ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General Discussion » How to start channel by user not belonging to MQM group

Post new topic  Reply to topic
 How to start channel by user not belonging to MQM group « View previous topic :: View next topic » 
Author Message
Tekbit
PostPosted: Mon May 17, 2004 6:53 am    Post subject: How to start channel by user not belonging to MQM group Reply with quote

Newbie

Joined: 17 May 2004
Posts: 4
I have a user who is not in the mqm group. Situation is like this:
- Have setup the user with +all authrizations to my qmgr with command setmqaut.
- Changed the permission of runmqsc command to -r-sr-sr-x, so this user can run runmqsc
- The user can get chstatus from runmqsc;

When I login as this user and try start the channel from runmqsc. I got error message "AMQ9509: Program cannot open queue manager object." Of course, I can start the channel with user in mqm group. But security need setup the user out of the mqm group.

It's MQ 5.3 (CSD04) on AIX 5.1.

Thanks in advance,
Tekbit
Back to top
View user's profile Send private message
dgolding
PostPosted: Mon May 17, 2004 7:18 am    Post subject: Reply with quote

Yatiri

Joined: 16 May 2001
Posts: 668
Location: Switzerland
Hi Tekbit

It's always a bad idea to change the permissions on MQ objects and programs. You say you're doing this for security, you've just allowed everyone on the system runmqsc access! Worse, there is a good chance something could be damaged when you, for example create or update an object.

Look at runmqadm (support pac) to enable your user to do this.

http://www-1.ibm.com/support/docview.wss?rs=203&uid=swg24000686&loc=en_US&cs=utf-8&lang=en

HTH
Back to top
View user's profile Send private message Visit poster's website
Tekbit
PostPosted: Mon May 17, 2004 7:27 am    Post subject: Reply with quote

Newbie

Joined: 17 May 2004
Posts: 4
Thanks dgolding for the information.

Will try runmqadm.

Tekbit
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General Discussion » How to start channel by user not belonging to MQM group
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.