| Author |
Message
|
| vivekkooks |
 Posted: Fri Jun 27, 2003 12:44 am Post subject: [Solved] new user IDs |
 |
|
Voyager
Joined: 11 Jun 2003
Posts: 91
|
Hello,
I am new to MQSeries. I have installed MQSeries successfully on Linux/Intel.
I have tested the sample programmes for putting and getting messages.
The user mqm has all the access to the file systems(/opt/mqm and /var/mqm).
But when I created another user (adduser username) with group of mqm and tested the programs, I am getting authentication error.
(I changed group by chown user.mqm filename)
So, can anybody tell how to give access to different users so that that user can put and get messages from mqseries.
thanks, |
|
| Back to top |
|
 |
| rwa |
| Posted: Fri Jun 27, 2003 1:46 am Post subject: |
|
|
Voyager
Joined: 22 Jan 2002
Posts: 76
Location: Duesseldorf/Germany
|
Users (principal in WSMQ words) or Groups must be granted access to WSMQ Resource. This has to be configured with setmqaut.
Access rights are shown with dspmqaut. |
|
| Back to top |
|
|
| vivekkooks |
| Posted: Fri Jun 27, 2003 2:09 am Post subject: |
|
|
Voyager
Joined: 11 Jun 2003
Posts: 91
|
hello,
I have tried setmqaut -m testMQM -n TESTQUEUE -t q -p root +all.
and then run the put msg sample as root. But Still I am getting connect failed with reason code 2035.
Am I missing something?
vivek |
|
| Back to top |
|
|
| rwa |
| Posted: Fri Jun 27, 2003 2:55 am Post subject: |
|
|
Voyager
Joined: 22 Jan 2002
Posts: 76
Location: Duesseldorf/Germany
|
You also have to add the right to access the queue manager.
setmqaut -m testMQM -t qmgr -p root +all |
|
| Back to top |
|
|
| vivekkooks |
| Posted: Fri Jun 27, 2003 3:33 am Post subject: |
|
|
Voyager
Joined: 11 Jun 2003
Posts: 91
|
It worked successfully,
thanks |
|
| Back to top |
|
|
| opmind |
| Posted: Tue Jul 01, 2003 12:29 am Post subject: |
|
|
Acolyte
Joined: 04 Dec 2001
Posts: 68
|
This command runs well, but for my part as an System Engineer and MQS, I really don't agree to grant root to acces MQSeries objects...
Cyril |
|
| Back to top |
|
|
| rwa |
| Posted: Tue Jul 01, 2003 12:35 am Post subject: |
|
|
Voyager
Joined: 22 Jan 2002
Posts: 76
Location: Duesseldorf/Germany
|
I totally agree with you. But to get thinks running as a first test it's OK.
In an real Test-, UAT- and Produktionenvironment root should have no access to WSMQ.
Instead real or application users must be granted only the rights they need. This means no +all.
Rainer |
|
| Back to top |
|
|
| opmind |
| Posted: Tue Jul 01, 2003 11:57 pm Post subject: |
|
|
Acolyte
Joined: 04 Dec 2001
Posts: 68
|
| rwa wrote: |
I totally agree with you. But to get thinks running as a first test it's OK.
In an real Test-, UAT- and Produktionenvironment root should have no access to WSMQ.
Instead real or application users must be granted only the rights they need. This means no +all.
Rainer |
Yep, exactly... But on solaris root is granted by default... I still wonder why because on AIX it is not 
Cyril |
|
| Back to top |
|
|
|
|
