Re: porting Unix C code to zOS
Neil, I think it's the compiler directive for XPG4 or POSIX that I need. I can see it in systime.h but can't rigure out the way to turn on XPG4 or setlanglevel to posix or something that I really need. Tom - Original Message - From: "Neil Casey" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 20, 2003 1:36 AM Subject: Re: porting Unix C code to zOS > Hi Tom, > > I have all of my MQ channel exits and stuff ported to zOS. It gets > interesting making the exit entry points work (lots of conditional > compilation depending on platform). > > The main thing with the zOS C libraries and code portability is POSIX or > XPG4. If your C code is posix complient, you shouldn't have too many > problems with porting it to zOS. As for timeval, I found it defined in > which is the same location in zOS as it is in unix. > > I am running zOS 1.4. > > Make sure your compile JCL has the proper locations defined, or if you are > using USS you need to have the right environment variables (I think). I > have done all my C stuff on zOS using JCL for compiles. We don't use USS a > great deal at my site. > > For information on compilation and run time library support, look in zOS > V1R4.0 C/C++ Bookshelf (CBCBS130). > > Regards, > > Neil Casey. > > > |-+> > | | Tom Kane | > | | <[EMAIL PROTECTED]| > | | T> | > | | Sent by: MQSeries| > | | List | > | | <[EMAIL PROTECTED]| > | | n.AC.AT> | > | || > | || > | | 20/06/2003 15:16 | > | | Please respond to| > | | MQSeries List| > | || > |-+> > >--- ---| > | | > | To: [EMAIL PROTECTED] | > | cc: | > | Subject: porting Unix C code to zOS | > >--- ---| > > > > > Does anybody do this regularly? > I have simple unix command line programs that would be great to run on MVS. > But I can't get past things like 'timeval'. > I wanted to be able to time my code and figured it out on HP, Sun and AIX. > But now I'm stumped on MVS. > And that's where I started, all those years ago in MVS Support. > > TIA > > Tom > > Instructions for managing your mailing list subscription are provided in > the Listserv General Users Guide available at http://www.lsoft.com > Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Setting up a user on NT to restrict to a single queue - solve d!
T.Rob, You have nailled it in one... user had no access to command queue and no put access at all. As I was only intending on them picking up data from a local queue, the PCF commands used were to get the queue depth, but I disabled that method and all worked. So in future if I need to use PCF, the user will need access to additional queues, not just the one I am trying to lock down. Thanks to all who posted me suggestions and questions. Sid -Original Message-From: Wyatt, T. Rob [mailto:[EMAIL PROTECTED]Sent: Saturday, 21 June 2003 12:43 AMTo: [EMAIL PROTECTED]Subject: Re: Setting up a user on NT to restrict to a single queue Sid, PCF messages are put into the SYSTEM.ADMIN.COMMAND.QUEUE. When you say "I have narrowed it down to the PCF API calls", do you mean that you are trying to SET attributes of the queue directly, or that you are trying to send PCF messages to the command server? For the first option, you need to add +set authority to the queue in question. For the second, the user has to have PUT access to the command queue and GET access on the reply-to-queue to read the Command Svr replies. -- T.Rob -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: Friday, June 20, 2003 5:27 AMTo: [EMAIL PROTECTED]Subject: Re: Setting up a user on NT to restrict to a single queue Ok, I have narrowed it down to the PCF API calls, when I take these out of the program it works fine with the restricted security... so what do I need to add to a queue object for PCF access ??? The System Administrators guide does not make this very clear at all. Sid -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: Friday, 20 June 2003 1:27 PMTo: [EMAIL PROTECTED]Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsibEntity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBAIntranet DeveloperAnalyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry RdWest End, QLD 4101 <>
Re: Setting up a user on NT to restrict to a single queue
