ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » OAM on ModelQueues and Instances ...

Post new topic  Reply to topic
 OAM on ModelQueues and Instances ... « View previous topic :: View next topic » 
Author Message
flaufer
PostPosted: Tue Sep 18, 2012 11:38 pm    Post subject: OAM on ModelQueues and Instances ... Reply with quote

Acolyte

Joined: 08 Dec 2004
Posts: 59

Folks,

have been doing some research, but I'm not able to find some decent documentation from IBM on this topic.

We have a QMODEL (PERMDYN) defined and privileges granted to the group our application user is member of.

The Qmodel is named "QMODEL" (for sake of simplification). Instances of the QMODEL are named "QMODEL.xxx.yyy.zzz".

We do not have explicit OAM privileges granted to QMODEL.** and according to a few posts I found on the web, this is not required, because the user creating the instance from the template in fact will get allmqi privileges on the particular queue.

My questions now:

1. These privileges on the instance of the queue, they exist as long as the queue itself exists, right? Wouldn't make much sense to have a specific profile outlive the object it is intended for.

2. These privileges can be seen with dmpmqaut? (don't have full access to the machine, somewhat blind in that regard). They will not be recorded by saveqmgr I guess (never seen these)?

I'm still trying to find some clue about OAM and Model-Queues (templates and instances) in the IBM documentation, anybody has an idea where to look?

Felix

P:S. Aaah... the reason I'm looking into this is that we occasinally experience 2035 on instances of these modelqueues which I can't explain (there is only one user active on the whole queuemanager, which is the application user mentioned above). The privileges we grant to the QMODEL are +allmqi.
Back to top
View user's profile Send private message
bruce2359
PostPosted: Wed Sep 19, 2012 4:21 am    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.

At MQOPEN, OAM is presented with the question: can this user MQOPEN the named object. In this case the object is a QModel.

What is the QModel name specified in the object descriptor (MQOD) for the MQOPEN?

What is the dynamic-queue-name specified in the MQOD in the app?

Display the permissions, and post them here.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » OAM on ModelQueues and Instances ...
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.