Author |
Message
|
mikeHT |
Posted: Fri Nov 18, 2005 6:45 am Post subject: Launching MQ Series Explorer as a specific user in windows? |
|
|
Voyager
Joined: 01 Jul 2005 Posts: 82
|
HI :
Anyone knows how to launch MQ Series Explorer as a specific user in windows? Is there a registry hack? Thank you. |
|
Back to top |
|
 |
jefflowrey |
Posted: Fri Nov 18, 2005 7:00 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
You mean, besides logging in as that user?
I suppose you could use a scheduled task to do this, but you'll need to know the user and the password. Hrm. A quick check shows that you can't access the Desktop this way (but maybe I'm missing the button that would let it do that when running as the user that isn't logged in)
well, you could use something else that would let you make a real service, like SVRANY, out of the Explorer - and then change the properties of the service so it can interact with the desktop.
But if your MQ Admins know what they are doing, this still won't help you get access to QMs that they don't want you having access to. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
wschutz |
Posted: Fri Nov 18, 2005 7:14 am Post subject: |
|
|
 Jedi Knight
Joined: 02 Jun 2005 Posts: 3316 Location: IBM (retired)
|
What about "contact admin" ? _________________ -wayne |
|
Back to top |
|
 |
jefflowrey |
Posted: Fri Nov 18, 2005 7:17 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
wschutz wrote: |
What about "contact admin" ? |
I keep forgetting about that...  _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
SAFraser |
Posted: Tue Nov 22, 2005 1:41 pm Post subject: |
|
|
 Shaman
Joined: 22 Oct 2003 Posts: 742 Location: Austin, Texas, USA
|
Using "contact admin" works just dandy in v5.x MMC Explorer. When you have a version of the MMC all setup just as you want, simply save it with a unique name. Then launch the plain vanilla Explorer again using "contact admin" another user, set that one up as you like, and save. And so forth.
This is handy if you work in an environment where your wacky systems administrators make you use different logins on different servers (sfraser on some, frasersh on others). Just use the login "mqm" you say? No can do in Windows because it is the name of a group. It cannot also be the name of a user.
HOWEVER, I have been unable to get "contact admin" to work with the Eclipse plugin for v6.0. So I have been logging off and logging back in. If anyone figures this one out, please let me know.
Shirley |
|
Back to top |
|
 |
jsware |
Posted: Wed Nov 23, 2005 5:34 am Post subject: |
|
|
 Chevalier
Joined: 17 May 2001 Posts: 455
|
You could write a client security exit that you specify in all your connections that sets the user ID to the one you want. That way the user ID is provided up to the server as the correct one, not the one you have logged on as. You could make it intelligent enough to look at the queue manager name you're connecting to and specify different user IDs. I can't remember if their is any exit data in a client connection, but you could specify the user required in that if its available.
Blanking out the user ID in this security exit would allow you to connect to any unprotected client channels (i.e. those with already blank MCAUSER attributes).
Under Windows XP, I have a "Run with different credentials" under the shortcut's properties. However, I guess this is the same as using the contact admin tool, but I don't have MQ6 to check this out.
You could also change the MCAUSER on the svrconn channel to "MQM" on your queue managers. I WOULD NOT RECOMMEND THIS AS THIS WOULD ENABLE ANYONE TO DOWNLOAD EITHER A TRIAL MQ VERSION, OR A SUPPORT PAC SUCH AS MO71 AND ADMIN THOSE QMGRS. _________________ Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
Back to top |
|
 |
RogerLacroix |
Posted: Wed Nov 23, 2005 9:16 pm Post subject: |
|
|
 Jedi Knight
Joined: 15 May 2001 Posts: 3264 Location: London, ON Canada
|
|
Back to top |
|
 |
jsware |
Posted: Thu Nov 24, 2005 5:31 am Post subject: |
|
|
 Chevalier
Joined: 17 May 2001 Posts: 455
|
RogerLacroix - yep I learn't that little trick from your very post. Tried it with MO71 and as you stated it works.
I was just being lazy and couldn't be bothered to reference your post.
I am not sure whether this exit would work from WMQ Explorer as its a Java client (AFAIK since its just the eclipse tooling with a plugin). I always thought you had to write a Java exit for java clients. Nothing stopping somebody from porting it... _________________ Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
Back to top |
|
 |
jsware |
Posted: Tue Mar 20, 2007 7:43 am Post subject: |
|
|
 Chevalier
Joined: 17 May 2001 Posts: 455
|
SAFraser wrote: |
HOWEVER, I have been unable to get "contact admin" to work with the Eclipse plugin for v6.0. So I have been logging off and logging back in. If anyone figures this one out, please let me know.
Shirley |
Appologies for resurecting this thread, but I have just discovered how to run MQv6 Explorer under a separate user ID without logging off/on under this user ID.
For details on the problem (for me) was related to a missing APPDATA when using contact admin. Thus creating a batch file which:
Code: |
set APPDATA=%USERPROFILE%\Application Data
cd C:\Program Files\IBM\WebSphere MQ\bin
strmqcfg -d |
and running that using contact admin seems to do the trick. _________________ Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
Back to top |
|
 |
jefflowrey |
Posted: Tue Mar 20, 2007 8:30 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
Yeah, there was another post somewhere here that had this information. It might have been posted by rowles? _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
Toronto_MQ |
Posted: Tue Mar 20, 2007 10:19 am Post subject: |
|
|
 Master
Joined: 10 Jul 2002 Posts: 263 Location: read my name
|
I hadn't seen this before so I started doing some testing with it - as one of my pet peeves with the v6 explorer is not being able to easily logically group displays without importing.
I tried setting it up as described above, by creating different users and using 'contact admin' but kept getting errors. However I was quite surprised to find that simply changing your APPDATA variable before running strmqcfg (without contact admin) worked very well!
Or, to simplify:
Create a batch file called mqdev.bat
- this file should contain the following 2 lines:
set APPDATA=d:\mqeclipse\mqdev (I created this directory)
strmqcfg -d
Use the batch file to open MQ Explorer, add your dev queue managers to it (or however you prefer to group them).
Create as many of these as you like, the metadata will be stored in the directories specified in your APPDATA variable. You can switch between these as you like and your configs will be saved.
I have not found a need to use 'contact admin', or create users. If I am missing something, feel free to let me know.
Cheers
Steve |
|
Back to top |
|
 |
jsware |
Posted: Wed Mar 21, 2007 1:17 am Post subject: |
|
|
 Chevalier
Joined: 17 May 2001 Posts: 455
|
jefflowrey wrote: |
Yeah, there was another post somewhere here that had this information. It might have been posted by rowles? |
What prompted me to update this old thread was your post at http://www.mqseries.net/phpBB2/viewtopic.php?t=22321&highlight=appdata as Michael Dag mentioned APPDATA. Now I do a search for APPDATA I find a number of threads on this subject.
Appologies for raking over old ground
Torronto_MQ wrote: |
I have not found a need to use 'contact admin', or create users. If I am missing something, feel free to let me know. |
Some people like to run explorer as a different user for a number of reasons. _________________ Regards
John
The pain of low quaility far outlasts the joy of low price. |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Mar 21, 2007 3:24 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
It's not a matter of raking over old ground. I was just commenting that there was further discussion. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
|