h...I'll check..thanks -Original Message-From: Kearns, Emile E [mailto:[EMAIL PROTECTED]Sent: Friday, 20 June 2003 9:52 PMTo: [EMAIL PROTECTED]Subject: Re: Setting up a user on NT to restrict to a single queueImportance: High I noticed the principal does not have CONNECT, will it inherit CONNECT from the group? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: 20 June 2003 05:27To: [EMAIL PROTECTED]Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsibEntity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBAIntranet DeveloperAnalyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry RdWest End, QLD 4101 For information about the Standard Bank group visit our web site www.standardbank.co.za Disclaimer and confidentiality note Everything in this e-mail and any attachments relating to the official business of the Standard Bank Group Limited is proprietary to the group. It is confidential, legally privileged and protected by law. Standard Bank does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of the group.The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Standard Bank can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference. II <>
UNSUBSCRIBE
unsubscribe
Re: MQ Process List - New Version 2.0
The attached version is in an Excel spreadsheet. Please let me know if there are any missing. -Original Message- From: Wyatt, T. Rob [mailto:[EMAIL PROTECTED] Sent: Monday, June 16, 2003 1:53 PM To: [EMAIL PROTECTED] Subject: Re: MQ Process List - New Version 1.3 Peter, I found this list most helpful and would be interested in the updated version. I like the matrix idea where you have columns for the process name, description and then the platforms. Also, I'm sure Brandon would post it on MQSeries.net if you send him a copy. -- T.Rob -Original Message- From: Potkay, Peter M (PLC, IT) [mailto:[EMAIL PROTECTED] Sent: Saturday, June 14, 2003 8:41 PM To: [EMAIL PROTECTED] Subject: Re: MQ Process List - New Version 1.3 Thanks Neil I made sure your below processes are in my list for Windows and Solaris. Does anyone know for a fact if I should add them to AIX, AS400, etc? I also included your os/390 comments. Does it make any sense for me to keep this list broken out by platform? The same process does not do 2 different things on 2 different platforms right? So why not make it just 1 long list? Does anyone know what amqmtbrn.exe on Windows is? I will send out the updated one after I resolve the above issues. Actually, if you guys think there is some benifit to keeping them broken out, I think I will make an Excel grid with the platforms across the top and the proccesses down the side. You would think this kind of info would be in this complete format in an Appendix in the SysAdminGuide..shsh. Hursley, you got anything kicking around you could share? -Original Message- From: Neil Casey [mailto:[EMAIL PROTECTED] Sent: Friday, June 13, 2003 12:45 AM To: [EMAIL PROTECTED] Subject: Re: MQ Process List - New Version 1.3 Hi Peter, Two points, one seriously, and one for a totally arbitrary level of completeness :-). 1. Process amqzlwa0 is the Cluster workload exit when running in SAFE mode. Process amqrrmfa is the Cluster Repository Manager Process amqzdmaa is the Deferred Message Processor Process amqzfuma is the OAM Process amqrmppa is the Channel Receiver These are present on Windows, Solaris and Linux, and I would expect to find them on other distributed platforms as well. I don't know about AS400. Most of them are documented in the System Administration Guide (WMQ5.3) under "Stopping a Queue Manager manually". The AS400 info is in the iSeries specific version of the manual. 2. You have not included OS/390, which has: MSTR. The master address space which does everything except distributed queuing and cluster repository stuff, including running the cluster workload exit. CHIN. The chanel initiator, channel tasks, repository manager etc. Regards, Neil Casey. |-+--> | | "Potkay, Peter M | | | (PLC, IT)" | | | <[EMAIL PROTECTED]| | | RTFORD.COM>| | | Sent by: MQSeries | | | List | | | <[EMAIL PROTECTED]| | | AC.AT> | | | | | | | | | 13/06/2003 12:40 | | | Please respond to | | | MQSeries List | | | | |-+--> >--- ---| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Re: MQ Process List - New Version 1.3 | >--- ---| The attached is alphabetized and complete as far as I know. -Original Message- From: Chan, Ian M [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2003 11:50 PM To: [EMAIL PROTECTED] Subject: Re: MQ Process List - New and one more - amqrmppa (channel process pooling job) for windows and unix platform using runmqlsr -Original Message- From: Potkay, Peter M (PLC, IT) [mailto:[EMAIL PROTECTED] Sent: Thursday, 12 June 2003 2:51 AM To: [EMAIL PROTECTED] Subject: Re: MQ Process List - New thanks I will go line by line and see what I need to add from yours to mine. -Original Message- From: Matt Gurney [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 11, 2003 12:32 PM To: [EMAIL PROTECTED] Subject: Re: MQ Process List - New Peter, Here is my list, it includes Windows. Don't know if there are any other differences. Matt.
