| Author |
Message
|
| xgnitesh |
 Posted: Mon May 08, 2006 11:44 pm Post subject: Cannot remove get and put permissions |
 |
|
Novice
Joined: 06 Sep 2005
Posts: 19
|
Hi All,
I am not able to remove the put permission for a queue.
setmqaut -m QM -n
LQ -t queue -p subscriber -put
The command is successful but when I do dspmqaut, it shows all the old permissions including put.
In fact when I do -all get and put are still there.
Can anyone please help me find the problem?
Thanks,
Nitesh |
|
| Back to top |
|
 |
| sjensen |
| Posted: Tue May 09, 2006 2:36 am Post subject: |
|
|
Centurion
Joined: 18 Dec 2003
Posts: 134
Location: London
|
Hi,
Is subscriber by any chance a member of group mqm?
Cheers
Stefan |
|
| Back to top |
|
|
| C_Noone |
| Posted: Tue May 09, 2006 2:41 am Post subject: |
|
|
Newbie
Joined: 07 Jun 2004
Posts: 3
|
| did you do a "refresh security"? |
|
| Back to top |
|
|
| wschutz |
| Posted: Tue May 09, 2006 5:22 am Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
| C_Noone wrote: |
| did you do a "refresh security"? |
No, refresh security isn't going to affect dspmqaut. I'd bet that "subscriber" is a member of the mqm group...
_________________
-wayne |
|
| Back to top |
|
|
| xgnitesh |
| Posted: Tue May 09, 2006 6:39 am Post subject: |
|
|
Novice
Joined: 06 Sep 2005
Posts: 19
|
Hi All,
Thanks very much for your replies
1. subscriber is not a member of mqm group. Its a member of Users.
2. I did not do refresh security. How to do it?
Well the same thing is working on another MQ server same version. I did not do either of the above on that MQ server.
I am not sure what is different.
Best regards
Nitesh |
|
| Back to top |
|
|
| wschutz |
| Posted: Tue May 09, 2006 6:44 am Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
What about showing us the exact command that you are entering and their outputs. And also the output from "groups subscriber".
And lastly, what version of MQ (including csd) and op sys?
_________________
-wayne |
|
| Back to top |
|
|
| vennela |
| Posted: Tue May 09, 2006 7:03 am Post subject: |
|
|
Jedi Knight
Joined: 11 Aug 2002
Posts: 4055
Location: Hyderabad, India
|
| xgnitesh wrote: |
2. I did not do refresh security. How to do it?
|
On the MQSC promt:
to get the prompt issue
At the mqsc prompt issue
But I am positive also that this isn't going to solve the problem though. |
|
| Back to top |
|
|
| xgnitesh |
| Posted: Wed May 10, 2006 4:22 am Post subject: |
|
|
Novice
Joined: 06 Sep 2005
Posts: 19
|
Hi,
This is what I did:
C:\Documents and Settings\Administrator>dspmqaut -m UKEDISMQD1.QUEUE.MANAGER -n
DS2K.WEFA.EDIS.QUE -t queue -p subscriber
Entity subscriber has the following authorizations for object DS2K.WEFA.EDIS.QUE
:
get
put
C:\Documents and Settings\Administrator>setmqaut -m UKEDISMQD1.QUEUE.MANAGER -n
DS2K.WEFA.EDIS.QUE -t queue -p subscriber +allmqi
The setmqaut command completed successfully.
C:\Documents and Settings\Administrator>dspmqaut -m UKEDISMQD1.QUEUE.MANAGER -n
DS2K.WEFA.EDIS.QUE -t queue -p subscriber
Entity subscriber has the following authorizations for object DS2K.WEFA.EDIS.QUE
:
get
browse
put
inq
set
passid
passall
setid
setall
C:\Documents and Settings\Administrator>setmqaut -m UKEDISMQD1.QUEUE.MANAGER -n
DS2K.WEFA.EDIS.QUE -t queue -p subscriber -put
The setmqaut command completed successfully.
C:\Documents and Settings\Administrator>dspmqaut -m UKEDISMQD1.QUEUE.MANAGER -n
DS2K.WEFA.EDIS.QUE -t queue -p subscriber
Entity subscriber has the following authorizations for object DS2K.WEFA.EDIS.QUE
:
get
browse
put
inq
set
passid
passall
setid
setall
C:\Documents and Settings\Administrator> |
|
| Back to top |
|
|
| Toronto_MQ |
| Posted: Wed May 10, 2006 6:23 am Post subject: |
|
|
Master
Joined: 10 Jul 2002
Posts: 263
Location: read my name
|
What version is this? I don't have this problem...
D:\>dspmqaut -t queue -n TEST -p Guest
Entity Guest has the following authorizations for object TEST:
D:\>setmqaut -t queue -n TEST -p Guest +put +get
The setmqaut command completed successfully.
D:\>dspmqaut -t queue -n TEST -p Guest
Entity Guest has the following authorizations for object TEST:
get
put
D:\>setmqaut -t queue -n TEST -p Guest +allmqi
The setmqaut command completed successfully.
D:\>dspmqaut -t queue -n TEST -p Guest
Entity Guest has the following authorizations for object TEST:
get
browse
put
inq
set
passid
passall
setid
setall
D:\>setmqaut -t queue -n TEST -p Guest -put
The setmqaut command completed successfully.
D:\>dspmqaut -t queue -n TEST -p Guest
Entity Guest has the following authorizations for object TEST:
get
browse
inq
set
passid
passall
setid
setall
Cheers
Steve |
|
| Back to top |
|
|
| xgnitesh |
| Posted: Wed May 10, 2006 7:27 am Post subject: |
|
|
Novice
Joined: 06 Sep 2005
Posts: 19
|
I am trying to do this on MQ Server 5.3 installed on win 2003 server.
However, when I try the same thing on MQ Server 5.3 on win2k professional, it works. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed May 10, 2006 7:33 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
what CSD/FP level on both? The same? Different?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| xgnitesh |
| Posted: Wed May 10, 2006 7:51 am Post subject: |
|
|
Novice
Joined: 06 Sep 2005
Posts: 19
|
| Actually there was no CSD installed in both the cases. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed May 10, 2006 7:53 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Well, please apply the latest CSD and try it again.
MQ v5.3 with no CSDs is two years old at least. There have been twelve separate CSDs released, each with HUNDREDS of fixes.
Is it really worth your time trying to troubleshoot a problem that has almost certainly been fixed by now?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| xgnitesh |
| Posted: Wed May 10, 2006 8:00 am Post subject: |
|
|
Novice
Joined: 06 Sep 2005
Posts: 19
|
Thanks jefflowrey
I will apply the CSD and try again. I have another question in the mean time:
I have another MQ server 5.0 where I am finding that it doesnt make any difference whether or not I give authority or not. Everyone is able to access all the queues anyway. Does that mean on MQ server 5.0, there are no security features? I tried with client 5.0, client 5.3 with CSD 11 and each time I am able to access all the queues without restriction. |
|
| Back to top |
|
|
| wschutz |
| Posted: Wed May 10, 2006 8:45 am Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
Either you are doing it from a user in the mqm or Administrator group (IIRC on windows) or security has been turned off for the qmgr.
_________________
-wayne |
|
| Back to top |
|
|
|
|
