| Author |
Message
|
| ferfi |
 Posted: Thu Oct 19, 2006 10:59 pm Post subject: Install MQ on W2K3 without domain account possible? |
 |
|
Newbie
Joined: 19 Oct 2006
Posts: 5
|
Hi all,
I have to install WMQ 6 on a W2K3 machine which is member of an Active Directory.
The security people have problems with the requirement of the domain group
- "domain mqm" did not match the naming conventions
- read group membership
- read group membershipSAM
So is it possible to install WMQ 6 without domain integration eg. as User MUSR_MQADMIN and group mqm?
Thank you in advance!
Ralph |
|
| Back to top |
|
 |
| DTran |
| Posted: Fri Oct 20, 2006 4:36 am Post subject: |
|
|
Acolyte
Joined: 11 May 2006
Posts: 62
Location: Amsterdam
|
Hi,
Did you choose option "Don't know" by Network Configuration before you start the MQ installation?
Grz,
Doan |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Fri Oct 20, 2006 5:13 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Actually, if you want to run with local security only, you can just choose "No".
And you don't have to do it during install, you can re-run the Prepare WebSphere MQ Wizard at any time.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| ferfi |
| Posted: Sat Oct 21, 2006 4:53 am Post subject: |
|
|
Newbie
Joined: 19 Oct 2006
Posts: 5
|
Hi all,
thank you for the answers!
I made the mistake to create the group mqm and the user mqadmin and use this account for the installation. I asked the IBM support people and they told me, that this is an internal username. I'm surprised, because this won't be created be the install routine.
But anyway, I did the same as user wsmqadmin as a local admin and it works (also after reboot, which was the problem before). After installation I made this user a member of mqm for further administration tasks like creation of qmgrs and MQ objects.
So my problem is solved and I'm happy 
One "last" question: Do I have any restrictions using just a local account and not a domain account?
Best regards
Ralph |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sat Oct 21, 2006 9:12 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Not if you are a member of Administrators and mqm
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Sat Oct 21, 2006 9:55 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You won't be able to authenticate members of domain groups.
You won't be able to authenticate users in the domain either, unless the machine itself is part of the domain AND you add domain users to local groups.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
