Thanks for all replies. Dave, Yes - MSCS would be ideal but apparently our SAN people won't allow it. I need to find out why.
Peter, That is true what you say but I don't think a domain user would help here. The problem seems to be that when the directories and files are created on the shared disk by the 1st Windows system, it sets the access permissions to its own local mqm group sid. If we then run up the QMgr on the 2nd Windows box, *its* local mqm has a different sid and so it doesn't have the file permissions to the MQ data files. Even if we used a domain userid which was in *both* local mqm groups, it still wouldn't have access on the 2nd Windows box because it wouldn't have file-level access. On Unix this is easily solved by ensuring that the uid/gid for mqm are the same on both systems but I don't believe you can do this on Windows. Cheers, Paul -----Original Message----- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Potkay, Peter M (ISD, IT) Sent: 23 July 2004 00:29 To: [EMAIL PROTECTED] Subject: Re: MQ on Windows with shared disks Regarding security: If you have specific UserIDs that need setmqaut commands run against them, you must use Domain Ids so that the Windows SID will be the same for the ID, regardless of which server it is running on. Define a UserID called PETER on Server1 and define a UserID called PETER on Server2 will give you to IDs that to the human eye look alike, but your setmqaut commands that you run for QM1 will all not be recognized when QM1 fails over to Server2. You need an ID like DOMAIN_NAME/PETER, and then add that ID to both servers. -----Original Message----- From: Crupi, Margherita [mailto:[EMAIL PROTECTED] Sent: Thursday, July 22, 2004 6:49 PM To: [EMAIL PROTECTED] Subject: Re: MQ on Windows with shared disks Paul, We run MSCS clusters using EMC-SRDF for the MQ data files for live/failover purposes on W2K without any issues - which would be similar enough for your query. We do not have to replicate the registries between the 2 clusters and have had no issues with security using domains either. Hope this helps. -----Original Message----- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Meekin, Paul Sent: Friday, 23 July 2004 1:44 AM To: [EMAIL PROTECTED] Subject: MQ on Windows with shared disks Hi all, We are looking at the feasability of running MQ on a pair of Windows 2000 servers in a live/fail-over configuration. The idea is to put all of the MQ data files onto a shared disk using EMC-SRDF which will be available to whichever machine is currently running in production. Note that we cannot use MSCS for this - only a shared disk. Has anyone done this? Potential problems that we can see include the need to replicate the registry entries as well as the fact that the local mqm group on each machine will have a different sid (if that's the right terminology for groups) which might cause problems with regard to the MQ file permissions. Any experiences would be very helpful. Cheers, Paul Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
