| Author |
Message
|
| hkhan12 |
 Posted: Tue Jan 22, 2008 4:47 am Post subject: setmqaut worked on Solaris but not working on AIX |
 |
|
Voyager
Joined: 08 Aug 2002
Posts: 98
|
Hi MQ Experts,
I have noticed that following setmqaut command is NOT working on AIX where as it worked out well on Solaris.
setmqaut -m EESO081I -t channel -n SYSTEM.ADMIN.SVRCONN -p jdev -dsp
why and why not?
Thank you for your input.
Warm Regards, |
|
| Back to top |
|
 |
| Nigelg |
| Posted: Tue Jan 22, 2008 4:50 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
Your question is too vague to answer.
You could improve it by giving examples of what you mean by 'work' and 'not work'.
The most likely cause is that the conditions on AIX are not the same as on Solaris, for example, the principal jdev does not exist on AIX.
_________________
MQSeries.net helps those who help themselves.. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Jan 22, 2008 5:08 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20767
Location: LI,NY
|
It is DANGEROUS on Unix to use a principal as the authorization is really assigned to the principal's primary group. You should use -g and not -p
Enjoy 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| hkhan12 |
| Posted: Tue Jan 22, 2008 5:21 am Post subject: |
|
|
Voyager
Joined: 08 Aug 2002
Posts: 98
|
Hi Guys,
I have tried even -g as well. What I mean to say work or not work is as follows:
work - output gives me this
setmqaut -m EESO081I -t channel -n SYSTEM.ADMIN.SVRCONN -p jdev -dsp
The setmqaut command completed successfully.
not work - output gives me this
setmqaut -m EEAX041I -t channel -n SYSTEM.ADMIN.SVRCONN -g jdev -dsp
AMQ7094: You specified an object type that is not valid, or more than one
object type.
Usage: setmqaut -m QMgrName [-n ObjName] -t ObjType [-p Principal | -g Group]
[-s ServiceName] Authorizations
I did man setmqaut both on AIX and Solaris and this what I found.
On Solaris for object type
man setmqaut
-tObjectType
Specifies the type of object for which the authoriza-
tions are to be changed. Possible values are:
authinfo - authentication information object, for
use with Secure Sockets Layer (SSL) channel secu-
rity
channel or chl - channel
clntconn or clcn - client connection channel
listener or lstr - listener
namelist or nl - namelist
process or prcs - process
queue or q - queue or queues matching the object
name parameter
qmgr - queue manager
service or srvc - A service
man setmqaut on AIX
-tObjectType
Specifies the type of object for which the
authorizations are to be changed.
Possible values are:
q or queue
prcs or process
qmgr
As you can see here, object type channel is not mentioned here.
Any help would be highly appreciated!!! |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Jan 22, 2008 5:24 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
And does "dspmqver" show different results on Solaris than it does on AIX?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| hkhan12 |
| Posted: Tue Jan 22, 2008 5:58 am Post subject: |
|
|
Voyager
Joined: 08 Aug 2002
Posts: 98
|
Dear Jefflowrey,
Yes, it does. Here it is
Solaris has WMQ 6.0.2.1 and AIX is WMQ 5.3 with CSD 8
I guess this does make a difference. Thanks a lot for pointing it out.
So, I think I have no choice but to upgrade AIX to at least CSD13. Isn't it?
Warm Regards, |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Jan 22, 2008 6:17 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
MQ v5.3, at any patch level, doesn't support MQ authorities on channels.
You need to upgrade to v6 for this, and hundreds of other reasons.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| vennela |
| Posted: Fri Feb 01, 2008 7:27 am Post subject: |
|
|
Jedi Knight
Joined: 11 Aug 2002
Posts: 4055
Location: Hyderabad, India
|
SYSTEM.ADMIN.SVRCONN
AFAIK, this object is not defined automatically on the creation of the QMGR.
Looks like that is the problem |
|
| Back to top |
|
|
| supreeth |
| Posted: Fri Feb 01, 2008 8:23 am Post subject: |
|
|
Voyager
Joined: 17 May 2005
Posts: 90
Location: London
|
I beleive u accidentally skipped the post where he said hez still in 5.3.
_________________
Supreeth Gururaj
IBM Certified WMQ Solution Expert |
|
| Back to top |
|
|
|
|