Open cursors limit with database node when connecting to Oracle
An MQSI flow that is using database nodes to update an Oracle table. It exceeds the open cursors limit defined in the actual parameters of the database. The limit is 600 and we reach that with about 450 messages. We are using MQSI 2.1 for AIX and DB2 ML U485544AIX 4.3.3, MQSeries 5.3The odbc driver in the AIX box is /usr/opt/wmqi/merant/lib/UKor816.s date Jul 30 2002.Oracle 8.1.6 running over HP-UX B11.00open_cursors 600cursor_sharing EXACTcursor_space_for_time FALSE The flow does two SELECT and one UPDATE and one INSERT.If you need the ESQL code I could post it.Any ideas will be apreciated.Thank You, Yonny."{-®ç-ì~æjv x2¢êæj)b b²Û.nÇ+b¢v«zè¾'^v)í
ââ²Û ®ñêÚK ®Á®×½¨¥i¹^jØm¶ÿà %²írÈb½èm¶ÿ¾f¤§·óIêâzÆ«r¯
Re: A question on EDI Interoperability
This is like asking "What is messaging?" It is a matter of definition. EDI stands for Electronic Data Interchange. In the most general sense this email is EDI. Most commonly it is used to define the (batch) exchange of (Business) documents (files) between two different business partners (called trading partners in formal EDI). There is a national standard for EDI (defined by ANSI ASC X.12 - (American National Standard Institute, Accredited Standards Committee)) and an international standard (UN/EDIFACT or CEFACT whatever they are calling themselves this year). There are also industry specific EDI standards and some companies have there own proprietary formats they often call EDI. There also has been a move in the standards community to define EDI standards for XML. (See OASIS or EB/XML). To get back to your questions: EDI Interoperability is probably something to do with the ability of software too transmit/receive EDI standard documents. How it works?: I'm afraid you are going to have to be much more specific in order to get any sort of answer to this question. MQSeries can be used as a transport method too move EDI documents. Robert S. Kasischke 415-243-6975 -Original Message- From: Hill, Dave [mailto:[EMAIL PROTECTED] Sent: Friday, June 20, 2003 7:39 AM To: [EMAIL PROTECTED] Subject: A question on EDI Interoperability Does any one know what EDI Interoperability is? How it works? Does it interface with MQSeries? Thanks as always Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Routing Table in WMQI
Hi Kieran, We do this, using the RFH information as the key to perform a table lookup and populating the destination list with the queue info. I've seen no performance problems due to db access, but our volume is nowhere near your expected volume. Some tips for performance. 1. Use a read-only view of the table 2. Increase the Execution Group's open handle cache. The default is only 30. If this flow will be opening more than 30 different queues for output, increasing this value will keep them cached. 3. Optimize the db buffer allocations (I've never done this). Lynn -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Kieran Brennan Sent: Thursday, June 19, 2003 4:13 PM To: [EMAIL PROTECTED] Subject: Routing Table in WMQI Hi, I am looking into the development of a routing message flow in WMQI 2.1, allowing WMQI to work as a hub. Each queue manager will have a channel defined to/from the WMQI qm, and a unique identifier will identifier carried in the MsgType will define the routing required for each particular type of message. Essentially it will work as follows in WMQI: MQinput Node receives a message Using the MsgType from the MQMD it looks up a database table to find out the name of the destination queue and qm. Then in an output node puts the message on this queue. I am concerned that this will be too slow, and the look-up against the database each time will be too slow. There will be up to one million messages a day passing through, and peak times will exist. I am considering using the PostIT node to store the routing table in shared memory initially in a separate flow, and then using postiit nodes to look up the relevant information in the message flow detailed above instead of using the database. Has anyone implemented a similar design before? What issues should I look out for? Thanks Kieran The information transmitted in this email is intended for the addressee only and may contain confidential and/or privileged material. Any review, retransmission,dissemination,reliance upon or other use of, this information by persons or entities other than the addressee is prohibited.If you received this in error, please contact the sender and delete the material. This message has been swept by Anti-Virus software Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Setting up a user on NT to restrict to a single queue
