| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Install mq on AIx |
« View previous topic :: View next topic » |
| Author |
Message
|
| Gideon |
 Posted: Wed Dec 23, 2009 9:56 am Post subject: Install mq on AIx |
 |
|
Chevalier
Joined: 18 Aug 2009
Posts: 403
|
I installed MQ on AIX
I followed the doc, using SMIT, it installed easily and successfully
I can "SU mqm"
But I do not see in the doc what the default pw is for the new mqm user
I can only su to it
Does anyone know what the default pw is, or provide a link ?
Thanks |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Wed Dec 23, 2009 12:00 pm Post subject: Re: Install mq on AIx |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| Gideon wrote: |
I installed MQ on AIX
I followed the doc, using SMIT, it installed easily and successfully
I can "SU mqm"
But I do not see in the doc what the default pw is for the new mqm user
I can only su to it
Does anyone know what the default pw is, or provide a link ?
Thanks |
If you can su to it without entering the password you must have root or equivalent. As such you can set the password for the user.  
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| mvic |
| Posted: Wed Dec 23, 2009 5:46 pm Post subject: Re: Install mq on AIx |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| Gideon wrote: |
| But I do not see in the doc what the default pw is for the new mqm user |
I know opinions will differ on this, but...
My opinion is that login as mqm should be disallowed. For each MQ administrator, add their ID to the mqm group, and they can then perform their duties without needing to know an additional password.
You then get benefits from the OS logging exactly who was logged in at what times. If all your admins log in as "mqm" this is not so helpful for audit and change tracking.
As someone mentioned today in another current thread, it is pretty good advice to make mqm the primary group for your MQ administrators, as on Unix the primary group is used to initialise the authority set that is granted to any objects (queues, etc.) that are created. Unless you understand (and want!) what that means when the primary group is NOT mqm, I would personally advise to avoid that feature. So make mqm the primary group of your admins if that's possible.
As I said, opinions (and security standards) will differ from site to site, so get your policy agreed with whatever security authority there might be in your company. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Wed Dec 23, 2009 6:00 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
I'd add to all this that sysadmins should have two userids: one all-powerful for sysadmin stuff with mqm/root capabilities; and one for day-to-day non-admin stuff - like email, time-cards, surfing the net, and so on.
I've run out of fingers and toes counting the things I've done accidentally over the decades, because my userid had the authority. There have been many posts here about permission bits mysteriously changed.
Two ids made auditors happy.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| nathanw |
| Posted: Thu Dec 24, 2009 1:20 am Post subject: Re: Install mq on AIx |
|
|
Knight
Joined: 14 Jul 2004
Posts: 550
|
| mvic wrote: |
As I said, opinions (and security standards) will differ from site to site, so get your policy agreed with whatever security authority there might be in your company. |
| bruce2359 wrote: |
| Two ids made auditors happy. |
Exactly I have been involved various sites and all types of problems have been encountered with the ability for mqm to log in
Always remember to make the powers that be happy userids should be controlled and administered correctly.
_________________
Who is General Failure and why is he reading my hard drive?
Artificial Intelligence stands no chance against Natural Stupidity.
Only the User Trace Speaks The Truth  |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sat Dec 26, 2009 10:20 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Moved to Installation/Configuration forum.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
