激活WMQ的Broker管理安全性后的相关设置
激活WMQ的Broker管理安全性（Activating broker administration security for WebSphere MQ ）后，即执行了ALTER QMGR CHLAUTH(ENABLED)命令，我的开发机器上的WMBT不能连接Broker了，试了很多方法，还是没有设置好，请给出设置方法让规定IP的Windows机器能管理WMB的broker及其消息流...显示全部
查看其它 7 个回答dfyww的回答
终于找到解决办法了
DIS CHLAUTH(*)
You should see the following result:
AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(CHANNEL)
AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(NOACCESS)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(BLOCKUSER)
USERLIST(*MQADMIN)
The first entry is to allow access for MQ Explorer for the SYSTEM.ADMIN.SVRCONN channel.
The second entry is to disable use of all other SYSTEM. channels
The third entry disallows privileged users from using client channels.
You can also remove any of the default entries. For example, if you would like to enable administrative users to access the queue manager through client channels you might remove the third entry above from runmqsc with:
SET CHLAUTH(*) TYPE(BLOCKUSER) USERLIST(*MQADMIN) ACTION(REMOVE)
最后增加一个设置
SET CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP) ADDRESS(192.168.10.*) USERSRC(CHANNEL)
DIS CHLAUTH(*)
You should see the following result:
AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(CHANNEL)
AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(NOACCESS)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(BLOCKUSER)
USERLIST(*MQADMIN)
The first entry is to allow access for MQ Explorer for the SYSTEM.ADMIN.SVRCONN channel.
The second entry is to disable use of all other SYSTEM. channels
The third entry disallows privileged users from using client channels.
You can also remove any of the default entries. For example, if you would like to enable administrative users to access the queue manager through client channels you might remove the third entry above from runmqsc with:
SET CHLAUTH(*) TYPE(BLOCKUSER) USERLIST(*MQADMIN) ACTION(REMOVE)
最后增加一个设置
SET CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP) ADDRESS(192.168.10.*) USERSRC(CHANNEL)
浏览998