| Author |
Message
|
| sbk |
 Posted: Fri Jan 27, 2012 1:26 pm Post subject: important and very need ASAP |
 |
|
Novice
Joined: 25 Jan 2012
Posts: 22
|
Hi team,
I may think that anyone will provide an exact solution to my question . As i am working on this issue since 2 days , i am unable to find the solution.Please help me....
When i am trying to give the permissions to a local queue presented in a queue manager, it is showing the below messages. Kindly help me
First i am seeing the authentications for LQ in QM1
C:\Program Files\IBM\WebSphere MQ\bin>dspmqaut -m QM1 -n LQ -t q -g mqm
Entity mqm has the following authorizations for object LQ:
get
browse
put
inq
set
crt
dlt
chg
dsp
passid
passall
setid
setall
clr
Now am changing the permissions....
Revoking for put, clear and get. But the command is executing sucessfully and no effects are changing place. the result is given below.
C:\Program Files\IBM\WebSphere MQ\bin>setmqaut -m QM1 -n LQ -t queue -g mqm -put
-clr -get
The setmqaut command completed successfully.
C:\Program Files\IBM\WebSphere MQ\bin>dspmqaut -m QM1 -n LQ -t q -g mqm
Entity mqm has the following authorizations for object LQ:
get
browse
put
inq
set
crt
dlt
chg
dsp
passid
passall
setid
setall
clr
How can these will work !
If we are placing the messages it is going into the queue but we have revoked the get permission to that q for that group.... |
|
| Back to top |
|
 |
| zpat |
| Posted: Fri Jan 27, 2012 1:35 pm Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5849
Location: UK
|
You're not serious? - revoking permissions for mqm? - besides it won't have any effect whatsoever.
Leave mqm alone and use another group to restrict access. |
|
| Back to top |
|
|
| sbk |
| Posted: Fri Jan 27, 2012 1:42 pm Post subject: |
|
|
Novice
Joined: 25 Jan 2012
Posts: 22
|
| Its serious issue in my project and there are only mqm group is available . Can you please guide how to create new group and give authentications to that group ? |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Jan 27, 2012 2:07 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9399
Location: US: west coast, almost. Otherwise, enroute.
|
| sbk wrote: |
| Its serious issue in my project and there are only mqm group is available . Can you please guide how to create new group and give authentications to that group ? |
Creating new groups is done at the o/s-level.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| zpat |
| Posted: Fri Jan 27, 2012 11:25 pm Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5849
Location: UK
|
| Have you tried reading the documentation? It's how we learnt to do it! |
|
| Back to top |
|
|
| Vitor |
| Posted: Sat Jan 28, 2012 12:07 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| sbk wrote: |
| Its serious issue in my project and there are only mqm group is available . |
No the problem is that you don't have any other groups.
| sbk wrote: |
| Can you please guide how to create new group |
This is a Windows problem not a WMQ one.
| sbk wrote: |
| give authentications to that group ? |
The method you've been using. I can't believe you've spent 2 days not realising why you can't change the permissions of the mqm group.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sat Jan 28, 2012 1:45 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9399
Location: US: west coast, almost. Otherwise, enroute.
|
| Vitor wrote: |
| sbk wrote: |
| Its serious issue in my project and there are only mqm group is available . |
No the problem is that you don't have any other groups.
| sbk wrote: |
| Can you please guide how to create new group |
This is a Windows problem not a WMQ one.
| sbk wrote: |
| give authentications to that group ? |
The method you've been using. I can't believe you've spent 2 days not realising why you can't change the permissions of the mqm group. |
Technically, and as the OP demonstrated, you can change permissions of the mqm group; BUT, by design (and as documented) mqm will always have all permissions.
Please get training on system administration of your platform (Windoze, UNIX) and WMQ.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sat Jan 28, 2012 2:47 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9399
Location: US: west coast, almost. Otherwise, enroute.
|
Moved to Security forum.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Jan 29, 2012 9:25 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
@ bruce2359:
It would behoove you to correct your signature's spelling:
The last word should read unterschätzt or not having the use of the a "Umlaut" use unterschaetzt. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sun Jan 29, 2012 9:35 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9399
Location: US: west coast, almost. Otherwise, enroute.
|
Danke.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Vitor |
| Posted: Sun Jan 29, 2012 9:48 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| bruce2359 wrote: |
| Technically, and as the OP demonstrated, you can change permissions of the mqm group; BUT, by design (and as documented) mqm will always have all permissions. |
That's both technical and pedantic. Yes, you can issue the command to change permissions against the mqm group. Yes, it will never effect any change on the permissions for that group. So on a strict definition you can change the permissions.
I don't speak German.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sun Jan 29, 2012 10:25 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9399
Location: US: west coast, almost. Otherwise, enroute.
|
Google it.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Jan 29, 2012 9:01 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
Freiheit ist unterschätzt
loosely translated means
Freedom is underrated...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Jan 30, 2012 5:29 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| bruce2359 wrote: |
| Google it. |
I did, and got a lot of German websites I couldn't read.
I wasn't especially interested, just pointing out I don't speak German. I also don't speak Spanish, Chinese nor do I play the violin.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Jan 30, 2012 5:37 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Vitor wrote: |
| I don't speak German. I also don't speak Spanish, Chinese nor do I play the violin. |
Between you, me, and Bobby McGee, some would argue you don't speak English either. |
|
| Back to top |
|
|
|
|
