Hello,
Why dont you use the setmqaut command to give the qmgr authorizations you want,
for example:
setmqaut -m YourQMGR -t qmgr -p root +connect +inq +dsp
and use the same command for the queue authorization you want.
Michel Jalette, CGI.
Pavel Tolkachev <[EMAIL PROTECTED]>@AKH-Wien.AC.AT> on 2003-09-30 13:08:17
Veuillez répondre à MQSeries List <[EMAIL PROTECTED]>
Envoyé par : MQSeries List <[EMAIL PROTECTED]>
Pour : [EMAIL PROTECTED]
cc :
Objet : Re: mqm group
Hi Navin,
It depends on your policies, but if you could get sudo for something like a 2-line
script, you could use 'newgrp mqm' as its first command, (the 2nd line would run the
thing you need). Then the process would be run under root:mqm even though root would
not be in a mqm group on a permanent basis.
Hope this will help,
Pavel
Navin Vali
<[EMAIL PROTECTED] To: [EMAIL PROTECTED]
IRWAYS.COM> cc:
Sent by: MQSeries Subject: mqm group
List
<[EMAIL PROTECTED]
C.AT>
09/30/2003 12:39 PM
Please respond to
MQSeries List
Hi All ,
The problem is, we are starting the communication server on Weblogic using the sudo
command.
The sudo command will start Weblogic as the "root" user.
All the processes created by this Weblogic instance will be owned by root.
WL server tries to connect to MQ Queues as the "root" user. However the root user is
not part of the mqm group and so MQ returns authentication failure.
We requested to add root to the mqm group but they security folks have refused
permission to add root to mqm group due to security and other issues.
Now is there any way we can resolve this issue? Starting and stopping of weblogic
rights can only be given to root and root cannot be part of mqm. Although we have a
mqadmin user which is part of mqm. Is there a way that we can start weblogic using
root but when its up it runs as mqadmin?
Any help will be highly appreciated.
Thanks in Advance
Navin
-------------------------------------------------------------------------------------------------
Get the best from British Airways at ba.com
http://www.ba.com
--
This e-mail may contain confidential and/or privileged information. If you are not the
intended recipient (or have received this e-mail in error) please notify the sender
immediately and destroy this e-mail. Any unauthorized copying, disclosure or
distribution of the material in this e-mail is strictly forbidden.
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
