| Author |
Message
|
| dnoam |
 Posted: Mon Jan 23, 2006 10:53 pm Post subject: Authorization for users/groups for a model Queue |
 |
|
Apprentice
Joined: 23 Jan 2006
Posts: 25
|
Hi.
I would like to create a model queue with autorization for specific
users (or groups).
How can I achieve this?
TIA |
|
| Back to top |
|
 |
| Mr Butcher |
| Posted: Tue Jan 24, 2006 12:14 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
to create the model queue use "define qmodel"
to create security check the mqseries security manual. to open a queue using a model queue you will need "update" security for the model. more security may be required depending on your open options.
good luck, and - please - do not tell us too much about your environment. it is absolutely useless and will not help us to help you.
_________________
Regards, Butcher |
|
| Back to top |
|
|
| Mr Butcher |
| Posted: Tue Jan 24, 2006 12:59 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
maybe he is on mainframe and using RACF? 
i sometimes really wonder if these guys asking questions are really computer technicians (maybe they have never heard that there are multiple OS?!?).
anyway. never mind.
_________________
Regards, Butcher |
|
| Back to top |
|
|
| dnoam |
| Posted: Tue Jan 24, 2006 1:06 am Post subject: |
|
|
Apprentice
Joined: 23 Jan 2006
Posts: 25
|
| Mr Butcher wrote: |
good luck, and - please - do not tell us too much about your environment. it is absolutely useless and will not help us to help you. |
True, true (blush)
I have MQ 6.0 Server on Win Server 2003.
more info.
My goal is to handle the access control during the MQ configuration (transparent to the application, if possible).
I have no problem defining the model queue.
For the access control I tried "setmqaut" to no avail.
Can this be done with "setmqaut", or should the application handle it on MQOPEN or other APIs?
TIA |
|
| Back to top |
|
|
| wschutz |
| Posted: Tue Jan 24, 2006 2:38 am Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
| Quote: |
| For the access control I tried "setmqaut" to no avail. |
What exactly have you typed in? And what fails? Are you getting a bad return code from the MQOPEN of the model queue, or is it some other problem? We need specifics ....
_________________
-wayne |
|
| Back to top |
|
|
| dnoam |
| Posted: Tue Jan 24, 2006 3:46 am Post subject: |
|
|
Apprentice
Joined: 23 Jan 2006
Posts: 25
|
| wschutz wrote: |
| Quote: |
| For the access control I tried "setmqaut" to no avail. |
What exactly have you typed in? And what fails? Are you getting a bad return code from the MQOPEN of the model queue, or is it some other problem? We need specifics .... |
setmqaut error message:
AMQ7026: A principal or group name was invalid.
I'm using "-p" (principal).
I was wondering whether I should define all the remote users (accessing from MQ Client) as local users on the MQ Server?
What about the "mqm" group?
TIA |
|
| Back to top |
|
|
|
|
