MQ configuration requires the following UNIX user account and user group (principle/group) authorizations:
MQ principle/group |
MQ authorization |
|---|---|
OS login that is running the data server executable |
connect, altusr, inq, and setid on queue manager |
OS login of alternate user while executing any messaging operation |
inq on queue |
OS login of alternate user while executing the messaging read operation |
get on queue |
OS login of alternate user while executing the messaging browse operation |
browse on queue |
OS login of alternate user while executing the messaging send operation |
put on queue |
OS login of alternate user dynamic queue specified as the replyToQueue |
crt, dlt on queue manager, and get, inq on Model Queue |
When a message is sent to a remote queue, WebSphere
MQ checks the user authentication on the transmit queue.
If you specify alter_user=yes in msgsend, the alternate user is the operating system login that is running Adaptive Server. If you do not specify alter_user, the alternate user is the Adaptive Server login that is performing the MQ operation.
