ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » MQSeries authorizations on Solaris

Post new topic  Reply to topic
 MQSeries authorizations on Solaris « View previous topic :: View next topic » 
Author Message
ANANTHA SRIVANGIPURAM
PostPosted: Wed Aug 15, 2001 5:52 am    Post subject: Reply with quote

Newbie

Joined: 14 Aug 2001
Posts: 2

We have just installed MQ 5.2(client) on Solaris. I provide admin support. The 'mqm' group and userid are all set fine. I got one new group and userid added to this group. I set display authorities on qmgr,q and process and also 'connect' authority to qmgr for this new group.Surprizingly there is no type 'channel' in the setmqaut command.I am able to display qmgr,q and processes. But when I try to use 'display channel' command as the above user, I am getting file error(AMQ9516). I have refreshed the security and it didn't work
Please let me know what to do to overcome this problem. Also, let me know where the channel definitions are stored.

Thanks
Anantha
Back to top
View user's profile Send private message Send e-mail
royr
PostPosted: Wed Aug 15, 2001 7:47 am    Post subject: Reply with quote

Acolyte

Joined: 30 Jun 2001
Posts: 65
Location: Israel

Take a look at /var/mqm/errors/AMQERR01.LOG and /var/mqm/qmgrs/QMGRNAME/errors/AMQERR01.LOG.

One of the entries should specify the name of the file and the error code returned. Your user and group probably don't have read access to the qmgr files at the filesystem level.

Also, you have to be in the mqm group to issue channel commands. See this post.
Back to top
View user's profile Send private message
bduncan
PostPosted: Wed Aug 15, 2001 9:40 am    Post subject: Reply with quote

Padawan

Joined: 11 Apr 2001
Posts: 1554
Location: Silicon Valley

You cannot specify channels in the setmqaut or dspmqaut commands for good reason. As a user, the only additional permissions you need to send messages across a channel is to have PUT authority on a transmit queue that is associated with that channel. Once your message makes it to the transmit queue, it isn't your program that GETs it from the transmit queue and sends it along its way, it's the MCA (message channel agent) which obviously is running as user mqm.


_________________
Brandon Duncan
IBM Certified MQSeries Specialist
MQSeries.net forum moderator
Back to top
View user's profile Send private message Visit poster's website AIM Address
ANANTHA SRIVANGIPURAM
PostPosted: Thu Aug 16, 2001 10:38 am    Post subject: Reply with quote

Newbie

Joined: 14 Aug 2001
Posts: 2

Thanks. I did find the message 'permission denied' in the error log(/var/mqm/errors).
I will get the read permission to others for this channel definition file.
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » MQSeries authorizations on Solaris
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.