问题
I have domain user called xxx\herath. When I try to add this user in to queue manager's "Manage Authority Record" , It is giving me
Unknown User 'herath@xxx'. (AMQ4808) Severity: 10 (Warning) Explanation: The named entity for the given type is not defined on the system. Response: Make sure the entity is defined and it matches the type of entity.
This user is not in the websphere mq server machine as a local user. So my question is What is the proper way to grant permission to domain users ?
回答1:
You need to run MQ under a domain id if you want to be able to resolve domain ids. Since Microsoft went to Active Directory, an unknown user (aka local user on a server eg musr_mqadmin) is not able to query the group membership of a domain id.
https://www.ibm.com/developerworks/community/blogs/aimsupport/entry/websphere_mq_domain_user_security and the infocenter, e.g. http://www.ibm.com/support/knowledgecenter/SSFKSJ_7.5.0/com.ibm.mq.ins.doc/q008840_.htm
来源：https://stackoverflow.com/questions/27269631/issue-with-permission-grant-to-domain-users-in-ibm-web-sphere-queue-manager