| Author |
Message
|
| Boomn4x4 |
 Posted: Mon Dec 17, 2012 6:58 am Post subject: MQSC display lsstatus by another user |
 |
|
Disciple
Joined: 28 Nov 2011
Posts: 172
|
I am trying to configure another user to execute MQSC commands, but to display only. I've changed the runmqsc application's permissions to r-sr-sr-x and am explicitly setting the authority for the user using setmqaut +dsp
This is working fine for displaying queue information, channel information, but it doesn't seem to work to display lsstatus information. If I do a DIS LISTENER() it works, but I'm getting "Not Authorized" if I do a DIS LSSTATUS. |
|
| Back to top |
|
 |
| lancelotlinc |
| Posted: Mon Dec 17, 2012 7:09 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
What is the user's group membership? You could set the specific permissions once to a group, and make that user a member of that group. What OS? What version of OS and MQ?
There are several APARs on this command. You may like to open a PMR.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| Boomn4x4 |
| Posted: Mon Dec 17, 2012 7:17 am Post subject: |
|
|
Disciple
Joined: 28 Nov 2011
Posts: 172
|
| lancelotlinc wrote: |
What is the user's group membership? You could set the specific permissions once to a group, and make that user a member of that group. What OS? What version of OS and MQ?
There are several APARs on this command. You may like to open a PMR. |
OS is Linux SUSE WebSphere is V7.0
The user is apart of its own group and I am granting authority at the group level.
ie
setmqaut -m MYQMGR -n '**' -t listener -g mygroup +dsp |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Dec 17, 2012 7:34 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
check the authorization matrix. However you may need +dsp +inq
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Boomn4x4 |
| Posted: Mon Dec 17, 2012 11:26 am Post subject: |
|
|
Disciple
Joined: 28 Nov 2011
Posts: 172
|
| Problem was resolved by setting the QMGR itself to +connect for that group. Not sure why only LSSTATUS needed it, but it did. |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Mon Dec 17, 2012 12:39 pm Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
@Boom4x4
You should not modify any WMQ file unless IBM Support has instructed you to do so. Only users in the mqm group should use runmqsc.
If you want the same functionality for non-mqm group users, then use MO72's mqsc command which takes the same syntax.
Then follow this for general instructions. If you use google, you will find the sPac to download MQExplorer too... |
|
| Back to top |
|
|
| Boomn4x4 |
| Posted: Mon Dec 17, 2012 12:50 pm Post subject: |
|
|
Disciple
Joined: 28 Nov 2011
Posts: 172
|
|
| Back to top |
|
|
| JosephGramig |
| Posted: Mon Dec 17, 2012 2:00 pm Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
 I don't think I would take that advice (from 2005 no less).
What do you think will happen when you apply maintenance? |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Dec 17, 2012 4:29 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| JosephGramig wrote: |
| I don't think I would take that advice (from 2005 no less). |
In fairness that link does say it applies to WMQv7.0
| JosephGramig wrote: |
| What do you think will happen when you apply maintenance? |
Possibly you'd need to change the executable permissions back.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Tue Dec 18, 2012 8:04 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
sPacs like MO72 have advantages:
- Works remotely (if you install the WMQ Client)
- Can update CCDTs (something I find people struggle with)
- Pushes responsibility for keeping up with it on the user
|
|
| Back to top |
|
|
| Boomn4x4 |
| Posted: Tue Dec 18, 2012 12:58 pm Post subject: |
|
|
Disciple
Joined: 28 Nov 2011
Posts: 172
|
| For future reference.... I just received instruction from IBM via a PMR I opened to follow the support doc I listed above. So, as of Dec 18, 2012... it is still valid. |
|
| Back to top |
|
|
|
|
