ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » User configuration

Post new topic  Reply to topic
 User configuration « View previous topic :: View next topic » 
Author Message
alexandermq
PostPosted: Tue Mar 01, 2011 1:57 am    Post subject: User configuration Reply with quote

Newbie

Joined: 01 Mar 2011
Posts: 1

Hi guys,

I'm new to Websphere MQ. I spent a lot of time in the last few days trying to learn how it works but there are a few things that I still don't understant.

One of these things is how domain accounts are handled by MQ.

In the first configuration step, you are asked for a domain account. But what exactly is that for? My personal opinion is that MQ uses it to check user's permissions when you log on to the MQ server machine with a domain account. In fact MQ doesn't have its own users, but uses the local machine/domain ones.

Is it right?
Back to top
View user's profile Send private message
mqjeff
PostPosted: Tue Mar 01, 2011 3:43 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

The domain account is used to run the MQ service, and is used to query the domain for user and group membership.
Back to top
View user's profile Send private message
SeSar
PostPosted: Sat Mar 19, 2011 6:15 am    Post subject: Reply with quote

Newbie

Joined: 19 Mar 2011
Posts: 3

Hi.
Another question is: Must all MQ users be in the same domain?
I have a problem:
I have a MQ Server in a domain (Windows), but I need to send some msg from MQ Clients on PCs and machines outside that domain, to the MQ Server.
And I don't succedded in such process: the connections give me errors. In other word it seems that if a MQ Server is in a domain, then it could accept connection only from machines inside the domain.
Am I wrong?

Could/should I connect to a MQ server using a "username" and psw?
Thanks
Sergio
Italy
Back to top
View user's profile Send private message
bruce2359
PostPosted: Sat Mar 19, 2011 7:38 am    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9471
Location: US: west coast, almost. Otherwise, enroute.

Quote:
One of these things is how domain accounts are handled by MQ.

Installing WMQ requires administrative rights. WMQ doesn't 'manage' domain accounts.

Certain WMQ API calls (like MQCONNect, MQOPEN, etc.) cause WMQ to ask the o/s-level security component (OAM for Win/UNIX, RACF for z/OS) if the userid attempting the call is authorized to access the wmq object.

Quote:
the connections give me errors.

Exactly what errors? Please be specific, and include AMQ error messages and/or ReasonCode(s) you received.
Quote:
In other word it seems that if a MQ Server is in a domain, then it could accept connection only from machines inside the domain.
Am I wrong?

Yes.

WMQ is platform-neutral. You can create WMQ channel connections to and from any/all platforms. Refer to the WMQ Intercommunications manual.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » User configuration
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.