Scribd
Upload
57 views

Click Software Prerequisites

The document discusses configuring Windows accounts to use with IBM WebSphere MQ. It provides steps for domain administrators to create a special domain group with permissions to query user group membership and create domain user accounts to add to this group for running WebSphere MQ services and installations. The steps are then repeated for each domain where WebSphere MQ will be installed.

Uploaded by

Jambala Rfdfd
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
57 views

Click Software Prerequisites

The document discusses configuring Windows accounts to use with IBM WebSphere MQ. It provides steps for domain administrators to create a special domain group with permissions to query user group membership and create domain user accounts to add to this group for running WebSphere MQ services and installations. The steps are then repeated for each domain where WebSphere MQ will be installed.

Uploaded by

Jambala Rfdfd
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
You are on page 1/ 24

Click Software Prerequisites

Click the + button to expand.

You can find IBM ebSphere !clipse Platfor" #$.$ in C%&te"p&Prereqs&I!S&MSI where C%&te"p is the folder where the downloaded 'ip file has been un'ipped.

I ha(e installed it in C%&IBM& ebSphere M)&eclipseS*+$$&eclipse

,fter pressin- .inish/ the installation of

ebSphere M) can continue.

Click 0etwork Confi-uration1.

Click More infor"ation1

Click Confi-urin-

indows ,ccounts1

Configuring Windows Accounts

Before you begin


Note: If you are currently installing or configuring WebSphere MQ, and you need your domain administrator to give you a special account to use, send this whole page to your administrator, as follows: Right clic! this page and clic! Select "ll Right clic! again and clic! #opy $aste into the body of a note in your e mail application

About this task


WebSphere MQ has a component, running as a Windows service, that chec!s that any user account attempting to access WebSphere MQ is authori%ed& "s part of the chec!, the service must 'uery which groups the account is a member of& (he service itself runs under a local user account )M*SR+MQ",MI-. created by WebSphere MQ at installation& If you are using Windows /000 or Windows /001 on any domain controller on your networ!, it can be set up such that local user accounts do not have authority to 'uery the group membership of its domain user accounts this will prevent WebSphere MQ from completing its chec!, and access will fail& (o handle this: 2ach installation of WebSphere MQ on the networ! must be configured to run its service under a domain user account that has the re'uired authority )see the instructions below for creating one.& Note: If an installer carries on anyway and configures WebSphere MQ without a special account, many or all parts of WebSphere MQ will not wor!, depending upon the particular user accounts involved, as follows: o "n installer currently logged on with a Windows /000 or Windows /001 domain user account will not be able to complete the ,efault #onfiguration, and the $ostcard and "$I 23erciser will not wor!& o WebSphere MQ connections to 'ueue managers running under Windows /000 or Windows /001 domain accounts on other computers may fail& o (ypical errors include 4"MQ5066: 7ocal m'm group not found4 and 4"MQ5089: "ccess was denied when attempting to retrieve group membership information for user :abc;3y%: 4& (he detailed instructions that follow guide a domain administrator to: <& #reate a global or universal domain group and give members of this group the authority to 'uery the group membership of any account /& #reate one or more user accounts, and add them to the group 1& Repeat Step / to Step = for each domain =& *se the accounts to configure each installation of WebSphere MQ >& Set the password e3piry periods& (he following information is aimed at ,omain "dministrators& Repeat Steps / to = below for each domain that has user names that will install WebSphere MQ, to create an account for WebSphere MQ on each domain: <& #reate a domain group with a special name that is !nown to WebSphere MQ and give members of this group the authority to 'uery the group membership of any account: ?n Windows /000 Server: a& 7og on to the domain controller as an account with domain administrator authority& b& @rom the Start menu, open "ctive ,irectory *sers and #omputers& c& @ind the domain name in the navigation pane on the left, right clic! it and select -ew Aroup& d. (ype domain mqm )this e3act string should be used because it is understood and used by WebSphere MQ.&

