installingwebspheremq.doc

8/14/2019 InstallingWebSphereMQ.doc

1/24

Click Software Prerequisites

Click the + button to expand.


2/24

You can find IBM ebSphere !clipse Platfor" #$.$ in C%&te"p&Prereqs&I!S&MSI

where C%&te"p is the folder where the downloaded 'ip file has been un'ipped.


3/24


4/24

I ha(e installed it in C%&IBM&ebSphere M)&eclipseS*$$&eclipse


5/24

,fter pressin- inish/ the installation of ebSphere M) can continue.

Click 0etwork Confi-uration1.


6/24

Click More infor"ation1

Click Confi-urin- indows ,ccounts1

Configuring Windows Accounts


7/24

Before you beginNote:If you are currently installing or configuring WebSphere MQ, and youneed your domain administrator to give you a special account to use, send this

whole page to your administrator, as follows:

Rightclic! this page and clic! Select "ll

Rightclic! again and clic! #opy

$aste into the body of a note in your email application

About this task

WebSphere MQ has a component, running as a Windows service, that chec!sthat any user account attempting to access WebSphere MQ is authori%ed& "s part

of the chec!, the service must 'uery which groups the account is a member of&(he service itself runs under a local user account )M*SR+MQ"MI-. created by

WebSphere MQ at installation&

If you are using Windows /000 or Windows /001 on any domain controller on

your networ!, it can be set up such that local user accounts do not have authorityto 'uery the group membership of its domain user accounts this will preventWebSphere MQ from completing its chec!, and access will fail& (o handle this:

2ach installation of WebSphere MQ on the networ! must be configured to

run its service under a domain user account that has the re'uiredauthority )see the instructions below for creating one.&

Note:If an installer carries on anyway and configures WebSphere MQ

without a special account, many or all parts of WebSphere MQ will not

wor!, depending upon the particular user accounts involved, as follows:o "n installer currently logged on with a Windows /000 or Windows

/001 domain user account will not be able to complete the efault#onfiguration, and the $ostcard and "$I 23erciser will not wor!&

o WebSphere MQ connections to 'ueue managers running underWindows /000 or Windows /001 domain accounts on other

computers may fail&

o (ypical errors include 4"MQ5066: 7ocal m'm group not found4 and

4"MQ5089: "ccess was denied when attempting to retrieve groupmembership information for user abc;3y% 4&

(he detailed instructions that follow guide a domain administrator to:


8/24

e& In Aroup scope select either Alobal or *niversal&f& In Aroup type select Security, and clic! ?B&g& @ind the domain name in the navigation pane on the left, rightclic!

it and select elegate #ontrol&&&, then clic! -e3t&h& "t Selected Aroups and *sers, press "dd, select domain m'm then

clic! "dd& #lic! ?B&

i& Select domain m'm and clic! -e3t&C& Select #reate a custom tas! to delegate and clic! -e3t&

!& Select ?nly the following obCects in the folder, and then chec! *ser?bCects in the alphabetical list& #lic! -e3t&

l& #hec! $ropertyspecific, then select from the list )it is inalphabetical order on the second word. the following options:

Read Aroup Membership

Read Aroup MembershipS"M

m& #lic! ?B to close each window&?n Windows /001 Server:

n& 7og on to the domain controller as an account with domainadministrator authority&

o& @rom the Start menu, open "ctive irectory *sers and #omputers&p& @ind the domain name in the navigation pane on the left, rightclic!

it and select -ew Aroup&

q. (ype domain mqm)this e3act string should be used because it isunderstood and used by WebSphere MQ.&

r& In Aroup scope select either Alobal or *niversal&s& In Aroup type select Security, and clic! ?B&

t& Diew "ctive irectory *sers and #omputers in "dvanced @eaturesmode&

u& @ind the domain name in the left panel, rightclic! the domainname, then clic! $roperties&

v& #lic! the Security tab&

w& #lic! "dvanced&x. #lic! "dd, then type domain mqmand clic! ?B& " new dialog is

displayed&y& #lic! the $roperties tab&

%& In the "pply onto bo3, change the view to *ser obCects&aa& Select the allow chec! bo3 for the following options:

Read Aroup Membership

Read Aroup MembershipS"Mbb& #lic! ?B to close each window&

/& #reate one or more accounts, and add them to the group:a& In "ctive irectory *sers and #omputers, create a user account

with a name of your choosing and add it to group 4domain m'm4&

b& Repeat for all the accounts you want to create&1& Repeat Steps < and / for each domain that has user names that will install

WebSphere MQ, to create an account for WebSphere MQ on each domain&=& *se the accounts to configure each installation of WebSphere MQ:

a& 2ither use the same domain user account )as created in Step

installingwebspheremq.doc

Documents