| Author |
Message
|
| PeterPotkay |
 Posted: Sun Feb 13, 2005 3:07 pm Post subject: runmqsc - display only? |
 |
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
I have someone at my company who wants to run this auto discovery tool on my servers regularly. Looking at the scripts, I see it issues runmqsc commands. The scripts only have display commands. The scripts will run local on each MQ server.
Can a user ID be configured to only issue display commands with runmqsc? Or does a runmqsc user need to be in the mqm group, in which case that user will have full authority, meaning I grant their user ID to runmqsc for displays, but who knows what they could do if they wanted to?
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
 |
| EddieA |
| Posted: Sun Feb 13, 2005 6:29 pm Post subject: |
|
|
Jedi
Joined: 28 Jun 2001
Posts: 2453
Location: Los Angeles
|
| Quote: |
| does a runmqsc user need to be in the mqm group |
I believe so.
Isn't there a SupportPac that provides a wrapper arround runmqsc. That might have more control available.
Cheers,
_________________
Eddie Atherton
IBM Certified Solution Developer - WebSphere Message Broker V6.1
IBM Certified Solution Developer - WebSphere Message Broker V7.0 |
|
| Back to top |
|
|
| Nigelg |
| Posted: Mon Feb 14, 2005 12:16 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
On UNIX a user has to be in the mqm group to execute runms, because the permissions are 6550, mqm:mqm.
Support pack MS0E, runmqadm, is the wrapper that EddieA is thinking of, and does allow non-mqm users to execute runmqsc commands. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Mon Feb 14, 2005 5:57 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Thanks, that will probably do the trick for my Unix boxes. But I have a bunch of Windows boxes as well. Any ideas there? Right now I am thinking that on Windows, its the mqm group or bust when it comes to runmqsc, and thus they have full authority.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| Nigelg |
| Posted: Mon Feb 14, 2005 6:00 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
MS0E is on Windows as well.
http://www-1.ibm.com/support/docview.wss?rs=203&uid=swg24000686&loc=en_US&cs=utf-8&lang=en
| Quote: |
Prerequisites
This SupportPac requires one of the following:
» WebSphere MQ, V5.2 (no longer supported)
» WebSphere MQ for AIX, V5.3
» WebSphere MQ for HP-UX, V5.3
» WebSphere MQ for Sun Solaris, V5.3
» WebSphere MQ for Windows, V5.3
» WebSphere MQ for Linux for Intel, V5.3
» WebSphere MQ for Linux for zSeries, V5.3
|
|
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Mon Feb 14, 2005 6:02 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Thanks Nigel.
Hey, what about things like mqver, dspmq, etc? Can any user run those?
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| sebastianhirt |
| Posted: Mon Feb 14, 2005 6:12 am Post subject: |
|
|
Yatiri
Joined: 07 Jun 2004
Posts: 620
Location: Germany
|
Hi,
| Code: |
| -r-sr-sr-x 1 mqm mqm 89467 May 27 2004 /software/mqm/bin/dspmq |
On AIX, I would say everybody can run them. As read and execute is set per default to the binary of it. MQVER is the same.
In Windows it seems to be the same...
cheers
Sebastian |
|
| Back to top |
|
|
|
|
