| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ Permissions on AIX |
« View previous topic :: View next topic » |
| Author |
Message
|
| pfarrel |
 Posted: Fri Apr 15, 2005 7:07 am Post subject: MQ Permissions on AIX |
 |
|
Centurion
Joined: 16 Mar 2004
Posts: 120
Location: Kansas City
|
I am running into problems managing the MQ permissions on my queue manager on AIX. IBM appears to store the permissions against the primary group on this platform. This means that if I do a setmqaut on a principal, all other principals in the same primary group get the permission.
To circumvent this apparent problem, I have requested that all userids that access MQ have a unique primary group. ( hopefully, this is a good idea ). I appear to be getting into trouble because other people have been issuing the setmqaut, and I don't know the effects of what they have done.
I would like to list off the security settings to audit them. However, the dspmqaut command appears to need a specific object name. I don't see how to use it to list off all the security currently in force.
Can anyone share their experience on the AIX platform, and make any suggestions please ? |
|
| Back to top |
|
 |
| malammik |
| Posted: Fri Apr 15, 2005 7:12 am Post subject: |
|
|
Partisan
Joined: 27 Jan 2005
Posts: 397
Location: Philadelphia, PA
|
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Fri Apr 15, 2005 8:31 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
|
| Back to top |
|
|
| Nigelg |
| Posted: Fri Apr 15, 2005 11:43 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
| Quote: |
| IBM appears to store the permissions against the primary group on this platform. |
Does this surprise you? It shouldn't, because this is published behaviour. RTFM before moaning. |
|
| Back to top |
|
|
| pfarrel |
| Posted: Mon Apr 18, 2005 5:50 am Post subject: |
|
|
Centurion
Joined: 16 Mar 2004
Posts: 120
Location: Kansas City
|
Here is what my manual says on the subject:
Note: In WebSphere MQ for UNIX systems, if you specify a set of authorizations
for a principal, the same authorizations are given to all principals in the
same primary group.
I suppose one could conclude that this means that the authorizations are stored by group.
Anyway, this was not a "moan", I was looking for assistance.
The amqoamd command appears to provide a lot of help. Thanks to the person who provided that reference. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