e& In Aroup scope select either Alobal or *niversal& f& In Aroup type select Security, and clic! ?B& g& @ind the domain name in the navigation pane on the left, right clic! it and select ,elegate #ontrol&&&, then clic! -e3t& h& "t Selected Aroups and *sers, press "dd, select domain m'm then clic! "dd& #lic! ?B& i& Select domain m'm and clic! -e3t& C& Select #reate a custom tas! to delegate and clic! -e3t& !& Select ?nly the following obCects in the folder, and then chec! *ser ?bCects in the alphabetical list& #lic! -e3t& l& #hec! $roperty specific, then select from the list )it is in alphabetical order on the second word. the following options: Read Aroup Membership Read Aroup MembershipS"M m& #lic! ?B to close each window& ?n Windows /001 Server: n& 7og on to the domain controller as an account with domain administrator authority& o& @rom the Start menu, open "ctive ,irectory *sers and #omputers& p& @ind the domain name in the navigation pane on the left, right clic! it and select -ew Aroup& q. (ype domain mqm )this e3act string should be used because it is understood and used by WebSphere MQ.& r& In Aroup scope select either Alobal or *niversal& s& In Aroup type select Security, and clic! ?B& t& Diew "ctive ,irectory *sers and #omputers in "dvanced @eatures mode& u& @ind the domain name in the left panel, right clic! the domain name, then clic! $roperties& v& #lic! the Security tab& w& #lic! "dvanced& x. #lic! "dd, then type domain mqm and clic! ?B& " new dialog is displayed& y& #lic! the $roperties tab& %& In the "pply onto bo3, change the view to *ser obCects& aa& Select the allow chec! bo3 for the following options: Read Aroup Membership Read Aroup MembershipS"M bb& #lic! ?B to close each window& /& #reate one or more accounts, and add them to the group: a& In "ctive ,irectory *sers and #omputers, create a user account with a name of your choosing and add it to group 4domain m'm4& b& Repeat for all the accounts you want to create& 1& Repeat Steps < and / for each domain that has user names that will install WebSphere MQ, to create an account for WebSphere MQ on each domain& =& *se the accounts to configure each installation of WebSphere MQ: a& 2ither use the same domain user account )as created in Step < above. for each installation of WebSphere MQ, or create a separate account for each one, adding each to the 4domain m'm4 group& b& When you have created the account)s., give one to each person configuring an installation of WebSphere MQ, who should enter the account details )domain name, user name and password. into the $repare WebSphere MQ Wi%ard& Aive them the account that e3ists on the same domain as their installing userid& c& When you install WebSphere MQ on any computer on the domain, the WebSphere MQ install program detects the e3istence of the 4domain m'm4 group on the 7"-, and automatically adds it to the

local 4m'm4 group& )(he local 4m'm4 group is created during installationE all user accounts in it have authority to use WebSphere MQ.& (hus all members of the 4domain m'm4 group will have authority to use WebSphere MQ on this computer& d& Fowever, you do still need to provide a domain user account )as created in Step < above. for each installation, and configure WebSphere MQ to use it when ma!ing its 'ueries& (he account details should be entered into the $repare WebSphere MQ Wi%ard that runs automatically at the end of installation )the wi%ard can also be run at any time from the start menu.& >& Set the password e3piry periods: o If you use Cust one account for all users of WebSphere MQ, consider ma!ing the password of the account never e3pire, otherwise all instances of WebSphere MQ will stop wor!ing at the same time when the password e3pires& o If you give each user of WebSphere MQ their own user account you will have more user accounts to create and manage, but only one instance of WebSphere MQ will stop wor!ing at a time when the password e3pires& If you set the password to e3pire, warn the users that they will see a message from WebSphere MQ each time it e3pires the message warns that the password has e3pired, and describes how to reset it& @or more information, see the System Administration Guide&

Parent topic: #onfiguring WebSphere MQ accounts in the $repare WebSphere


MQ Wi%ard

Click 2aunch IBM

ebSphere M) Installer1

You need to select 0o to continue

Click Setup the *efault Confi-uration1

Press the button Set up *efault Confi-uration1 at the left botto" of the screen.

3nblock.

4et back into this screen%

Click Back1/ click 0ext1

5he read"e.txt opens in 0otepad.

,lso%

In S6ste" 5ra6 6ou7ll see an icon sa6in-% ebSphere M) 8 9unnin-1. ,lso/ the explorer will open%

You might also like