ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » MQ AMS UNIX example

Post new topic  Reply to topic
 MQ AMS UNIX example « View previous topic :: View next topic » 
Author Message
rickwatsonb
PostPosted: Fri Feb 07, 2014 6:27 am    Post subject: MQ AMS UNIX example Reply with quote

Voyager

Joined: 15 Aug 2006
Posts: 87
Location: USA: Mid-West

Hi,

I am working on setting up MQ AMS 7.5 on Linux for the first time utilizing the alice and bob Quick Start Guide for UNIX platforms example. At step 2, when testing the amqsput by alice (from Step 8 directions) I am getting a 2058 (2058 Queue Manager name error). However, I am using the correct queue manager name; the same exact command to put a message used by alice works when the uid is mqm. This example uses local bindings, and I have not set up anything special – just followed the directions explicitly.

My question is: has anyone successfully set up the alice and bob MQ AMS on Linux explicitly following the directions, or did you find that there is a configuration or step that needs to be added to the directions?

So far, the only post concerning the alice and bob MQ AMS example is from w1ndy and it looks like he got the example working.

Thanks for your time and help.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Fri Feb 07, 2014 6:29 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Well do you have default routing between the qmgrs?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
mqjeff
PostPosted: Fri Feb 07, 2014 6:37 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

FJ - there's no second qmgr, so no routing needed.

rickwatsonb - I've not done this example. Looking at the setmqaut commands, it looks like they are using -p which seems odd. Unix usually needs to use -g, since it's always the user's group that's authorized, not the principle.
Back to top
View user's profile Send private message
rickwatsonb
PostPosted: Fri Feb 07, 2014 6:53 am    Post subject: Reply with quote

Voyager

Joined: 15 Aug 2006
Posts: 87
Location: USA: Mid-West

Thank you fjb_saper and Jeff for the replies.

Yes - this example uses one queue manger and local bindings. I do have a PMR open on this so eventually we will get to an answer. But, as I stated in the original post - if anyone has this example working on UNIX/Linux it would be helpful to know if any addtional steps were required to make it work.

The uids alice and bob were added to the - users - group; authorities were granted to the group by default - not sure if - default - is the correct technical term here, but the meaning is there I hope. MQ experts can elaborate here if you want...

dmpmqaut -m QM_VERIFY_AMS -t qmgr -g users
...
profile: self
object type: qmgr
entity: users
entity type: group
authority: inq connect
...

dmpmqaut -m QM_VERIFY_AMS -t q -g users
...
profile: TEST.Q
object type: queue
entity: users
entity type: group
authority: get put
...
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Fri Feb 07, 2014 12:28 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

you might need to have get,put,inq, dsp
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
hughson
PostPosted: Sat Feb 08, 2014 3:07 am    Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

Best advice I can give on running this example is to set it all up first without AMS, thus ensuring that you have the correct authorities set for your non-privileged users, and can run the put and get samples correctly. Then enable AMS and re-run. That way you eliminate non-AMS related set-up errors and know that anything that fails when you turn it on is to do with AMS set-up issues.

Of course, I may be telling you things you have already tried, if so, I apologise.

Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » MQ AMS UNIX example
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.