| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| WMQ runtime and file permissions?? |
« View previous topic :: View next topic » |
| Author |
Message
|
| cpeele |
 Posted: Thu Jul 05, 2007 9:47 am Post subject: WMQ runtime and file permissions?? |
 |
|
Acolyte
Joined: 04 Apr 2007
Posts: 53
|
Hey guys, I've been tasked to find out a few requirements for WebSphere MQ v6 running on windows XP.
I have searched the Quick Beginings pdf and the System Administration Guide and have not found the answers to my questions.
They are:
installation and configuration requirements
* what folders need read & write permissions
runtime requirements
* what permissions do the MQ groups and user accounts need and on what folders
Thanks Guys,
Chris |
|
| Back to top |
|
 |
| Vitor |
| Posted: Thu Jul 05, 2007 10:10 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Install as a local account (typically mqm) with Administrator privledges. Do not use the Administrator account.
Add the local Administrator and any ids that do administrative tasks to the MQ administrative group created by the installation.
For each queue you create, authorise the users (or more typically a group they belong to) with the setmqaut command. Do not give them permissions on the file system objects, which should be the sole province of the running MQ processes.
You'll find this laid out in the Security manual (briefly) and I thought in the System Admin guide. The installation procedure is definately in the Quick Beginnings for Windows manual. And you and I have talked about user authentication issues in here before now! 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| cpeele |
| Posted: Thu Jul 05, 2007 10:14 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2007
Posts: 53
|
Hello and thanks for the quick reply. I agree that what you provided is covered in some of the manuals, however, what about the file and folder permissions?
Thanks again!!
Chris |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Jul 05, 2007 12:11 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Vitor wrote: |
Do not give them permissions on the file system objects, which should be the sole province of the running MQ processes.
|
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Fri Jul 06, 2007 1:04 am Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
