PCFAgent 查询需要哪些权限?
我正在使用我编写的一个小应用程序来查询 QM 上某些队列的状态。查询本身是使用 PCFAgent
/PCFMessageAgent
java 类完成的。
我的问题是:必须授予哪些(最低)权限才能允许某个 MCA 用户运行监控 PCF 命令(特别是 MQCMD_INQUIRE_Q_STATUS
和 MQCMD_INQUIRE_Q)?
注意:“监视”是指命令不应以任何明显的方式改变队列管理器的状态。
I'm using a little application I wrote to enquire about the state of some queues on a QM. The enquiry itself is done using the PCFAgent
/PCFMessageAgent
java classes.
My question is: which (least) privileges must be granted to allow a certain MCA user to run monitoring PCF commands (in particular, MQCMD_INQUIRE_Q_STATUS
and MQCMD_INQUIRE_Q
)?
Note: by "monitoring" I mean that the commands should not alter the state of the queue manager in any appreciable way.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
该程序必须能够执行以下操作:
Dale Lane 不久前写了一篇博客文章,描述了以下一般情况:使用 WebSphere MQ Explorer 作为只读查看器。由于 WMQ Explorer 需要显示所有对象类型的所有对象,因此它比您要求的要宽松一些。然而,您需要的设置是 Dale 提供的设置的子集,并且该帖子对所使用的配置有很多很好的背景知识。我可以在这里复制他的
setmqaut
命令,但这篇文章值得一读。顺便说一句,如果您有 v7.1 QMgr 和新的 WMQ Explorer(从 SupportPac MS0T 下载),则有一个安全向导在 WMQ Explorer 中进行与 Dale 在其博客文章中推荐的相同设置。
The program must be able to do the following:
Dale Lane wrote a blog post a while back describing this for the general case of: Using WebSphere MQ Explorer as a read-only viewer. Since WMQ Explorer needs to display all objects of all object types it is a bit more permissive than you are asking for. However, the settings you need are a subset of the ones Dale provides and the post has a lot of good background on the configurations used. I could copy his
setmqaut
commands here but its worth reading the post.Incidentally, if you have a v7.1 QMgr and a new WMQ Explorer (downloaded from SupportPac MS0T) there's a security wizard in WMQ Explorer that makes the same settings Dale recommends in his blog post.