| Author |
Message
|
| mpalmer |
 Posted: Tue Aug 13, 2002 9:54 am Post subject: Displaying Authorizations on a Queue |
 |
|
Novice
Joined: 25 Mar 2002
Posts: 24
Location: New Jersey, USA
|
| Is there a way on UNIX (AIX) to display which user IDs have authority to browse, put, get, etc. on a particular queue? On the AS/400 you can use the dspmqaut command, is there some similar command on AIX? |
|
| Back to top |
|
 |
| GMcCarthy |
| Posted: Tue Aug 13, 2002 10:02 am Post subject: |
|
|
Centurion
Joined: 06 Nov 2001
Posts: 113
Location: Melville NY
|
Yes. It is the same command:
dspmqaut [-m QMgrName] [-n ObjName] -t ObjType [-p Principal | -g Group]
[-s ServiceName]
_________________
Regards,
Gina
IBM Certified MQSeries Specialist |
|
| Back to top |
|
|
| mrlinux |
| Posted: Tue Aug 13, 2002 10:29 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
If you are using MQSeries v5.2 you can use amqoamd and it will display
all the queues at once.
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| mpalmer |
| Posted: Tue Aug 13, 2002 10:32 am Post subject: |
|
|
Novice
Joined: 25 Mar 2002
Posts: 24
Location: New Jersey, USA
|
| I tried the dspmqaut command, it only works if you use -p or -g. What if I am new and have no idea which users have authority to put/get to the queue? Is there a way to list all user IDs that have access to a particular queue? |
|
| Back to top |
|
|
| mrlinux |
| Posted: Tue Aug 13, 2002 10:33 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
see my earlier post
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| mpalmer |
| Posted: Tue Aug 13, 2002 10:38 am Post subject: |
|
|
Novice
Joined: 25 Mar 2002
Posts: 24
Location: New Jersey, USA
|
| I tried amqoamd, it did not give me what I am looking for. It listed all queues, principal is mqm, it said nothing about the actual user ID who can put, etc. It also only gave me info on one qmgr, I have about 10 running on the server that I ran amqoamd against. |
|
| Back to top |
|
|
| mrlinux |
| Posted: Tue Aug 13, 2002 10:43 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
you can specify which queue manager by the following.
and the output showing mqm as the only princpal basically means only those in the mqm group have access to the queues, if you do a
setmqaut command and add someone who is not part of the mqm group
they will show up in your list.
Usage: amqoamd [-m QMgrName ] [-t ObjType] [-n ObjName] [-fs]
-f old authorization file format
-s output setmqaut commands
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| GMcCarthy |
| Posted: Tue Aug 13, 2002 10:45 am Post subject: |
|
|
Centurion
Joined: 06 Nov 2001
Posts: 113
Location: Melville NY
|
Jeff,
I've never gotten that to work. Here is what I get:
amqoamd -m AIXMQST1 -t queue -n QL.EDI.WEBMETHODS.DATA
AMQOAMD
********
Queue Manager - AIXMQST1
Nothing to print
Have you seen this?
_________________
Regards,
Gina
IBM Certified MQSeries Specialist |
|
| Back to top |
|
|
| mrlinux |
| Posted: Tue Aug 13, 2002 10:47 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
Here is my output from HPUX (no AIX)
$ amqoamd -m PPSDEV -t queue -n AI.REPLY
AMQOAMD
********
Queue Manager - PPSDEV
ObjectType: Queue
ObjectName: AI.REPLY
Principal: mqm
Authorities: browse get inq passall passid put set setall setid chg
clr dlt dsp (0x001e07ff)
1 of 31 message(s) printed
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| GMcCarthy |
| Posted: Tue Aug 13, 2002 10:49 am Post subject: |
|
|
Centurion
Joined: 06 Nov 2001
Posts: 113
Location: Melville NY
|
It will be interesting to see if mpalmer gets it to work on her AIX system.
Nevermind....
_________________
Regards,
Gina
IBM Certified MQSeries Specialist
Last edited by GMcCarthy on Tue Aug 13, 2002 11:01 am; edited 1 time in total |
|
| Back to top |
|
|
| mpalmer |
| Posted: Tue Aug 13, 2002 10:52 am Post subject: |
|
|
Novice
Joined: 25 Mar 2002
Posts: 24
Location: New Jersey, USA
|
Here are my results:
->amqoamd -m CSC_QM_SHRDEV -t queue -n CSC_QL_HUB01_TRANSHUB_01 -f
Queue
CSC_QL_HUB01_TRANSHUB_01
mqm
Authority=0x001e07ff (doesn't tell me much)
->amqoamd -m CSC_QM_SHRDEV -t queue -n CSC_QL_HUB01_TRANSHUB_01 -s
amqoamd: illegal option -- s
Usage: amqoamd [-m QMgrName ] [-t ObjType] [-n ObjName] [-f]
-f old authorization file format |
|
| Back to top |
|
|
| mrlinux |
| Posted: Tue Aug 13, 2002 10:52 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
GMcCarthy
Have you tried it without parms ??? I tried it with the wrong queue name
and I got the same output as yours, it didnt tell me the queue didnt exist ???
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| mrlinux |
| Posted: Tue Aug 13, 2002 10:54 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
See my output from above I dont get the hex values, I get there meanings
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| mpalmer |
| Posted: Tue Aug 13, 2002 10:55 am Post subject: |
|
|
Novice
Joined: 25 Mar 2002
Posts: 24
Location: New Jersey, USA
|
| When I enter it without parms, it gives me the list that I reported on an earlier posting, principal mqm, listed queues for only one qmgr. btw...I'm a SHE....... |
|
| Back to top |
|
|
| GMcCarthy |
| Posted: Tue Aug 13, 2002 10:58 am Post subject: |
|
|
Centurion
Joined: 06 Nov 2001
Posts: 113
Location: Melville NY
|
Found this:
I need fix IY22995 (CSD03) :
In some circumstances, the "amqoamd" utility supplied
with MQSeries V5.2 could display only the text
"Nothing to print" for its output, despite the fact
that the queue manager against which it was running
contained authorisation information.
We have 5.3 in house so I'll wait a few weeks. Also, we use PATROL so we can view all the authorizations there.
_________________
Regards,
Gina
IBM Certified MQSeries Specialist |
|
| Back to top |
|
|
|
|
