| Author |
Message
|
| jefflowrey |
 Posted: Tue Mar 16, 2004 7:59 am Post subject: amqmdain refresh |
 |
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
What exactly does the command
refresh?
It's not documented as an option in the System Administration Guide, but
| Quote: |
C:\>amqmdain -noSuchOption
5724-B41 (C) Copyright IBM Corp. 1994, 2002. ALL RIGHTS RESERVED.
Usage: amqmdain [command] [queuemanager] [options]
Where [command] is one of:
crtlsr
crtchi
crttrm
auto
manual
refresh
status
start
end
cstmig
regsec
spn
reg
|
| Code: |
C:\>mqver
Name: WebSphere MQ
Version: 530.5 CSD05
CMVC level: p530-05-L030926
BuildType: IKAP - (Production) |
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
 |
| JasonE |
| Posted: Tue Mar 16, 2004 8:30 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
| Hmmm - Nothing... literally (no code there at all). Basically the initialization code of amqmdain drives an init method of the dcomobject, and thats what refresh was 'supposed' to do. I cant even think of a reason you would use it, nor a time when this would make any difference to your system. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Mar 16, 2004 9:51 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Well, then would
cause a service user change through the Prepare Websphere MQ Wizard to take effect?
Because I ran both (the refresh as WAG, and the regsec as a 'regular' guess), and it caused the service user change to take effect, where just running the Wizard (and then stopping and starting the IBM service) didn't work.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| JasonE |
| Posted: Tue Mar 16, 2004 10:22 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
No, I dont think so. Amqmdain regsec causes us to reapply the security on the registry keys. I dont see why the dcom userid would change. Aside from dcomcnfg, the only way I know of changing that is amqmsrvn -regserver (with or without the -userid option).
The thing that makes it take 'effect' is amqmsrvn terminating and restarting. Various things hold onto the amqmsrvn, such as the taskbar, mmc guis, amqmdain etc so perhaps something else happened? Is it reproducable? |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Mar 16, 2004 11:37 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
It might be reproducible, but I don't exactly have an environment to reproduce it on. At least not right now...
| JasonE wrote: |
| The thing that makes it take 'effect' is amqmsrvn terminating and restarting. |
Shouldn't the Wizard do that for me?
| JasonE wrote: |
| Various things hold onto the amqmsrvn, such as the taskbar, mmc guis, amqmdain etc |
Right. So if I leave the Explorer mmc open, then the user change won't stick.
That's probably why it didn't take effect the first few times I tried using the Wizard.
Generally, it seems that the instructions in the System Administration guide for changing the service user for Windows are either incomplete or out-of-date for newer systems. For instance, on 2003 and XP, the "Security" pane in dcomcnfg is now the "Log-On" pane, and the MUSR_MQADMIN is reported as the "Local System" rather than a specific account, as is any account configured using the Wizard.
Also, it seems (from what you've just said) that
| System Administration Guide: Changing the user name associated with WebSphere MQ Services wrote: |
Alternatively, use the following command line to set the new account:
AMQMSRVN -user <domain\>NEW_NAME -password <password> |
won't actually work? I would need to also specify regserver?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed Mar 17, 2004 1:46 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
My 500th post 
| Quote: |
| Shouldn't the Wizard do that for me? |
The wizard tries, but it relies on operating system use counters for the dcom object - if eg. the mmc gui is running at the time, it cant.
I dont understand the bit about musr_mqadmin being reported as local system account though? On my XP machine it says 'This User', and the tab in dcomcnfg is definitely Identity?
I checked the code and it does appear that amqmsrvn -user will work standalone without -regserver, assuming I read it correctly  |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Mar 17, 2004 5:57 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
My webserver is currently down, so I can't show you any screen shots, but if I run dcomcnfg, it starts up the Component Services mmc, which lets me use the Services snap-in, as if I had selected Start->Setup->Control Panel->Administrative Tools->Services.
And, for me on XP Professional, the properties pane of the IBM MQSeries service shows "Log On", and after a default install of WebSphere MQ - specifying "No" for the questions about network setup, the service is listed as being run by Local System Account. And if I then use the Wizard (or presumably amqmsvrn) to change the user, it STILL shows as Local System Account - even though the actual user has changed.
This is also what I see on a workstation running Windows 2000 Professional, and another machine running Windows Server 2003, Standard Edition.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed Mar 17, 2004 6:45 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Ah... Run dcomcnfg, expand component services and then computer, my computer, DCOM Config folder. And yes, the doc is updated with this info (for when it next ships).
The service itself should run under the local system account. All that does is kick off a dcom object under a different userid. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Mar 17, 2004 7:16 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Okay. Now we're on the same page!
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
