websphere_mq probe as a non-root user

[Anupama Purayannur]

Hi,

In 23.4 we can install UIM Robot as a  non-root user. Can we confirm that we can run below script setmqauth.sh using non-root user assuming that we install uim robot using non-root? 

--------------------------------------

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/monitoring/servers-and-application-infrastructure/websphere-mq-websphere-mq-monitoring/websphere-mq-ac-configuration.html 

Alternatively, you can use the setmqauth command to authorize the root user to run the MQI calls for each QM. This option is useful if it is not possible to add the root user to the mqm user group in your environment for security reasons. The websphere_mq probe is shipped with a script file, setmqprobe_auth.sh, which uses the setmqauth command for authorizing the root user to run the MQI calls. This option does not require you to add the root user to the mqm user group.

------------------------------------

Please advise. 

Regards

Anu

[Stephen Danseglio]

Hi Anu,

As per MQ 8.0 or higher it appears to be supportable, at least from an IBM MQ perspective as per this IBM doc page but its best to have it checked by  Engineering for the websphere_mq probe.

OAM user-based permissions on AIX and Linux

Note also that permissions for the setmq_auth.sh file changes to default when the probe is upgraded to a new version. Change the permissions, as required, after upgrading the probe to a new version.

Steve

------------------------------
Steve Danseglio
Senior Principal Support Engineer (Technical Support Engineer 5)
Broadcom Software-IMS Division
UIM Certified Expert
KCSv6 Practices Certified
Certified Customer Success Manager (CCSM) Level 1
------------------------------

[Anupama Purayannur]

Thanks Steve. I shall open a case.