| Author |
Message
|
| jefflowrey |
 Posted: Mon Jun 05, 2006 7:48 am Post subject: mqsideleteaclentry bug? |
 |
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I'm trying to change the configmgr service user's ACL permissions from being "all machines" to just machine specific.
So I issue an mqsicreateaclentry <configmgr name> -u "user" -m "machine" -x F -p.
This works.
Then I issue an mqsideleteaclentry <configmgr name> -u "user" -a -p
And this completes successfully, but mqsilistaclentry still shows the ACL!
Is this a bug, or is it not possible to do this?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
 |
| mlafleur |
| Posted: Mon Jun 05, 2006 8:49 am Post subject: |
|
|
Acolyte
Joined: 19 Feb 2004
Posts: 73
|
| Have you checked the Configuration Manager Proxy API Exerciser (or used the API) to see if the entry was successfully deleted despite what mqsilistaclentry says? |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Mon Jun 05, 2006 8:57 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| mlafleur wrote: |
| Have you checked the Configuration Manager Proxy API Exerciser (or used the API) to see if the entry was successfully deleted despite what mqsilistaclentry says? |
It reports the same information.
I didn't think it was a bug in mqsilistaclentry.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| mlafleur |
| Posted: Mon Jun 05, 2006 9:26 am Post subject: |
|
|
Acolyte
Joined: 19 Feb 2004
Posts: 73
|
Which platform are you on?
Last edited by mlafleur on Mon Jun 05, 2006 9:50 am; edited 1 time in total |
|
| Back to top |
|
|
| mqmatt |
| Posted: Mon Jun 05, 2006 9:31 am Post subject: |
|
|
Grand Master
Joined: 04 Aug 2004
Posts: 1213
Location: Hursley, UK
|
Hi Jeff,
It's not possible to remove that special ACL entry for the Config Manager's service userid. This is a known limitation.
Cheers
-Matt |
|
| Back to top |
|
|
|
|