Sid, PCF messages are put into the SYSTEM.ADMIN.COMMAND.QUEUE. When you say "I have narrowed it down to the PCF API calls", do you mean that you are trying to SET attributes of the queue directly, or that you are trying to send PCF messages to the command server? For the first option, you need to add +set authority to the queue in question. For the second, the user has to have PUT access to the command queue and GET access on the reply-to-queue to read the Command Svr replies. -- T.Rob -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: Friday, June 20, 2003 5:27 AMTo: [EMAIL PROTECTED]Subject: Re: Setting up a user on NT to restrict to a single queue Ok, I have narrowed it down to the PCF API calls, when I take these out of the program it works fine with the restricted security... so what do I need to add to a queue object for PCF access ??? The System Administrators guide does not make this very clear at all. Sid -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: Friday, 20 June 2003 1:27 PMTo: [EMAIL PROTECTED]Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsibEntity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBAIntranet DeveloperAnalyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry RdWest End, QLD 4101 <>
A question on EDI Interoperability
Does any one know what EDI Interoperability is? How it works? Does it interface with MQSeries? Thanks as always Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Setting up a user on NT to restrict to a single queue
The problem scenario seems to have changed now. In your initial post you said you were getting 2035 on an mqconn. Now it seems you are getting this on some other api call. What api call is it??? Mqopen??? And are you still with the same authorizations as mentioned below. When you do a conn, it has no bearing if you make regular api calls or pcf and hence CONNECT and DSP should be equally good to get mqconn through successfully. So the question is, on what call does it fail and what are the authorizations set at that time for that userid. Cheers Kumar ---Original Message--- From: MQSeries List Date: Friday, June 20, 2003 05:28:33 AM To: [EMAIL PROTECTED] Subject: Re: Setting up a user on NT to restrict to a single queue Ok, I have narrowed it down to the PCF API calls, when I take these out of the program it works fine with the restricted security... so what do I need to add to a queue object for PCF access ??? The System Administrators guide does not make this very clear at all. Sid -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: Friday, 20 June 2003 1:27 PMTo: [EMAIL PROTECTED]Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsibEntity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBAIntranet DeveloperAnalyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry RdWest End, QLD 4101 IncrediMail - Email has finally evolved - Click Here
Re: MQSICREATEBROKER - SEGMENTATION FAULT
Thankyou so much Marty. That worked !! Regards Sony. -Original Message- From: Marty G. Trice [mailto:[EMAIL PROTECTED] Sent: 18 June 2003 19:00 To: [EMAIL PROTECTED] Subject: Re: MQSICREATEBROKER - SEGMENTATION FAULT Give this a try my friend 1. Shut down all database instances as the instance owner ID: db2stop force. 2. Shut down the administration server instance as the admin instance ID: db2admin stop force. 3. Back up the original db2.o under /usr/lpp/db2__/lib 4. Issue "slibclean" as root. 5. Copy db2_36.0 to db2.o, ensuring that ownership and permissions are consistent: cp db2_36.o db2.o -r--r--r-- bin:bin for db2.o To switch back to the original object, simply follow the same procedure using the backed up db2.o file. Marty G. Trice WebSphere MQ/MQI Administrator Sara Lee Business Services - EAI Group [EMAIL PROTECTED] 336.519.2939 "McCarty, Brian" <[EMAIL PROTECTED]To: [EMAIL PROTECTED] AA.COM> cc: Sent by: MQSeriesSubject: Re: MQSICREATEBROKER - SEGMENTATION FAULT List <[EMAIL PROTECTED] n.AC.AT> 06/18/2003 12:23 PM Please respond to MQSeries List Look for a core file or look in WMQI admin doc for how to set an early trace for commands (not the