| Author |
Message
|
| pintrader |
 Posted: Mon Jul 14, 2014 6:06 am Post subject: regarding groups in MQ 7.5 |
 |
|
Disciple
Joined: 22 Jan 2014
Posts: 164
|
Hi,
With regards to setmqaut or SET AUTHREC where there is option to specify a group (in windows), does it matter if my domain groups are created in an Organizational Unit or a group created in a Container class, such as under Users?
Whether I am using setmqaut or Set AUTHREC, the correct way to enter a group is :
1) setmqaut : -g "mygroup@mydomain.com"
2) SET AUTHREC ..... GROUP('mygroup@mydomain.com')
regardless of whether they are created in OU or other classes..
correct?
I am asking this because when I set authrec on a group to a profile, I cannot remove that authrec anymore even if I do a "delete authrec" or using MQExplorer. I am suspecting that i have entered the group definition wrongly. If there is anything wrong with my commands, why would it get created in the first place. I am bewildered.
thanks |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Mon Jul 14, 2014 6:58 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Have you tried
setmqaut .... -g ...... +auths .... +remove
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| pintrader |
| Posted: Tue Jul 15, 2014 8:07 pm Post subject: |
|
|
Disciple
Joined: 22 Jan 2014
Posts: 164
|
| fjb_saper wrote: |
Have you tried
setmqaut .... -g ...... +auths .... +remove
Have fun :innocent: |
hi thanks
In the documentation for setmqaut:
| Code: |
This example deletes the specified profile.
setmqaut -m qmgr1 -n a.b.* -t q -p user1 -remove |
it uses -remove.
What is the difference between +remove and -remove. A bit confusing for me.
thanks |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Wed Jul 16, 2014 9:55 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
+ on a permission means you are adding it
- on a permission means you are removing it
I believe that is why the example is -remove and that is what I use. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Wed Jul 16, 2014 10:54 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| JosephGramig wrote: |
- on a permission means you are removing it
|
-remove
Removing a remove? 
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Wed Jul 16, 2014 12:02 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Remove a granted authority.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Last edited by bruce2359 on Wed Jul 16, 2014 3:43 pm; edited 1 time in total |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Wed Jul 16, 2014 3:25 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
+remove and -remove do the same thing, and no other + or - authorities should be specified on the command.
_________________
Glenn |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Wed Jul 16, 2014 3:44 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| gbaddeley wrote: |
| +remove and -remove do the same thing, and no other + or - authorities should be specified on the command. |
Could this be made more confusing?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
