| Author |
Message
|
| tkane |
 Posted: Wed Dec 21, 2005 1:10 pm Post subject: amqoamd not enough for v6 |
 |
|
Voyager
Joined: 23 Dec 2002
Posts: 82
Location: Kansas City
|
Has anyone noticed that our venerable amqoamd -s won't dump everything for us on MQ V6?
There are default authorizations for channel objects that I don't see. (I still haven't looked into them very much so don't ask me about them).
Even worse, I created a generic profile like:
| Code: |
setmqaut -m MQPHTTEST -t q -n 'MQTESTQ*.**' -p test1 +allmqi +dsp -setall -setid
|
Then I try and dump it with amqoamd -s. I don't see it in the listing. I DO see another generic profile. But I think it's one that I created under v5.3.
Also, since there's no man page for amqoamd and it's not documented as far as I see it in any of the manuals is it supported?
We need something to easily be able to rebuild our queue managers. saveqmgr is great (thanks Wayne, we run it on 300 unix machines) but as we move to a environment with more complex security needs we need a good way to dump the authorities.
dmpmqaut -m MQPHTTEST -l will list all the profiles, but won't show the details.
What does everybody think?
Tom |
|
| Back to top |
|
 |
| wschutz |
| Posted: Wed Dec 21, 2005 1:26 pm Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
Under linux, with FP1 .....
i see this:
| Quote: |
amqoamd -mTEST
ObjectType: queue
ObjectName: MQTESTQ*.**
Principal: sally
Authorities: browse get inq passall passid put set dsp (0x000404ff)
|
after I enter this:
setmqaut -m TEST -t q -n 'MQTESTQ*.**' -p sally +allmqi +dsp -setall -setid
_________________
-wayne
Last edited by wschutz on Wed Dec 21, 2005 1:34 pm; edited 2 times in total |
|
| Back to top |
|
|
| bbburson |
| Posted: Wed Dec 21, 2005 1:30 pm Post subject: |
|
|
Partisan
Joined: 06 Jan 2004
Posts: 378
Location: Nowhere near a queue manager
|
| wschutz wrote: |
i see this:
| Quote: |
amqoamd -mTEST
ObjectType: queue
ObjectName: MQTESTQ*.**
Principal: sally
Authorities: browse get inq passall passid put set dsp (0x000404ff)
|
after I enter this:
setmqaut -m TEST -t q -n 'MQTESTQ*.**' -p sally +allmqi +dsp -setall -setid |
That looks like output from amqoamd without the -s flag. Note the original question was:
| tkane wrote: |
| Has anyone noticed that our venerable amqoamd -s won't dump everything for us on MQ V6? |
|
|
| Back to top |
|
|
| wschutz |
| Posted: Wed Dec 21, 2005 1:33 pm Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
You're correct .... 
So, with -s: I get:
setmqaut -m TEST -n MQTESTQ*.** -t queue -g sally +browse +get +inq +passall +passid +put +set +dsp
_________________
-wayne |
|
| Back to top |
|
|
| wschutz |
| Posted: Wed Dec 21, 2005 1:41 pm Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
as an aside, I have considered changing saveqmgr so that it captures the same info that amqoamd -s does...(since v6 now allows inquiry of authorizations via pcf commands). The advantage would be for those that run savemqgr centrally as a mq client....
_________________
-wayne |
|
| Back to top |
|
|
| jsware |
| Posted: Thu Dec 22, 2005 5:17 am Post subject: |
|
|
Chevalier
Joined: 17 May 2001
Posts: 455
|
| wschutz wrote: |
| as an aside, I have considered changing saveqmgr so that it captures the same info that amqoamd -s does...(since v6 now allows inquiry of authorizations via pcf commands). The advantage would be for those that run savemqgr centrally as a mq client.... |
That gets my top vote. That would be a really cool feature. Shame we can't do this under 5.3 (I'd even go with browsing and decoding the SYSTEM.AUTH.DATA.QUEUE directly to get this info).
_________________
Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
| Back to top |
|
|
| tkane |
| Posted: Thu Dec 22, 2005 1:01 pm Post subject: |
|
|
Voyager
Joined: 23 Dec 2002
Posts: 82
Location: Kansas City
|
Wayne,
many thoughts in one reply...