broker user trace stuff). That trace should tell you the last thing that happened before the dump. Usually it's a database access problem. Brian M. McCarty USAA, Senior Systems Programmer 210.913.1678 MQ/WMQI Specialist/Solutions Expert e-business Solution Advisor/Designer/Technologist -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 10:07 AM To: [EMAIL PROTECTED] Subject: MQSICREATEBROKER - SEGMENTATION FAULT Dear all, Has anyone encountered a segmentation fault error while creating the broker? What causes this? Here is my error: mqsicreatebroker DGBCGB01 -i mquid -a mquid01 -q DGBCGB01 -n WMQIBRDB -u mquid -p mquid01 AMQ8110: WebSphere MQ queue manager already exists. WebSphere MQ queue manager running. The setmqaut command completed successfully. The setmqaut command completed successfully. The setmqaut command completed successfully. The setmqaut command completed successfully. The setmqaut command completed successfully. The setmqaut command completed successfully. The setmqaut command completed successfully. The setmqaut command completed successfully. Segmentation fault my platform - AIX 5L MQ 53 CSD 04 MQSI v21 CSD 03 DB2 8.1 Do reply please !! Regards Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Very many MQClient queues...THANKS
Thanks everyone who has responded Tim, I was told that there would be about 25 msgs/sec replies for requests. Each request would generate over 100 publications (don't know why). 25 * 100 = over 2500 msgs/sec... This was the story last year. And I just joined the project again. Some of the numbers might have changed since then. I am trying to get a better handle on this issue. I posted the question based on old numbers to get some feedback so I would sit at the bargaining table with with enough ammunition. Thanks or your response... Ruzi Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Setting up a user on NT to restrict to a single queue
Sid you can be faily granular when setting the authority. Generally when we grant authority we do: setmqaut -m QMGRNAME -t q -n Queue-Name -g group-name +all -alladm now if you want to allow them to issue display or change commands: setmqaut -m QMGRNAME -t q -n Queue-Name -g group-name +all -alladm +chg +dsp or you could allow them to just display the information but not change anything in the object by setmqaut -m QMGRNAME -t q -n Queue-Name -g group-name +all -alladm +dsp -set We started with the most limited, +allmqi -set, and arrived at the current level to allow the applications to passid, context information, to turn triggering off and on. I suggest doing the same, it make take a couple of rounds, but the command is easy to issue (we keep ours in a members just in case), and dynamic. Glen Larson Zurich North America [EMAIL PROTECTED]@AKH-Wien.AC.AT> on 06/20/2003 04:26:51 AM Please respond to MQSeries List <[EMAIL PROTECTED]> Sent by:MQSeries List <[EMAIL PROTECTED]> To:[EMAIL PROTECTED] cc: Subject:Re: Setting up a user on NT to restrict to a single queue Ok, I have narrowed it down to the PCF API calls, when I take these out of the program it works fine with the restricted security... so what do I need to add to a queue object for PCF access ??? The System Administrators guide does not make this very clear at all. Sid -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, 20 June 2003 1:27 PM To: [EMAIL PROTECTED] Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsib Entity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBA Intranet Developer Analyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry Rd West End, QLD 4101 *** PLEASE NOTE *** This E-Mail/telefax message and any documents accompanying this transmission may contain privileged and/or confidential information and is intended solely for the addressee(s) named above. If you are not the intended addressee/recipient, you are hereby notified that any use of, disclosure, copying, distribution, or reliance on the contents of this E-Mail/telefax information is strictly prohibited and may result in legal action against you. Please reply to the sender advising of the error in transmission and immediately delete/destroy the message and any accompanying documents. Thank you. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: IBM WebSphere MQ v5.3 and WAS installation
