| Author |
Message
|
| gops |
 Posted: Wed Mar 05, 2008 5:30 am Post subject: Adding new user in MQ |
 |
|
Novice
Joined: 05 Mar 2008
Posts: 10
|
I have few queries in adding the new user to MQ.
1.What are the steps to be followed for adding the user to MQ?
2. When a new user has been added to mqm group, is it compulsory to REFRESH SECURITY? If it is mandatory step to be followed, then if I need to add the user to several servers, do I need do run manually REFRESH SECURITY on each server or is there any alternate solution for this?
Please guide me... |
|
| Back to top |
|
 |
| Vitor |
| Posted: Wed Mar 05, 2008 5:42 am Post subject: Re: Adding new user in MQ |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| gops wrote: |
| 1.What are the steps to be followed for adding the user to MQ? |
Same as adding any new user for your unmentioned platform. You may need to set up new groups if the new user has an new security profile.
| gops wrote: |
| 2. When a new user has been added to mqm group, is it compulsory to REFRESH SECURITY? If it is mandatory step to be followed, then if I need to add the user to several servers, do I need do run manually REFRESH SECURITY on each server or is there any alternate solution for this? |
Do NOT add users to the mqm group unless they actually are administrators! 
Create new groups and give these the relevant permissions (allmqi is a good general purpose one).
REFRESH SECURITY is only necessary if you've created or changed groups at an OS level.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gops |
| Posted: Wed Mar 05, 2008 6:23 am Post subject: |
|
|
Novice
Joined: 05 Mar 2008
Posts: 10
|
Thanks for the reply.
We have added a domain user using global group in local mqm groups in all servers(Windows 2000). But he was not getting the admin rights to MQ series.
After runnig the REFRESH SECURITY command, now he is getting the admin rights.
but my question is in our setup there are around 100 servers.Do we need to manually Execute REFRESH SECURITY in all 100servers or is there any alternative soln. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Mar 05, 2008 6:36 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You need to refresh security on a queue manager every time you change memberships in the OS level group that the queue manager uses.
Or you can restart the queue manager, it's really up to you.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Mar 05, 2008 6:50 am Post subject: Re: Adding new user in MQ |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Vitor wrote: |
| REFRESH SECURITY is only necessary if you've created or changed groups at an OS level. |
And then it is necessary.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gops |
| Posted: Wed Mar 05, 2008 7:01 am Post subject: |
|
|
Novice
Joined: 05 Mar 2008
Posts: 10
|
| Thanks for the reply.. Can any one have the script to run REFRESH SECURITY in all the servers. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Mar 05, 2008 7:02 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
The script to run REFRESH SECURITY on all servers is a script to run REFRESH SECURITY on one server at a time, for every server you have.
Happy Scripting!
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