A saveqmgr feature for this would be great.
The reason I started to look at this is because where I use generic profiles, I was getting extremely odd output when I ran the setmqaut back in. The setmqaut command generated needs single quotes on Unix to protect it from what the shell will do when it sees asterisks. For example setmqaut -t q -n 'SYSTEM.JMS.*'
The other odd thing that I'm seeing with amqoamd -s on v6 hp is 2018 errors at the end, right before the SYSTEM.DEFAULT permissions.
And this happens with a new queue manger that I built on 6.0 not one converted from 5.3.
Cheers
Tom
I can open a PMR against v6 on HP cause this doesn't sound right. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Dec 22, 2005 6:16 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| tkane wrote: |
Wayne,
many thoughts in one reply...
A saveqmgr feature for this would be great.
The reason I started to look at this is because where I use generic profiles, I was getting extremely odd output when I ran the setmqaut back in. The setmqaut command generated needs single quotes on Unix to protect it from what the shell will do when it sees asterisks. For example setmqaut -t q -n 'SYSTEM.JMS.*'
The other odd thing that I'm seeing with amqoamd -s on v6 hp is 2018 errors at the end, right before the SYSTEM.DEFAULT permissions.
And this happens with a new queue manger that I built on 6.0 not one converted from 5.3.
Cheers
Tom
I can open a PMR against v6 on HP cause this doesn't sound right. |
Have you thought about prefixing a '*' with '\' in unix ? (see unix syntax: if you want the * to be passed to the app in the command line prefix it with \.
Enjoy |
|
| Back to top |
|
|
| GrandMaster |
| Posted: Fri Dec 23, 2005 2:05 am Post subject: |
|
|
Guest
|
|
| Back to top |
|
|
| tkane |
| Posted: Fri Dec 23, 2005 8:19 am Post subject: |
|
|
Voyager
Joined: 23 Dec 2002
Posts: 82
Location: Kansas City
|
fjb,
I've always used the single quotes. But I'd be willing to use the backslash. I guess my points is:
amqoamd -s doesn't produce output that can be directly rerun when you have generic profiles. You need to do something like look for the -n and single quote the next field. On Unix this seems to do the trick, if there is a wildcard or not.
I am getting 2018's for some reason at 6.0.1.0 on HP only. My configs on AIX and Solaris are the same. My Linux doesn't have fp01 yet. I'm going to open a pmr and send them some trace.
Cheers
Tom[/list] |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Wed Jul 26, 2006 6:56 am Post subject: amqoamd and 2018 |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
Better late than never.
If you bring your QMGR up to 6.0.1.1, it will work just fine. I had this issue on HP-UX also.
_________________
Joseph
Administrator - IBM WebSphere MQ (WMQ) V6.0, IBM WebSphere Message Broker (WMB) V6.1 & V6.0
Solution Designer - WMQ V6.0
Solution Developer - WMB V6.1 & V6.0, WMQ V5.3 |
|
| Back to top |
|
|
| SAFraser |
| Posted: Wed Jul 26, 2006 9:50 am Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
I use saveqmgr in client mode, running it once a week from a central location. So Wayne would be a hero again for adding security backups to the saveqmgr utility.
Shirley |
|
| Back to top |
|
|
| wschutz |
| Posted: Wed Jul 26, 2006 11:00 am Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
| SAFraser wrote: |
I use saveqmgr in client mode, running it once a week from a central location. So Wayne would be a hero again for adding security backups to the saveqmgr utility.
Shirley |
I was hoping people would forget about that....  okay, right after I come back from vacation in Montauk next week.... 
_________________
-wayne |
|
| Back to top |
|
|
| wschutz |
| Posted: Thu Aug 10, 2006 4:36 pm Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
Okay, I'm back from vacation and (with a little help from http://www.kleinbottle.com/ ), I have a beta version of ms03 available which will save the OAM definitions just like amqoamd does.
Any testers or people interested in giving feedback? PM or e-mail me....
_________________
-wayne |
|
| Back to top |
|
|
|
|
