| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Permission needed for MQClient to Server on AIX |
« View previous topic :: View next topic » |
| Author |
Message
|
| ssagodi |
 Posted: Fri Apr 12, 2002 9:38 am Post subject: |
 |
|
Newbie
Joined: 11 Apr 2002
Posts: 2
|
Hello,
I'm trying to get a handle on permissions for MQSeries Client to be able to connect to a queue running on our AIX server.
Things work properly only if the client user account is added to mqm group on the server. Is this a security exposure ?
We thought we'd create a security group to support clients, granted the group "allmqi" authority on the queue using the setmqaut command. But we're missing something because clients still get a 2035 error trying to connect. Can somebody tell me what we're missing ???
_________________
Steve Sagodi, IT Architect
IBM Global Services
Email: SAGODIS@CA.IBM.COM |
|
| Back to top |
|
 |
| mqonnet |
| Posted: Fri Apr 12, 2002 10:10 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
Things work properly only if the client user account is added to mqm group on the server. Is this a security exposure ?
---It is required but not a MUST. What is MUST is that there is a principal for the user id who is trying to connect to this QM as a client. This userid may or may not be in the "mqm" group.
We thought we'd create a security group to support clients, granted the group "allmqi" authority on the queue using the setmqaut command. But we're missing something because clients still get a 2035 error trying to connect. Can somebody tell me what we're missing ???
---You need to set a minimum of "crt, connect, altusr, inq". I think. I have done it a long while ago. You cannot give access to a non-mqm user with JUST "ALLMQI". Reason. This would give him access to mqi calls, but he/she should be first able to connect to the qm, right. Please check the other attributes too, i am not 100% sure. If these are the only ones or not. But yes, you need to have more than ALLMQI for sure.
Hope this helps.
Cheers.
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
| Nisa |
| Posted: Fri Apr 12, 2002 2:34 pm Post subject: |
|
|
Novice
Joined: 11 Apr 2002
Posts: 19
|
| Is it possible to install two versions of MQSeies 5.0 and 5.1 on the same Unix Machine ? |
|
| Back to top |
|
|
| mqonnet |
| Posted: Fri Apr 12, 2002 6:30 pm Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
Hi Nisa,
Stefan has already answered your query in another thread. Please check it up.
The answer is NO.
Cheers.
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
