MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  MQ Installation and privilege for mqm user

    Posted Wed September 14, 2022 10:03 AM
    We are planning to installation MQ 9.3 in Linux server.
    Require below clarification if you can support.

    1) Do we require root privilege to install MQ

    2) If we install MQ with root Can we create and start/stop Queue Manager with mqm user (beloning to mqm group) without sudo access ?

    3) MQ services and Queue Manager run as root in the system or as mqm user if installation is done with root .

    4) What special privilege is given to mqm group such that all users belonging to mqm group can perform all operation on queue manager and mq services ? How those privilege is given and through which feature of Linux ?

    5) Can we install MQ without root if sudo access is provided to mqm user.

    Specifically i wanted to know what special privilege is given to mqm group during installation process such that it can perform all operations without having sudo privilege

    ------------------------------
    rizwan ghadiyali
    ------------------------------


  • 2.  RE: MQ Installation and privilege for mqm user

    Posted Wed September 14, 2022 10:41 AM

    Hi,

    Thank you for your question.  It's always best to ask questions first.

     

    First you need to prepare the system for MQ install on Linux. (more important than the actual installation itself)

    https://www.ibm.com/docs/en/ibm-mq/9.3?topic=linux-preparing-system

    Procedure

    1. Set up a user ID of the name mqm, with a primary group of mqm.

    See Setting up the user and group on Linux.

    1. Create file systems for both the product code and working data to be stored. See Creating file systems on Linux.
    2. Configure any additional settings needed for your Linux system.

    See Configuring and tuning the operating system on Linux.

     

    This website shows you the steps to prepare the Linux OS for the MQ installation(https://www.ibm.com/docs/en/ibm-mq/9.3?topic=linux-preparing-system

    ).  You will also need to:

     

     

    • Set up kernel parameters.
    • Check space.
    • Set up separate file systems for /var/mqm/errors....(and many others)

    ...etc (follow the steps on that website:  https://www.ibm.com/docs/en/ibm-mq/9.3?topic=linux-creating-file-systems

    Creating separate file systems for errors and logs

    You can also create separate file systems for your log data ( /var/mqm/log ) and error files ( /var/mqm/errors ). If possible, place these directories on different physical disks from the queue manager data ( /var/mqm/qmgrs ) and from each other.

    If you create separate file systems the /var/mqm/errors directory can be NFS mounted. However, if you choose to NFS-mount /var/mqm/errors, the error logs might be lost if the network fails.

    You can protect the stability of your queue manager by having separate file systems for:

    • /var/mqm/errors
    • /var/mqm/trace
    • /var/mqm/qmgrs
    • /var/mqm/log

    Also you will need to determine the storage for the data held in the queues.  Will you be using Native HA?  Will there be a NAS storage?

     

    You need to install MQ as root.

    You will  need to su mqm to have all privileges to do MQ commands such as strmqm, endmqm, runmqsc, etc.

     

    If your Sys Eng team gives you temporary root access for 30 days (for example) then you can install as root.

     

    https://www.ibm.com/docs/en/ibm-mq/9.3?topic=imlur-installing-first-mq-installation-linux-using-rpm-command

     

     

    Procedure

    1. Log in as root, or with sufficient authority to run the following commands.  (It's best to have root authority...(from my 40+ years experience in MQ)

    You can do this by adding sudo before the commands, or by changing to the root user in the shell with the su command. For more information, see Exploring the differences between sudo and su commands in Linux.

     

     

    Various groups can be created with different privileges and users can be assigned to those groups.

    This is quiet involved and requires some design work. 

     

     

     

    Susan Barker

    Lead MQ, ACE, ITX, Kafka, WAS Architect

    Victory is nothing without humility, respect and charity...unknown

    Let no one ever come to you without leaving happier...Mother Theresa

    Logo, company name Description automatically generated

    IBM WAS Advisory Board

    IBM ACEvNext Beta Program

    IBM MQvNext Beta Program

     

     

     




    Original Message


  • 3.  RE: MQ Installation and privilege for mqm user

    Posted Wed September 14, 2022 11:02 AM
      |   view attached
    Hello,
    I was also searching for information few months ago as I had been tasked to install RDQM at my work to create POC to migrate MQ from AIX to either Linux@x86 or Openshift.  Many member here helped me to gather information about RDQM and making it work, thanks to all.

    I had created an ansible playbook to do most of the install part except for the part of the creating and configuration of drbd VG/LV and filesystem.  If you might want to use and tailor it once you figure out the installation plan.  I have attached it.  Adjust the installation path as per your environment.

    Thanks.
    Rajesh

    ------------------------------
    RAJESH VERMA
    ------------------------------

    Attachment(s)

    yaml
    installrdqm.yaml   3 KB 1 version
    Original Message


  • 4.  RE: MQ Installation and privilege for mqm user

    Posted Thu September 15, 2022 01:22 AM
    Dears,

    Thanks for your response. 
    Basically i wanted to know what special privilege is given to mqm group during installation through which it can perform stop/start of queue manager and service . Where i can see those special privilege in Linux . 

    Also what is the difference in installing mq with root user and with sudo privilege. If i have all sudo privilege is it same as installing with root. 

    Regards, 
    Rizwan

    ------------------------------
    rizwan ghadiyali
    ------------------------------

    Original Message