We try to secure queues. We want a specific WinNT 4 local group to be able to write to a queue and another group that has no rights at all at that queue.
We created a global group in our domain, added users and placed that group in a local group on our MQ server. We restricted access (-all )to the specific queue for that local group. (lets call this group MQnochange)
We also did the same to create a group (MQchange) and gave that group ALL right to that queue.
Non of our test users can put a message on the queue but if we grant the users the rights it works perfectly. How must we use groups to give lots of users the appropiate permissions?
btw. creating domain global/local groups can´t be used with the command setmqaut (unvalid) while local groups on the specific MQ system works..
We created a global group in our domain, added users and placed that group in a local group on our MQ server. We restricted access (-all )to the specific queue for that local group. (lets call this group MQnochange)
We also did the same to create a group (MQchange) and gave that group ALL right to that queue.
Non of our test users can put a message on the queue but if we grant the users the rights it works perfectly. How must we use groups to give lots of users the appropiate permissions?
btw. creating domain global/local groups can´t be used with the command setmqaut (unvalid) while local groups on the specific MQ system works..