I second that MQ should be run as mqm.

From my experience of MQ on distributed platforms, mqm is the id IBM
advises you to run under.

Thanks,
Oscar Rodriguez 

-----Original Message-----
From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of
Marcy Cortes
Sent: Tuesday, March 20, 2007 1:51 PM
To: [email protected]
Subject: Re: getgroups for root

FWIW, we start MQ like this throught a script /etc/init.d/rc.MQSeries

'start')
        echo "MQSeries: Starting MQSeries (Queue Manager )";
       /bin/su - mqm -c "/opt/mqm/bin/strmqm $qmgr"&
       /bin/sleep 10
        echo "MQSeries: Starting MQSeries (Channel Listener)";
       /bin/su - mqm -c "/opt/mqm/bin/runmqlsr -t TCP -m $qmgr"&
       /bin/sleep 5
        echo "MQSeries: Starting MQSeries (Trigger Manager)";
       /bin/su - mqm -c "/opt/mqm/bin/runmqtrm -m $qmgr"&
        /bin/sleep 5
        ;; 

I'm not sure why you'd want MQ running under root?

Marcy Cortes

"This message may contain confidential and/or privileged information.
If you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein.  If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message.  Thank you for your cooperation."


-----Original Message-----
From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of
Fargusson.Alan
Sent: Tuesday, March 20, 2007 9:04 AM
To: [email protected]
Subject: Re: [LINUX-390] getgroups for root

I am not sure I understand how you are starting MQ.  Init does not go
through login, so init will not get the other groups for root.

I think that login sets the groups for root on our SuSE 10 system, but I
can't check right now.


-----Original Message-----
From: Linux on 390 Port on behalf of Arty Ecock
Sent: Tue 3/20/2007 4:24 AM
To: [email protected]
Subject: getgroups for root
 
Hi,

   I'm running into a strange problem with SLES9.  We are doing a
TIM/TAM rollout and a software component (MQ) is complaining during
startup.  It seems that the user that runs the start script (root,
during boot in our case) does not appear to be in the mqm group.  An
"id" command issued from the 3215 console confirms.  A "cat /etc/groups"
contradicts, as does a "sudo id".  If we run the start script from an
ssh session, it works (as does the "id"
command).

   It turns out that "login" might be the culprit, as it only sets the
primary group if the uid is 0.  I tried removing minigetty from
/etc/inittab, and tried "sulogin", Rick's suloginv script, and /bin/sh
all to no avail.  I really don't mind login's behaviour, but the rc
scripts run before login, so shouldn't root's list of auxiliary groups
be set by getgroups properly during boot?

Cheers,
Arty

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit http://www.marist.edu/htbin/wlvindex?LINUX-390


----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions, send
email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit http://www.marist.edu/htbin/wlvindex?LINUX-390

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 
- - - -

This message is intended only for the personal and confidential use of the 
designated recipient(s) named above.  If you are not the intended recipient of 
this message you are hereby notified that any review, dissemination, 
distribution or copying of this message is strictly prohibited.  This 
communication is for information purposes only and should not be regarded as an 
offer to sell or as a solicitation of an offer to buy any financial product, an 
official confirmation of any transaction, or as an official statement of Lehman 
Brothers.  Email transmission cannot be guaranteed to be secure or error-free.  
Therefore, we do not represent that this information is complete or accurate 
and it should not be relied upon as such.  All information is subject to change 
without notice.

--------
IRS Circular 230 Disclosure:
Please be advised that any discussion of U.S. tax matters contained within this 
communication (including any attachments) is not intended or written to be used 
and cannot be used for the purpose of (i) avoiding U.S. tax related penalties 
or (ii) promoting, marketing or recommending to another party any transaction 
or matter addressed herein.

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to