Security settings for MQ agent resources
If you have enabled security for the queue manager, you must configure certain security settings in the queue manager for the HCL OneTest™ API MQ agent resources to access the HCL OneTest™ API intercept queue.
Recording authorities
To successfully do recording, stubbing and topology discovery of MQ
resources when using the HCL OneTest™ API MQ API agent, the following MQ authorities must be granted to
the following users:
- HCL OneTest™ API user. The MQ Username as configured in the MQ physical transport within HCL OneTest™ API.
- Putting application user. The MQ Username used by applications when performing an MQ PUT to the queues being recorded, stubbed, or discovered.
Note: Before changing the queue manager
authorities, use the
dmpmqaut
command to
back up the existing queue manager authorities.Object | Permissions |
---|---|
Queue
manager:
|
|
Namelist:
|
Note: This queue manager authority is granting the
create permission to the Namelist @class object, allowing the user the permission to create namelists.
|
Namelist:
|
|
Namelist:
|
|
Queue:
|
|
Queue:
|
|
Queue:
Note: The object is configured in the Model Queue field on the
Recording tab of the
MQ physical transport. |
|
Queue:
|
|
Object | Permissions |
---|---|
Queue
manager:
|
|
Namelist:
|
|
Queue:
Note: The object is configured in the Model Queue field on the
Recording tab of the
MQ physical transport. |
|
.zip
file in the HCL Quality Server installation directory (for example, <Server installation
directory>\tools\IBM\WebSphereMQ\dist)
in the .zip
file named IBMWebSphereMQdist.zip
.The sample scripts containing the distributed WebSphere® MQ API agent .zip
file, can be downloaded from HCL Quality Server.
Topology discovery authorities
To enable HCL OneTest™ API to perform discovery for the queue manager, the following
permissions must be enabled in the queue manager.
A sample script SetExitDiscoveryAuthorities.bat or SetExitDiscoveryAuthorities.sh that configures the required permissions in the
queue manager is available inside a scripts folder of a
Note: Before
changing the queue manager authorities, use the
dmpmqaut
command to back up the existing queue manager
authorities.Object | Permissions |
---|---|
Queue
manager:
|
|
Namelist:
|
Note: This queue manager authority is granting the
create permission to the Namelist @class object, allowing the user the permission to create namelists.
|
Namelist:
|
|
Namelist:
|
|
Queue:
|
|
Queue:
|
|
Queue:
Note: The object is configured in the Advanced tab of the MQ
observation point. |
|
Queue:
|
|
Object | Permissions |
---|---|
Queue
manager:
|
|
Namelist:
|
|
Queue:
Note: The object is configured in the Advanced tab of the MQ
observation point. |
|
.zip
file in the HCL Quality Server installation directory (for example, <Server installation
directory>\tools\IBM\WebSphereMQ\dist)
in the .zip
file named IBMWebSphereMQdist.zip
. The sample scripts containing the distributed WebSphere® MQ API agent .zip
file, can be downloaded from HCL Quality Server.
Sift and Pass-through with dynamic queue authorities
To enable sift and pass-through
capability in the queue manager, the following permissions must be enabled in the queue
manager.
A sample script SetSiftAndPassThroughWithDynamicQueuesAuthorities.bat or SetSiftAndPassThroughWithDynamicQueuesAuthorities.sh that configures the
required permissions in the queue manager is available inside a scripts folder of a
Note: Before changing the queue manager authorities, use the
dmpmqaut
command to back up the
existing queue manager authorities.Object | Permissions |
---|---|
Queue
manager:
|
|
Namelist:
|
Note: This queue manager authority is granting the
create permission to the Namelist @class object, allowing the user the permission to create namelists.
|
Namelist:
|
|
Namelist:
|
|
Queue:
|
|
Queue:
|
|
Queue:
|
|
Queue:
|
|
Queue:
Note: The object is configured on the Stubbing tab of the MQ physical
transport with Use Sift & Pass
Through with Dynamic Queues option. This corresponds to the model
queue that is configured in the Diverted Queue section. |
|
Queue:
Note: The object is configured on the Stubbing tab of the MQ physical
transport with Use Sift & Pass
Through with Dynamic Queues option. This corresponds to the model
queue that is configured in the Stub Queue section. |
Note: Permission required on the
SYSTEM.DEFAULT.MODEL.QUEUE for specifying the custom queue. |
Queue:
|
|
Object | Permissions |
---|---|
Queue manager:queue_manager_name |
|
Namelist:
|
|
Queue:
Note: The object is configured on the Stubbing tab of the MQ physical
transport with Use Sift & Pass
Through with Dynamic Queues option. This corresponds to the model
queue that is configured in the Diverted Queue section. |
|
Queue:
Note: The object is configured on the Stubbing tab of the MQ physical
transport with Use Sift & Pass
Through with Dynamic Queues option. This corresponds to the model
queue that is configured in the Stub Queue section. |
|
.zip
file in the HCL Quality Server installation directory (for example, <Server installation
directory>\tools\IBM\WebSphereMQ\dist)
in the .zip
file named IBMWebSphereMQdist.zip
. The sample scripts containing the distributed WebSphere® MQ API agent .zip
file, can be downloaded from HCL Quality Server.
Sift and Pass-through with fixed queue authorities
To enable sift and pass-through capability in
the queue manager, the following permissions must be enabled in the queue manager.
A sample script SetSiftAndPassThroughWithFixedQueuesAuthorities.bat or SetSiftAndPassThroughWithFixedQueuesAuthorities.sh that configures the
required permissions in the queue manager is available inside a scripts folder of a
Note: Before changing the queue manager authorities, use the
dmpmqaut
command to back up the existing queue
manager authorities.Object | Permissions |
---|---|
Queue
manager:
|
|
Namelist:
|
Note: This queue manager authority is granting the
create permission to the Namelist @class object, allowing the user the permission to create namelists.
|
Namelist:
|
|
Namelist:
|
|
Queue:
|
|
Queue:
|
|
Queue:
|
|
Queue:
Note: The suffix is set in the Stub Queue section on the
Stubbing panel of
the MQ physical transport with the fixed queue option. For example: REQUEST.STUB |
|
Queue:
Note: The suffix is set in the Divert Queue section on the
Stubbing panel of
the MQ physical transport with the fixed queue option. For example: REQUEST.DIVERT |
|
Queue:
|
|
Queue:
Note: Object is configured on the Stubbing tab of the MQ physical
transport with Use Sift & Pass
Through with Fixed Queues option. This corresponds to the model
queue that is configured in the Stub Queue section. |
|
Queue:
|
|
Object | Permissions |
---|---|
Queue
manager:
|
|
Queue:
Note: The suffix is set in the Stub Queue section on the
Stubbing panel of
the MQ physical transport with the fixed queue option. For example: REQUEST.STUB |
|
Queue:
Note: The suffix is set in the Divert Queue section on the
Stubbing panel of
the MQ physical transport with the fixed queue option. For example: REQUEST.DIVERT |
|
Namelist:
|
|
.zip
file in the HCL Quality Server installation directory (for example, <Server installation
directory>\tools\IBM\WebSphereMQ\dist)
in the .zip
file named IBMWebSphereMQdist.zip
. The sample scripts containing the distributed WebSphere® MQ API agent .zip
file, can be downloaded from HCL Quality Server.