| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| setmqaut on Windows 2000 |
« View previous topic :: View next topic » |
| Author |
Message
|
| roldancer |
 Posted: Wed May 12, 2004 3:34 am Post subject: setmqaut on Windows 2000 |
 |
|
Novice
Joined: 12 May 2004
Posts: 12
|
Hi All,
I have WebSphere MQ 5.2 installed on Windows 2000, I run setmqaut -m QMname -t queue -n QName -p userID -put , it run OK , but when I execute dspmqath -m QMName -t queue -n QName -p userdID , it doens't display authorization setting on QName for that usedID, I mean it display nothing .
Any idea ?
I used local users, domain users and I had the same output.
Thanks |
|
| Back to top |
|
 |
| jsware |
| Posted: Wed May 12, 2004 4:06 am Post subject: |
|
|
Chevalier
Joined: 17 May 2001
Posts: 455
|
When you say it displays nothing do you mean absolutely nothing, or do you mean it displays something like:
Entity userID has the following authorizations for object QName:
and then displays no authorisations?
What fixpak (CSD) level are you running at?
_________________
Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed May 12, 2004 4:24 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Didnt you mean
setmqaut -m QMname -t queue -n QName -p userID +put
If a user has no authentications, you cant remove put authentication from it? |
|
| Back to top |
|
|
| roldancer |
| Posted: Wed May 12, 2004 4:40 am Post subject: |
|
|
Novice
Joined: 12 May 2004
Posts: 12
|
Hi All,
Thanks for your help ....
I get the following output
------------
Entity userID has the following authorizations for object QName:
and then displays no authorisations?
------------
The user that I'm using to run setmqauth , it belongs to mqm group , with this user I can run runmqsc without problems.
Any idea or advice ?
I have WebSphere MQ 5.0 trial version , I downloaded it from IBM web site I din't apply any fixpack , the readme says CSD01 .
Thanks..... |
|
| Back to top |
|
|
| roldancer |
| Posted: Wed May 12, 2004 7:46 am Post subject: |
|
|
Novice
Joined: 12 May 2004
Posts: 12
|
Hi All,
The problem is that I'm using a QM created by WAS 5.0.2.X installation with in this environment I used Embedded MQ, after installin WebSphere MQ , and creating a new QM averything stated to work OK.
Thanks. |
|
| Back to top |
|
|
| sanvaranasi |
| Posted: Thu Aug 05, 2004 2:05 am Post subject: Same probelm on WIN2K with MQ5.3 CSD0 |
|
|
Novice
Joined: 24 Feb 2004
Posts: 10
Location: india
|
Hi,
I am having the same probelm in the sense that when i say setmqaut -m QLMQMGR -t queue -n PI.INCOMING -g NOOPEN -put the result shows successful. But when i do dspmqaut -m QLMQMGR -t queue -n PI.INCOMING -g NOOPEN it shows
Entity NOOPEN has the following authorizations for object PI.INCOMING:
What could be the problem please advise. I using MQ5.3 with CSD level 0 on WIN2K.
Rgds,
Sanjay |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Thu Aug 05, 2004 6:29 am Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hi,
Well, that makes sense. The 1st says command the group NOOPEN cannot do a put against the queue. In the second command it shows that the group cannot do a put (and nothing else either).
Think MQ security as a math equation with an absolute (ABS) function applied to it. i.e You start with zero security with group NOOPEN and you took away put. Hence, ABS(0 - 1) equals 0.
In other words, if you want the group to have some security, then you must give it. By default, all groups and / or users do not have any security setting in MQ except for mqm or MUSR_MQADMIN or qmqm (depending on the platform: Unix, Windows or OS/400).
Regards,
Roger Lacroix
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| kman |
| Posted: Thu Aug 05, 2004 8:11 pm Post subject: |
|
|
Partisan
Joined: 21 Jan 2003
Posts: 309
Location: Kuala Lumpur, Malaysia
|
I think there is a general confusion here.
The output from the dspmqaut command is to show the authority given, and will not show the authority not given.
In the sample posting here, the authority set was -put, which means 'do not give this userid a put authority on this queue on this queue manager'. Because it was set not to have put, when running command dspmqaut, the output will not show the authority. Had you give +put, then the dspmqaut will show you +put.
Simple reason for this. If you setmqaut +put only, then run the dspmqaut. If the command is to display everything including the authority not given, then you will have a very crowded output. e.g.,
+put -inq -browse -get -set ...
So it is good that it only show the given authority, and not the one taken away.  |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
