| Author | 
		  Message
		 | 
		
		  | Paddy | 
		  
		    
			  
				 Posted: Thu Jan 09, 2003 4:20 am    Post subject: Can you check authorizations to access a particular object? | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 09 Jan 2003 Posts: 2
  
  | 
		  
		    
			  
				Hi,
 
 
I'm looking for a way to check which principals/user groups have authorization to access to a particular object. 
 
I'm not a regular MQSeries user and am approching this from a security point of view.
 
 
Thanks,
 
 
Paddy. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | mqonnet | 
		  
		    
			  
				 Posted: Thu Jan 09, 2003 6:07 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Grand Master
 
 Joined: 18 Feb 2002 Posts: 1114 Location: Boston, Ma, Usa. 
  | 
		  
		    
			  
				I am afraid there is no such utility that would give you a page full of details with only one command specifying all the users and the authorities on each object on the qm in question.
 
 
You have to manually check for each principal/group for each mq object.
 
 
And you could do this using SETMQAUT command.
 
 
 
Cheers.
 
Kumar _________________ IBM Certified WebSphere MQ V5.3 Developer
 
IBM Certified WebSphere MQ V5.3 Solution Designer
 
IBM Certified WebSphere MQ V5.3 System Administrator | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | markt | 
		  
		    
			  
				 Posted: Thu Jan 09, 2003 7:27 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Knight
 
 Joined: 14 May 2002 Posts: 512
  
  | 
		  
		    
			  
				| The dmpmqaut command gives you that with V5.3. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | nimconsult | 
		  
		    
			  
				 Posted: Thu Jan 09, 2003 11:21 pm    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Master
 
 Joined: 22 May 2002 Posts: 268 Location: NIMCONSULT - Belgium 
  | 
		  
		    
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | mqonnet | 
		  
		    
			  
				 Posted: Fri Jan 10, 2003 5:58 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Grand Master
 
 Joined: 18 Feb 2002 Posts: 1114 Location: Boston, Ma, Usa. 
  | 
		  
		    
			  
				I never knew that there was such a util.  Thanks nicolas for sharing that with us.
 
 
But i guess it is platform specific as it is not available on all platforms.  Nor does Family books have any mention of it.
 
 
Cheers.
 
Kumar _________________ IBM Certified WebSphere MQ V5.3 Developer
 
IBM Certified WebSphere MQ V5.3 Solution Designer
 
IBM Certified WebSphere MQ V5.3 System Administrator | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | Paddy | 
		  
		    
			  
				 Posted: Tue Jan 14, 2003 2:07 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 09 Jan 2003 Posts: 2
  
  | 
		  
		    
			  
				Thanks for all your help.
 
 
Regards,
 
 
Paddy.    | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | PeterPotkay | 
		  
		    
			  
				 Posted: Wed Dec 10, 2003 8:40 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Poobah
 
 Joined: 15 May 2001 Posts: 7723
  
  | 
		  
		    
			  
				Anyone figure a way to pipe all this output to a text file? On Windows2000, if I run the following command:
 
 
E:\>dmpmqaut -m HIGHUBDA -p mqiptccc>out.txt
 
 
It creates an empty file called out.txt, but all the aut info still goes to the screen. _________________ Peter Potkay
 
Keep Calm and MQ On | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | bower5932 | 
		  
		    
			  
				 Posted: Wed Dec 10, 2003 9:03 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 27 Aug 2001 Posts: 3023 Location: Dallas, TX, USA 
  | 
		  
		    
			  
				Try something like:
 
 
dmpmqaut -m HIGHUBDA -p mqiptccc 2>out.txt | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | mrlinux | 
		  
		    
			  
				 Posted: Wed Dec 10, 2003 10:28 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Grand Master
 
 Joined: 14 Feb 2002 Posts: 1261 Location: Detroit,MI USA 
  | 
		  
		    
			  
				It writes all of the data to STDERR which goes to the screen in order
 
to redirect stderr  you need to use 2> fileName. 
 
 
There are 3 default handles opened up   
 
 0) STDIN
 
 1) STDOUT
 
 2) STDERR _________________ Jeff 
 
 
IBM Certified Developer MQSeries
 
IBM Certified Specialist MQSeries
 
IBM Certified Solutions Expert MQSeries | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | Zus | 
		  
		    
			  
				 Posted: Tue Dec 23, 2003 11:33 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 23 Dec 2003 Posts: 1
  
  | 
		  
		    
			  
				Hi, 
 
 
try dspmqaut command. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | 
		    
		   |