-----Original Message-----
From: Rechsteiner, Guido [mailto:[EMAIL PROTECTED]
Sent: 26 April, 2004 09:05
To: [EMAIL PROTECTED]
Subject: Re: Security problem on new qmgrHi NadiI expect, security switch(es...) have been defined but no access profiles...Try this one first:Define in the class MQADMIN the profile xxxx.NO.SUBSYS.SECURITY where xxxx is the subsystem name. After refreshing the profile, recycle the queue manager. This should turn off any security check. I expect, everything will then work, as this way, no security check should happen.Afterwards, switch on security to fit your needs. Eg, if you dont need connection to be checked, define in MADMIN xxxx.NO.CONNECT.CHECKS. For all type of resources without a '.NO.' profile, security will be checked and you have to define corrsponding rules, eg. 'RDEFINE MQCMDS xxxx.CLEAR.QLOCAL UACC(NONE)' and 'PERMIT xxxx.CLEAR.QLOCAL CLASS(MQCMDS) ACCESS(ALTER) ID(group_which_is_allowed_to_do_so)'. Dont forget to delete the xxxx.NO.SUBSYS.SECURITY... ;-)Check your system setup guid, chapter 'using RACF classes and profile', hope, it's also useful with top secret...RegardsGuido-----Original Message-----
From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Khan, Nadi N
Sent: Montag, 26. April 2004 08:34
To: [EMAIL PROTECTED]
Subject: Security problem on new qmgrHi All,
I have created a new qmanager on Z/os. My starter task for the qmamager starts up ok.
When I try and execute any command I get a security problem. Our security people have checked and said that there is nothing that they can do and that I should talk to IBM. The security people have put everything in warn mode and say that I should be running.The security guys say as they dont see anything in their logs the problem is in mq.We use top secret a CA product for security.When I do a command from the command line using the mq cpf I get the following response from MQ
RESPONSE=RC35 CSQ9016E +MQ35 DIS COMMAND REJECTED, UNAUTHORIZED REQUEST
when I try and access the mq panels I getCSQO013I Not authorized to use queue manager.
also get this response from one of the other panels
MQM Queue Browse - Entry Pan 0002 2035 MQCONN
when the channel initaiator tries to start up it abends and gives me the following messages
+CSQX007E +MQ35 CSQXADPI Unable to connect to queue manager MQ35, MQCC=2 MQRC=2035
I would appreciate any help as I am now holding up everything and we would have to backout because of mq.thanks
__________________________________________________________________________________________________________________________________For information about the Standard Bank group visit our web site <www.standardbank.co.za>
__________________________________________________________________________________________________________________________________
Disclaimer and confidentiality note
Everything in this e-mail and any attachments relating to the official business of Standard Bank Group Limited is proprietary to the group.
It is confidential, legally privileged and protected by law.
Standard Bank does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of the group.
The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read,
disclose or use the content in any way.
Standard Bank can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference.
___________________________________________________________________________________________________________________________________
****************************************************************************
The content of this e-mail is intended only for the confidential use of the
person addressed. If you have received this message in error, please notify
us immediately by electronic mail, by telephone or by fax at the above num-
bers.
E-mail communications are not secure and therefore we do not accept any res-
ponsibility for the confidentiality or altered contents of this message.
Please be aware that SIS Group and its subsidiary companies cannot accept
any orders or other legally binding correspondence with a participant as
part of an E-mail. The views expressed above are not necessarily those held
by SIS Group and its subsidiary companies and not binding for them.
***********************************************************************hexfe
__________________________________________________________________________________________________________________________________
Disclaimer and confidentiality note
Everything in this e-mail and any attachments relating to the official business of Standard Bank Group Limited is proprietary to the group.
It is confidential, legally privileged and protected by law.
Standard Bank does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of the group.
The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read,
disclose or use the content in any way.
Standard Bank can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference.
___________________________________________________________________________________________________________________________________
