ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexGeneral IBM MQ Supportrunmqsc access to non-mqm user.

Post new topicReply to topic
runmqsc access to non-mqm user. View previous topic :: View next topic
Author Message
Anant.v
PostPosted: Tue Sep 19, 2017 4:18 am Post subject: runmqsc access to non-mqm user. Reply with quote

Apprentice

Joined: 26 Nov 2014
Posts: 27
Location: Malaysia

Hi Guys,

its me and my questions back again

we have the need for providing a team with runmqsc access, but a read-only. I have seen an article on it, and that works perfect. Only thing that i have doubts in that is , the article states on changing the file permissions for AMQCLCHL.TAB and AMQRSYNA.DAT file.

The original permissions shipped with MQ are :

-rw-rw---- 1 mqm mqm 2042 Nov 18 2016 AMQCLCHL.TAB
-rw-rw---- 1 mqm mqm 16740 Aug 6 15:22 AMQRSYNA.DAT


The article wants to give read permission for others as well. Would there be any operational issue if i give an extra read permission ? Anyone faced any such issue ?

unable to provide link , site acting weird


Thanks !!!!
Back to top
View user's profile Send private message
mqjeff
PostPosted: Tue Sep 19, 2017 4:33 am Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17446

are you running runmqsc on the queue manager machine, or from another machine?
_________________
Read, Think, Try, Repeat
Back to top
View user's profile Send private message
Anant.v
PostPosted: Tue Sep 19, 2017 5:11 am Post subject: Reply with quote

Apprentice

Joined: 26 Nov 2014
Posts: 27
Location: Malaysia

From the qmgr machine.
Back to top
View user's profile Send private message
hughson
PostPosted: Tue Sep 19, 2017 3:39 pm Post subject: Reply with quote

Shaman

Joined: 09 May 2013
Posts: 728
Location: Bay of Plenty, New Zealand

Could you post a link to the article you were reading?

EDIT: OP sent me the link to the article as he can't post it himself.

It is:-

Limiting RUNMQSC authority for non-mqm users
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
hughson
PostPosted: Tue Sep 19, 2017 10:00 pm Post subject: Reply with quote

Shaman

Joined: 09 May 2013
Posts: 728
Location: Bay of Plenty, New Zealand

Those two files are somewhat historic. They were the way channel definitions were stored before they became objects in MQ V6. I would hazard a guess that a DISPLAY CHANNEL command would go nowhere near them now.

I cannot tell how old the article you are following is. No date on it at all, which is a shame.

I would suggest you test out whether your read-only runmqsc is happy running DISPLAY CHANNEL commands before you make the change to those two files, and you'll probably find that you don't need the change.

P.S. What version of MQ are you using. I think the restriction of having to be mqm to use runmqsc was lifted in a new-ish release. I think maybe MQ V8 but not 100% certain when.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Anant.v
PostPosted: Tue Sep 19, 2017 11:08 pm Post subject: Reply with quote

Apprentice

Joined: 26 Nov 2014
Posts: 27
Location: Malaysia

True Morag! Its from MQv8. We have MQ v7.5 in this scenario.

Also, i have tried running runmqsc without giving read permissions to the two files i mentioned. iam not able to runmqsc without giving a read permission to those files.

Also, i havent encountered any issues in my sandbox server so far. But was just seeking your expert opinion on whether i can land up in any issues due to this extra permission.

Thanks so far for enlightning me with your thoughts !!


Regards
Ananth
Back to top
View user's profile Send private message
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexGeneral IBM MQ Supportrunmqsc access to non-mqm user.
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.