Title: Message
This is one of the things discussed in the security article at:
http://www.sjg-enterpriseintegration.com/closingmqholes.asp
 
-----Original Message-----
From: MQSeries List [mailto:[EMAIL PROTECTED]On Behalf Of [EMAIL PROTECTED]
Sent: 07 January 2004 13:00
To: [EMAIL PROTECTED]
Subject: Re: display / remove all authorizations

yep!
-----Original Message-----
From: Wright, Tim (ANTS) [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 07, 2004 1:29 PM
To: [EMAIL PROTECTED]
Subject: Re: display / remove all authorizations

"on UNIX the authority is stored on group level (even if assigned using -p user...) " - is this really true?
if you assign using -p user do the permissions then get assigned to that users primary group or all groups of which it is a member?
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: 06 January 2004 16:33
To: [EMAIL PROTECTED]
Subject: Re: display / remove all authorizations

David,
on UNIX the authority is stored on group level (even if assigned using -p user...)
So you need to know the group id your userid was in before it moved to mqm.
You can then remove the authority from the group using the setmqaut commands.
to find out what is currently set use: amqoamd -m Qmgrname -s | grep groupid or leave out the | grep groupid if you want to see all settings.

Michael  

-----Original Message-----
From: David Awerbuch [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 06, 2004 4:16 PM
To: [EMAIL PROTECTED]
Subject: display / remove all authorizations


Hello all,

I have a Solaris userid that should have belonged to the mqm group, but wasn't
added that way.  In order to at least begin testing, I used setmqaut tro
authorize the userid with [[-t qmgr +all +alladm +allmqi]] as well as a number
of [[-t q +allmqi  -n queue.name]] for those queues it needed access to.

Now that the user is in group mqm, I want to remove all these authorizations.
Is there a simple way to do this, that is, to reset the userid to the default
authorization definition, whatever that might be?  I guess this hand in hand
with the question, is there an easy way to display and remove all of a user's
authorizations?

Thanks,
Dave A.



=====
David A. Awerbuch,  IBM Certified MQSeries Specialist
APC Consulting Services, Inc.
Providing Automated Solutions to Business Challenges
West Hempstead, NY    (516) 481-6440
[EMAIL PROTECTED]

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive



-----------------------------------------------------------------
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-----------------------------------------------------------------


***************************************************************************
This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error.

Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication.

This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA).
***************************************************************************

Reply via email to