| Author |
Message
|
| MBwannabe |
 Posted: Mon Jul 13, 2015 6:14 am Post subject: Correct setmqaut commands for client connections |
 |
|
Newbie
Joined: 17 Aug 2009
Posts: 4
|
I apologise if this is very simplistic. To halt the "check google", check manual" comments I would just like to say I have spent many hours doing that and can't find a definitive answer. I have defined a svrconn chl e.g. CLIENT.SVRCONN, with a MCAUSER of e.g. user1.
I then allow connection to the qmgr :
setmqaut -m QMGR1 -t qmgr -g group1 -all +connect +inq +dsp
then I am stuck, I know what to do for the specific queues, but is there anything I should do for the svrconn chl?
Thanks. |
|
| Back to top |
|
 |
| exerk |
| Posted: Mon Jul 13, 2015 6:22 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Nothing, unless you want that particular user having the ability to alter the CHANNEL attributes...
EDIT: I missed the obvious statement in regard to CHLAUTH 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| MBwannabe |
| Posted: Mon Jul 13, 2015 6:28 am Post subject: |
|
|
Newbie
Joined: 17 Aug 2009
Posts: 4
|
| Many thanks. WRT CHLAUTH, unfortunately we still have some MQ instances out there running older versions. |
|
| Back to top |
|
|
| exerk |
| Posted: Mon Jul 13, 2015 6:30 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| MBwannabe wrote: |
| Many thanks. WRT CHLAUTH, unfortunately we still have some MQ instances out there running older versions. |
Shouldn't stop you doing it on the ones that can be done 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| MBwannabe |
| Posted: Mon Jul 13, 2015 6:33 am Post subject: |
|
|
Newbie
Joined: 17 Aug 2009
Posts: 4
|
It's a project in place already, as well as finding and SSL enabling channels that havn't been done yet. Luckily not too many of those  |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Tue Jul 14, 2015 5:30 pm Post subject: Re: Correct setmqaut commands for client connections |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
| MBwannabe wrote: |
I apologise if this is very simplistic. To halt the "check google", check manual" comments I would just like to say I have spent many hours doing that and can't find a definitive answer. I have defined a svrconn chl e.g. CLIENT.SVRCONN, with a MCAUSER of e.g. user1.
I then allow connection to the qmgr :
setmqaut -m QMGR1 -t qmgr -g group1 -all +connect +inq +dsp
then I am stuck, I know what to do for the specific queues, but is there anything I should do for the svrconn chl?
Thanks. |
Other than user1 being in group1, no.
The profiles for the specific queues should have the minimum authorities required for group1. Do not over-authorize. eg. Don't use +setall if its not required. Ideally, user1 should be the only member of group1.
_________________
Glenn |
|
| Back to top |
|
|
|
|
