|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
How to add new user authorities on WMQ 6 that under MSCS? |
« View previous topic :: View next topic » |
Author |
Message
|
KoGor |
Posted: Thu Sep 26, 2013 7:26 am Post subject: How to add new user authorities on WMQ 6 that under MSCS? |
|
|
Voyager
Joined: 09 Nov 2005 Posts: 81 Location: Moscow,Russia.
|
Recently, I have faced with unexpected WMQ behavior.
Customer has WMQ 6 that runs on Windows 2003 EE R2 under MSCS control. There is simple two node cluster, nothing special.
There was a necessity to add to the queue manager and several queues special authorities for the local group.
I didn't find in WMQ documentation any requirements for MSCS cluster so we did it as usual.
1) Create group "MDUsers" on both Windows servers
2) Create couple users and add them to the group "MDUsers", again on both servers
3) Then I assigned special authorities to the MQ manager and queues o one server.
4) Checked access from external MQ Client, new authorities work just fine.
5) Then I moved MQ manager to the second MSCS node and checked authorities there. I was surprised but there wasn't any. So I have returned MQ Manager to the first node and authorities were there.
So I puzzled a little bit. It looks like I must set special authorities on both MSCS nodes. Am I right? As I said I didn't find any recommendations in Info Center yet.
Where do WMQ Object authority manager store the authority information then? Do each MSCS node has its own OAM or after all it is on shared disk where WMQ data and logs located?
Thank you in advance! |
|
Back to top |
|
 |
JosephGramig |
Posted: Thu Sep 26, 2013 10:59 am Post subject: |
|
|
 Grand Master
Joined: 09 Feb 2006 Posts: 1244 Location: Gold Coast of Florida, USA
|
The authority is recorded by SID. The SID is different on the two boxes. Repeat the grants once failed over.
Or, use UNIX and don't have this problem. |
|
Back to top |
|
 |
fjb_saper |
Posted: Thu Sep 26, 2013 11:24 am Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
When using the cluster you should only be using domain ids and groups  _________________ MQ & Broker admin |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|