+

Search Tips | Advanced Search

Dumping profile settings on UNIX, Linux, and Windows

Use the dmpmqaut control command, the DISPLAY AUTHREC MQSC command, or the MQCMD_INQUIRE_AUTH_RECS PCF command to dump the current authorizations associated with a specified profile. Note that on IBM MQ Appliance we can use only the DISPLAY AUTHREC command.

For a full definition of the dmpmqaut control command and its syntax, see dmpmqaut.

For a full definition of the DISPLAY AUTHREC MQSC command and its syntax, see DISPLAY AUTHREC.

For a full definition of the MQCMD_INQUIRE_AUTH_RECS PCF command and its syntax, see Inquire Authority Records.

The following examples show the use of the dmpmqaut control command to dump authority records for generic profiles:
  1. This example dumps all authority records with a profile that matches queue a.b.c for principal user1.
    dmpmqaut -m qm1 -n a.b.c -t q -p user1
    
    The resulting dump looks something like this example:
    profile:     a.b.*
    object type: queue
    entity:      user1
    type:        principal
    authority:   get, browse, put, inq
    
    Note: UNIX and Linux users cannot use the -p option; they must use -g groupname instead.
  2. This example dumps all authority records with a profile that matches queue a.b.c.
    dmpmqaut -m qmgr1 -n a.b.c -t q
    
    The resulting dump looks something like this example:
    profile:     a.b.c
    object type: queue
    entity:      Administrator
    type:        principal
    authority:   all
    - - - - - - - - - - - - - - - - - 
    profile:     a.b.*
    object type: queue
    entity:      user1
    type:        principal
    authority:   get, browse, put, inq
    - - - - - - - - - - - - - - - - - 
    profile:     a.**
    object type: queue
    entity:      group1
    type:        group
    authority:   get 
    
  3. This example dumps all authority records for profile a.b.*, of type queue.
    dmpmqaut -m qmgr1 -n a.b.* -t q
    
    The resulting dump looks something like this example:
    profile:     a.b.*
    object type: queue
    entity:      user1
    type:        principal
    authority:   get, browse, put, inq
    
  4. This example dumps all authority records for queue manager qmX.
    dmpmqaut -m qmX
    
    The resulting dump looks something like this example:
    profile:     q1
    object type: queue
    entity:      Administrator
    type:        principal
    authority:   all
    - - - - - - - - - - - - - - - - - 
    profile:     q*
    object type: queue
    entity:      user1
    type:        principal
    authority:   get, browse
    - - - - - - - - - - - - - - - - - 
    profile:     name.*
    object type: namelist
    entity:      user2
    type:        principal
    authority:   get
    - - - - - - - - - - - - - - - - - 
    profile:     pr1
    object type: process
    entity:      group1
    type:        group
    authority:   get
    
  5. This example dumps all profile names and object types for queue manager qmX.
    dmpmqaut -m qmX -l
    
    The resulting dump looks something like this example:
    profile: q1, type: queue
    profile: q*, type: queue
    profile: name.*, type: namelist
    profile: pr1, type: process
    

Note: For IBM MQ for Windows only, all principals displayed include domain information, for example:

profile:     a.b.*
object type: queue
entity:      user1@domain1
type:        principal
authority:   get, browse, put, inq
Parent topic: Use OAM generic profiles on UNIX, Linux, and Windows

Last updated: 2020-10-04