| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| setmqaut question |
« View previous topic :: View next topic » |
| Author |
Message
|
| mqjava |
 Posted: Tue Jan 26, 2010 7:43 pm Post subject: setmqaut question |
 |
|
Voyager
Joined: 25 May 2009
Posts: 80
Location: New Jersey
|
Hi All,
Is there a way to restrict the users in mqm group not to execute the mq commands like strmqm, endmqm by using setmqaut command.
Thanks in advance. |
|
| Back to top |
|
 |
| WMBEAI |
| Posted: Tue Jan 26, 2010 9:38 pm Post subject: |
|
|
Acolyte
Joined: 02 Mar 2009
Posts: 66
|
| setmqaut -m QMGR -t qmgr -p user1 -connect.This shld work |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Jan 26, 2010 10:29 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| WMBEAI wrote: |
| setmqaut -m QMGR -t qmgr -p user1 -connect.This shld work |
Setting any authorisations for members of the mqm group is pointless, they're just ignored. If you don't want people running those commands, don't put them in the mqm group and restrict who can log-in/su to whichever account you use to administer.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| mvic |
| Posted: Wed Jan 27, 2010 1:46 am Post subject: Re: setmqaut question |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| mqjava wrote: |
| Is there a way to restrict the users in mqm group not to execute the mq commands like strmqm, endmqm by using setmqaut command. |
The mqm group is the MQ administrators group.
People in the mqm group are MQ administrators. They are allowed to do anything to any queue manager. Once logged in to the machine/OS, they can create new queue managers, and make any modification to existing queue managers, including deleting them. |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Jan 27, 2010 6:18 am Post subject: Re: setmqaut question |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqjava wrote: |
| Is there a way to restrict the users in mqm group not to execute the mq commands like strmqm, endmqm by using setmqaut command. |
a) Why would you want to stop the administrators administrating WMQ?
b) Those commands are not under the control of setmqaut
c) The setmqaut command can't stop the mqm group doing anything; by definition the mqm group has full control over the queue manager.
It's possible to stop those commands being executed by the mqm group, but as I ask in a) above, if you do this who's going to stop and start your queue managers?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjava |
| Posted: Wed Jan 27, 2010 8:57 pm Post subject: |
|
|
Voyager
Joined: 25 May 2009
Posts: 80
Location: New Jersey
|
Hi Guys,
Thanks to all for your answer, i just wanted to check if there is a way by using setmqaut, if the user is not in mqm group then that should do, but i was curious to check it. Anyways thanks to all. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
