| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| setmqaut to remove OAM permissions on all queues |
« View previous topic :: View next topic » |
| Author |
Message
|
| velocity |
 Posted: Wed Nov 17, 2010 11:52 am Post subject: setmqaut to remove OAM permissions on all queues |
 |
|
Centurion
Joined: 30 Nov 2007
Posts: 126
|
Hi Guys,
I have an AIX queue manager and we are trying to remove oam permissions assigned to 60 individual queues(since wild cards were not used while assigning permissions), Is there a way to issue a command which will remove OAM permissions for all the profiles under this queue manager instead of removing them one by one?
Please let me know.
Thank you. |
|
| Back to top |
|
 |
| zonko |
| Posted: Wed Nov 17, 2010 12:26 pm Post subject: |
|
|
Voyager
Joined: 04 Nov 2009
Posts: 78
|
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Nov 17, 2010 1:56 pm Post subject: Re: setmqaut to remove OAM permissions on all queues |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
| velocity wrote: |
Hi Guys,
I have an AIX queue manager and we are trying to remove oam permissions assigned to 60 individual queues(since wild cards were not used while assigning permissions), Is there a way to issue a command which will remove OAM permissions for all the profiles under this queue manager instead of removing them one by one?
Please let me know.
Thank you. |
You can always use amqoamd -s or saveqmgr (MS03), (thanks be given to Wayne and Jeff), to create a script with the existing permissions. You need to then modify that script so that it will remove the permissions you had in mind.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| KramJ |
| Posted: Fri Nov 19, 2010 9:47 am Post subject: |
|
|
Voyager
Joined: 09 Jan 2006
Posts: 80
Location: Atlanta
|
You can do something like this:
# amqoamd -s -m <QMGR> |grep "t queue" |sed -e 's/+.*/-put/' > /tmp/rmPut.ksh
# chmod 700 /tmp/rmPut.ksh
# /tmp/rmPut.ksh
That will remover +put from all the queues. Substitute -put with whatever authorities you want to remove.
I've done it many times when queues have been defined by an admin and authority has been set for the system group. Like this,
# amqoamd -s -m <QMGR> |grep "t queue"|grep "g system" |sed -e 's/+.*/-remove/' |
|
| Back to top |
|
|
| zpat |
| Posted: Fri Nov 19, 2010 11:17 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5849
Location: UK
|
Yes, you can remove group access rights with the -all option, but this leaves the group with access set to none.
To remove the profile entirely use the -remove option.
Remember that the creator of a queue has their primary group added to the access list automatically (which is a pain).
Whenever you create a queue, you will get a new profile created for it automatically, even if you have generic profiles.
Access rights are cumulative, so that all relevant profiles are used to decide the access granted.
MO71 has some support for listing profiles, and of course more recent MQ explorers do this well and can be used to remove profiles (I believe). |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Sun Nov 21, 2010 4:21 pm Post subject: |
|
|
Jedi
Joined: 25 Mar 2003
Posts: 2495
Location: Melbourne, Australia
|
| zpat wrote: |
| Yes, you can remove group access rights with the -all option, but this leaves the group with access set to none. |
After which it is no longer listed by amqoamd, but the profile is still there in OAM !
_________________
Glenn |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
