ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Can you check authorizations to access a particular object?

Post new topic  Reply to topic
 Can you check authorizations to access a particular object? « View previous topic :: View next topic » 
Author Message
Paddy
PostPosted: Thu Jan 09, 2003 4:20 am    Post subject: Can you check authorizations to access a particular object? Reply with quote

Newbie

Joined: 09 Jan 2003
Posts: 2

Hi,

I'm looking for a way to check which principals/user groups have authorization to access to a particular object.
I'm not a regular MQSeries user and am approching this from a security point of view.

Thanks,

Paddy.
Back to top
View user's profile Send private message
mqonnet
PostPosted: Thu Jan 09, 2003 6:07 am    Post subject: Reply with quote

Grand Master

Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.

I am afraid there is no such utility that would give you a page full of details with only one command specifying all the users and the authorities on each object on the qm in question.

You have to manually check for each principal/group for each mq object.

And you could do this using SETMQAUT command.


Cheers.
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator
Back to top
View user's profile Send private message Send e-mail Visit poster's website
markt
PostPosted: Thu Jan 09, 2003 7:27 am    Post subject: Reply with quote

Knight

Joined: 14 May 2002
Posts: 508

The dmpmqaut command gives you that with V5.3.
Back to top
View user's profile Send private message
nimconsult
PostPosted: Thu Jan 09, 2003 11:21 pm    Post subject: Reply with quote

Master

Joined: 22 May 2002
Posts: 268
Location: NIMCONSULT - Belgium

On MQ 5.2, the command amqoamd is what you are looking for.

See http://www.mqseries.net/phpBB2/viewtopic.php?t=4766

Nicolas
_________________
Nicolas Maréchal
Senior Architect - Partner

NIMCONSULT Software Architecture Services (Belgium)
http://www.nimconsult.be
Back to top
View user's profile Send private message Send e-mail Visit poster's website
mqonnet
PostPosted: Fri Jan 10, 2003 5:58 am    Post subject: Reply with quote

Grand Master

Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.

I never knew that there was such a util. Thanks nicolas for sharing that with us.

But i guess it is platform specific as it is not available on all platforms. Nor does Family books have any mention of it.

Cheers.
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Paddy
PostPosted: Tue Jan 14, 2003 2:07 am    Post subject: Reply with quote

Newbie

Joined: 09 Jan 2003
Posts: 2

Thanks for all your help.

Regards,

Paddy.
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Wed Dec 10, 2003 8:40 am    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

Anyone figure a way to pipe all this output to a text file? On Windows2000, if I run the following command:

E:\>dmpmqaut -m HIGHUBDA -p mqiptccc>out.txt

It creates an empty file called out.txt, but all the aut info still goes to the screen.
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
bower5932
PostPosted: Wed Dec 10, 2003 9:03 am    Post subject: Reply with quote

Jedi Knight

Joined: 27 Aug 2001
Posts: 3023
Location: Dallas, TX, USA

Try something like:

dmpmqaut -m HIGHUBDA -p mqiptccc 2>out.txt
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address Yahoo Messenger
mrlinux
PostPosted: Wed Dec 10, 2003 10:28 am    Post subject: Reply with quote

Grand Master

Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA

It writes all of the data to STDERR which goes to the screen in order
to redirect stderr you need to use 2> fileName.

There are 3 default handles opened up
0) STDIN
1) STDOUT
2) STDERR
_________________
Jeff

IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries
Back to top
View user's profile Send private message Send e-mail
Zus
PostPosted: Tue Dec 23, 2003 11:33 am    Post subject: Reply with quote

Newbie

Joined: 23 Dec 2003
Posts: 1

Hi,

try dspmqaut command.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Can you check authorizations to access a particular object?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.