| Author |
Message
|
| james_pj |
 Posted: Wed Jul 31, 2002 9:09 am Post subject: crtmqm -g option / setmqaut on AIX |
 |
|
Novice
Joined: 31 Jul 2002
Posts: 11
Location: Virginia
|
Hi everyone,
I am new to MQSeries, working on
AIX 4.3
MQSeries 5.2
I have two questions:
Question 1:
ctrmqm with -g option gives the error.
AMQ8101: Unexpected error (893).
what are the other things to be considered when
using -g option with the command crtmqm?
My objective is to give access to the QMgr to the
user id beloging to the group mqmuser.
The MQSeries document says it will add an entry to
qm.ini.
Question 2: when I create the Qmgr and give access to
the users using the command
setmqaut -m MQMTEST.QUEUE.MANAGER -t qmgr -p userXX
+connect +inq
setmqaut -m MQMTEST.QUEUE.MANAGER -n TESTQ.LOCAL.QUEUE
-t queue -p userXX +browse +get +put +inq
It is not only giving access to userXX but to every
other id.
The Environment variable for OAM is set to no.
MQSNOAUT=no
Thanks.
_________________
--------------------------------------------
James PJ
-------------------------------------------- |
|
| Back to top |
|
 |
| james_pj |
| Posted: Wed Jul 31, 2002 10:36 am Post subject: |
|
|
Novice
Joined: 31 Jul 2002
Posts: 11
Location: Virginia
|
I got the answer for the question 2 from the MQseries Admin Manual:
It say, In MQSeries for UNIX systems, if you specify a set of authorizations for a principal, the same authorizations are given to all principals in the same primary group.
That is why, when I gave to the principal userXX, he belongs to groupXX and everyone in groupXX get the permission of userXX.
Which prompts me to ask one more question.
If we create two more groups under UNIX
1) Group: "mqmput" and have only userXX and mqm as the member of the group and give +put +inq to that group.
2) Group: "mqmget" and have only userYY and mqm as the member of the group and give +get +inq.
UserXX and userYY belongs to the same primary group say "gadmin" where mqm perviledges are not given.
My requirement is, none other than userXX should put messages and only userYY able to get messages.
Will it work?
Thanks.
_________________
--------------------------------------------
James PJ
-------------------------------------------- |
|
| Back to top |
|
|
| mrlinux |
| Posted: Wed Jul 31, 2002 11:07 am Post subject: |
|
|
Grand Master
Joined: 14 Feb 2002
Posts: 1261
Location: Detroit,MI USA
|
Yes, you may have to make there primary group the userXX and a secondary group gadmin. Try it your way first, I have had groups for non mqm privledges and access to certain queues, so that part will work.
_________________
Jeff
IBM Certified Developer MQSeries
IBM Certified Specialist MQSeries
IBM Certified Solutions Expert MQSeries |
|
| Back to top |
|
|
| james_pj |
| Posted: Wed Jul 31, 2002 11:26 am Post subject: |
|
|
Novice
Joined: 31 Jul 2002
Posts: 11
Location: Virginia
|
ok, let me try that.
do you know why the ctrmqm with -g option gives me error while creating a queue manager in AIX?
_________________
--------------------------------------------
James PJ
-------------------------------------------- |
|
| Back to top |
|
|
| jc_squire |
| Posted: Wed Jul 31, 2002 11:57 am Post subject: |
|
|
Centurion
Joined: 14 Apr 2002
Posts: 105
Location: New Zealand
|
Hi,
Is the mqm user part of the application group before you run crtmqm -g ?
Regards
_________________
J C Squire
IBM Certified Specialist - MQSeries |
|
| Back to top |
|
|
| james_pj |
| Posted: Wed Jul 31, 2002 12:27 pm Post subject: |
|
|
Novice
Joined: 31 Jul 2002
Posts: 11
Location: Virginia
|
Yes, mqm is part of the applicationgroup.
Does it requires rwx for the applicationgroup to the folder on which the QMGR will be created.
_________________
--------------------------------------------
James PJ
-------------------------------------------- |
|
| Back to top |
|
|
| jc_squire |
| Posted: Wed Jul 31, 2002 12:45 pm Post subject: |
|
|
Centurion
Joined: 14 Apr 2002
Posts: 105
Location: New Zealand
|
nope - dont think so. as far as I can see the only requirement is that mqm is part of the application group.
what if you create the qmgr without -g option and then add the stanza to the qm.ini file. not sure if that will work but you can give it a go.
Regards
_________________
J C Squire
IBM Certified Specialist - MQSeries |
|
| Back to top |
|
|
| james_pj |
| Posted: Wed Jul 31, 2002 1:37 pm Post subject: |
|
|
Novice
Joined: 31 Jul 2002
Posts: 11
Location: Virginia
|
I couldn't get the stanza to be added on the qm.ini related to the -g option from the docs.
Any help is appreciated.
Thanks.
_________________
--------------------------------------------
James PJ
-------------------------------------------- |
|
| Back to top |
|
|
| jc_squire |
| Posted: Wed Jul 31, 2002 2:34 pm Post subject: |
|
|
Centurion
Joined: 14 Apr 2002
Posts: 105
Location: New Zealand
|
we have an old rs6000 running AIX 4.3 and MQ 5.2
just ran (from root) "crtmqm -g mqtest TESTMQ" where root and mqm are part of the mqtest group and the qmgr name was TESTMQ. Had no problems and all default objects created successfully.
Do you have all the latest MQ updates installed?
Regards
_________________
J C Squire
IBM Certified Specialist - MQSeries |
|
| Back to top |
|
|
| bower5932 |
| Posted: Thu Aug 01, 2002 5:51 am Post subject: |
|
|
Jedi Knight
Joined: 27 Aug 2001
Posts: 3023
Location: Dallas, TX, USA
|
| Does your crtmqm generate an FDC file in /var/mqm/errors when it fails? If it does, post the top of it here. It might shed some light on what is causing the failure. |
|
| Back to top |
|
|
| james_pj |
| Posted: Thu Aug 01, 2002 8:23 am Post subject: |
|
|
Novice
Joined: 31 Jul 2002
Posts: 11
Location: Virginia
|
Checked the folder /var/mqm/errors , The FDC file is not updated since Jul 29th. I tried crtmqm -g mqmtest MQMTEST again, the FDC is not getting updated.
The first question from UnixAdmin to run crtmqm -g under the root login will be why root? what is it going to do / write ...? So I want to have it as the last option.
Thanks.
Regards,
_________________
--------------------------------------------
James PJ
-------------------------------------------- |
|
| Back to top |
|
|
| garyweik |
| Posted: Mon Aug 19, 2002 9:57 am Post subject: Error 883 |
|
|
Apprentice
Joined: 28 Jun 2002
Posts: 30
Location: Miamisburg, Ohio
|
You need to "unset EXTSHM" and try again.
Gary Weik |
|
| Back to top |
|
|
|
|
