| Author |
Message
|
| pandeg |
 Posted: Fri Aug 28, 2015 12:05 pm Post subject: Setmq Authorization for Remote MQ Client 8 |
 |
|
Disciple
Joined: 21 Oct 2014
Posts: 195
|
Hi, I want to set Authorization for the Remote MQ client version 8 with below privileges on particular Queue Manager. MQ client is using mqm user to connect to Queue Manager. I want to provide only below authorization.
Connect - Grant permission to connect to queue manager
Browse - Grant permission to get message from a queue using BROWSE OPTiON while issuing MQGET CALL
Inq - Grant permission to inquire about a queue using MQI calls
Get - Grant permission to get message from queue by issuing MQGET CALL
Put - Grant permission to put message on the queue by issuing MQPUT CALL
Clr - Grant permission to Clear queues
Dsp - Grant permission to display the attributes of the object
Ctrl - Grant permission to start or stop channels, listeners |
|
| Back to top |
|
 |
| smdavies99 |
| Posted: Fri Aug 28, 2015 12:12 pm Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
My suggestion is to look on the IBM Developerworks site for the articles by Morag Hughson on the subject of MQ Security.
This will give you a good insight into what is needed.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| Vitor |
| Posted: Fri Aug 28, 2015 12:37 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| smdavies99 wrote: |
My suggestion is to look on the IBM Developerworks site for the articles by Morag Hughson on the subject of MQ Security.
This will give you a good insight into what is needed. |
Not just for the usual "research things yourself" trend that goes through this forum, but because Morag is not only the expert on this, she writes amazing material.
Note also that the mqm user has a special meaning to MQ. You should give serious consideration to using a different user id in the client connection and authorizing that.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| pandeg |
| Posted: Fri Aug 28, 2015 1:31 pm Post subject: |
|
|
Disciple
Joined: 21 Oct 2014
Posts: 195
|
| smdavies99 wrote: |
My suggestion is to look on the IBM Developerworks site for the articles by Morag Hughson on the subject of MQ Security.
This will give you a good insight into what is needed. |
Thanks !
I was trying to search that blog in google , but couldn't find it. Can you please share me the link. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Aug 28, 2015 1:57 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Search for 'setmqaut' command
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
