The MQSeries Administration Wrapper runmqadm provides an additional layer of configurable granular access control to WebSphere MQ commands.
Distributed MQSeries products require that all command-line based administration actions be carried out by users who have authorisation to do any administration. The MQSeries Administration Wrapper provides an additional layer of configurable granular access control to MQSeries commands. This enables users who are not in the MQSeries administrative group (mqm) to perform various administrative actions. An audit trail is also created to monitor and log changes to the MQSeries configuration.
Unix system administrators may be familiar with the sudo command. This program is a similar concept, extended to cope with MQSC commands. Note: Only the command line programs (for example, runmqchl) and runmqsc commands are protected through this wrapper. Remote administration via the PCF command server is not monitored.
Withdrawn notice: This SupportPac has been withdrawn as WebSphere MQ v6 is End of Service.
The MQSeries Administration Wrapper can be used to define layered administration roles. For example, some users may be allowed full control of MQSeries channels but not to modify queue definitions. An audit trail is created, logging all actions performed by all users of the wrapper. This audit log can be monitored for unauthorised activity. The program removes the day-to-day need for anyone to log on to a machine as mqm or another fully-capable userid. Additional user-written MQSeries administration programs can be controlled through the configuration file.
NEW IN THIS RELEASE
The following change has been made in this release:
» Support added for Linux for Intel and Linux for zSeries.
» Service fixes have been applied.
Author: WebSphere MQ Development, Hursley
Initial Release: 30Jun00
Last Updated: 02Feb05
Current Version: 1.0.5
»Please note that the version number shown in the right-hand pane is the version of the MQ or WBI product that this SupportPac applies to. The date is the last webpage refresh.
To view the complete portfolio of WebSphere MQ SupportPacs please visit the WebSphere MQ SupportPacs homepage:
This SupportPac requires one of the following:
» WebSphere MQ, V5.2 (no longer supported)
» WebSphere MQ for AIX, V5.3
» WebSphere MQ for HP-UX, V5.3
» WebSphere MQ for Sun Solaris, V5.3
» WebSphere MQ for Windows, V5.3
» WebSphere MQ for Linux for Intel, V5.3
» WebSphere MQ for Linux for zSeries, V5.3
» This SupportPac has been functionally stabilised. It will work with, and is supported with, WMQ V6.0, but does not exploit any new features of V6.
To install the MQSeries Administration wrapper on UNIX platforms:
1. Logon as root.
2. Download ms0e_xxx.tar.Z in binary and store in /tmp (where xxx is the appropriate platform identifier).
3. Execute uncompress -fv /tmp/ms0e_xxx.tar.Z
4. Execute tar -xvf /tmp/ms0e_xxx.tar
5. Execute rm /tmp/ms0e_xxx.tar
6. This will create the necessary files.
7. Further details about installation of the MQSeries Administration Wrapper are given in the User's Guide.
To install the MQSeries Administration wrapper on a Windows NT platform:
1. Create an empty directory called tmp and make it current.
2. Download file ms0e_nt.zip to this directory.
3. Uncompress using InfoZip's Unzip .
4. This will create the necessary files.
5. Read the release notes in the readme.txt file supplied.
6. Further details about installation of the MQSeries Administration Wrapper are given in the User's Guide.
|Download||RELEASE DATE||LANGUAGE||SIZE(Bytes)||Download Options|
Category 3 WebSphere MQ SupportPacs are supplied under the standard terms and conditions provided by the International Program License Agreement (IPLA) and thus carry program defect service.
Please read the license files that accompany the SupportPac to ensure you understand the conditions under which the SupportPac is provided. No Proof of Entitlement is required for this SupportPac.
If you encounter what you believe to be a defect with the SupportPac you may request Program Services by reporting the problem via the same defect reporting channel you employ for the WebSphere MQ server product with which you are using the SupportPac.
This SupportPac has service support for as long as the WebSphere MQ for Multiplatforms V5.3 product remains in service. Refer to http://www.ibm.com/software/info/supportlifecycle/ for the relevant service information. It is only supported with MQ platforms which are themselves supported.