Emile,

If the OAM is enabled, it's a good idea to have these because the default is
no authorization.  Without a user and group (and suitable auths in
SYSTEM.AUTH.DATA.QUEUE), the application can't connect.

Unless the alternative you had in mind was putting them into the mqm group.
I know a number of shops that simply put their apps in the mqm group.  It is
a common practice, and an unfortunate one.  I suppose there are some
low-risk situations where this is convenient and practical.  But for the
most part, the risks outweigh the benefits.  Especially in larger shops.  As
the number of people who can administer a QMgr increases, so does the risk
that they will step on each other's work, mix traffic in queues, set up
mutually exclusive configurations (one relies on channel conversion, another
uses encryption and relies on the channel NOT doing conversion, for example)
or use the administrative access to hack into neighboring QMgrs.

Maybe if you could clarify what your proposed alternatives are, we could
discuss in more specific terms.

-- T.Rob

-----Original Message-----
From: Kearns, Emile E [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 30, 2003 7:29 AM
To: [EMAIL PROTECTED]
Subject: Application user and group for using MQ


Hi all,

I know this has been a discussion before, but is there anybody with a
document or motivation around why it is a good idea to have the above?



For information about the Standard Bank group visit our web site
www.standardbank.co.za

Disclaimer and confidentiality note

Everything in this e-mail and any attachments relating to the official
business of the Standard Bank Group Limited  is proprietary to the group.
It is confidential, legally privileged and protected by law. Standard Bank
does not own and endorse any other content. Views and opinions are
those of the sender unless clearly stated as being that of the group.The
person addressed in the e-mail is the sole authorised recipient. Please
notify the sender immediately if it has unintentionally reached you and do
not read, disclose or use the content in any way.
Standard Bank can not assure that the integrity of this communication has
been maintained nor that it is free of errors, virus, interception or
interference.
I

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive

Reply via email to