
|
| Hi Jeff, Do you mean to set the authorities using the GID number instead of the char string of the group. Is this possible? But to remove the old authority would still not work because that is defined with old string of the group, right? The GID of the old and the new name is the same. |
|
| Back to top |
|
|
| mrlinux |
| Posted: Fri Apr 23, 2004 5:14 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
No I mean the group name is resolved to a number (GID) and then setmqaut saves the number not the STRING.
Sample
/etc/group file
mqapp,20,userid
setmqaut -m QMGR_NAME -t qmgr -g mqapp +all
this resolves the mqapp to 20
/etc/group
mqNewApp,20,userid
No need to do anything.
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| sfari |
| Posted: Mon May 03, 2004 6:54 am Post subject: |
|
|
Centurion
Joined: 15 Apr 2003
Posts: 144
|
Hi Jeff
I was hoping that MQ saves the authorizations with GID number. But I don't think that's the case because it was really needed to redefine the authorizations with setmqaut in order the application continued to work.
This is what the dspmqaut says:
- - - - - - - -
profile: A.FILETRANS.FZK_UPLOAD
object type: queue
entity: filetrans
entity type: group
authority: get browse inq
- - - - - - - -
profile: A.FILETRANS.FZK_UPLOAD
object type: queue
entity: filetran
entity type: group
authority: get browse inq
- - - - - - - -
The user filetrans does not anymore exist in /etc/group file. Previously it had the same GID number as the current user filetran.
Thanks
Silvano |
|
| Back to top |
|
|
|
|