Brian,I am not sure which edition of WAS 5.0 was installed (EE or AE) but I'll definitely find out. Your information have helped a great deal. Thanks! TC "McCarty, Brian" <[EMAIL PROTECTED]> wrote: That question should have read Are you using WAS 5.0 Enterprise Edition OR Advanced Edition? If you bought AE, you will definitely not have the GUI tools or the other API s that come with MQ, only the JMS Provider implementation. You can t really manage that install except for the JMS Provider resources options in the WAS 5.0 Admin console (the web base one). You do have a few options to optimize the MQ installation from some files but not really. Oh, and you can t do any heterogeneous MQ stuff, only WAS JMS Provider to another WAS JMS Provider. However, if you did buy EE, it should have come with the full MQ install. Check this out for how to configure WebSphere JMS Provider and WebSphere MQ JMS Provider: http://publib7b.boulder.ibm.com/wasinfo1/en/info/aes/ae/rprf_tuneindex.html#JMS I think Ron posted this link a few weeks ago and it has been very helpful. From there I also found: http://publib7b.boulder.ibm.com/wasinfo1/en/info/aes/ae/tmj_adm20.html and has been a lifesaver. Thanks, Brian M. McCarty USAA, Senior Systems Programmer 210.913.1678 MQ/WMQI Specialist/Solutions Expert e-business Solution Advisor/Designer/Technologist -Original Message-From: Teresa Cheung [mailto:[EMAIL PROTECTED]Sent: Thursday, June 19, 2003 7:10 PMTo: [EMAIL PROTECTED]Subject: Re: IBM WebSphere MQ v5.3 and WAS installation Yes, Brian"McCarty, Brian" <[EMAIL PROTECTED]> wrote: Are you using WAS 5.0 Enterprise Edition of Advanced Edition?Brian M. McCartyUSAA, Senior Systems Programmer210.913.1678MQ/WMQI Specialist/Solutions Experte-business Solution Advisor/Designer/Technologist-Original Message-From: Ron Bower [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 3:57 PMTo: [EMAIL PROTECTED]Subject: Re: IBM WebSphere MQ v5.3 and WAS installationI'm assuming that you are using WSAS V5. With V5,part of MQSeries is used as the embedded jms provider.You don't really have the opportunity to make anychoices on the parts of MQ that you want installed. Ithought you did have the ability to use a custominstall to indicate whether or not you wanted itinstalled.Ron--- Teresa Cheung <[EMAIL PROTECTED]>wrote:>> I'm curious about how the WebSphere! MQ piece was> related to the WebSphere Application Server (WAS)> installation.>> In looking at the directory that was created from> WAS installation, it appears to be very similar to a> full installation of IBM WebSphere MQ, but there are> a few things missing, such as the GUI tools.> I'm wondering if there were any MQ specific options> to choose during the WAS installation, or if what is> there was automatically installed as part of the WAS> installation.>> Thanks,> TC -> Do you Yahoo!?> SBC Yahoo! DSL - Now only $29.95 per month!__Do you Yahoo!?SBC Yahoo! DSL - Now only $29.95 per month!http://sbc.yahoo.comInstructions for managing your mailing list subscription are provided inthe Listserv General Users Guide available at http://www.lsoft.comArchive: http://vm.akh-wien.ac.at/MQSeries.archiveInstructions for managing your mailing list subscription are provided inthe Listserv General Users Guide available at http://www.lsoft.comArchive: http://vm.akh-wien.ac.at/MQSeries.archive Do you Yahoo!?SBC Yahoo! DSL - Now only $29.95 per month! Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month!
Re: MQ Client Channel Security Products?
I think you still need a security exit or a product even if you are using SSL with MQ5.3. The only way SSL solves this is if you obtain a separate certificate for each user of the MQClient. Even then, this will only work if the clients only connect to MVS queue managers where the distinguished name on the certificate can be mapped to a userid. - Bruce Giordano "Kelly, Steve" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] cc: Sent by: MQSeries List Subject: Re: MQ Client Channel Security Products? <[EMAIL PROTECTED]> Friday June 20, 2003 04:55 AM Please respond to MQSeries List There are a number of products around. Primeur's DSMQ (which we use extensively at the customer where I'm currently working), Candle's MQSecure, CQ's ProtectMQ. Dunno costs I'm afraid. Best solution however, IMHO, is to upgrade to MQ5.3 and use the SSL implementation that comes with that release. Steve. ___ Steve Kelly CommerceQuest enabling the dynamic enterprise -Original Message- From: Karl Ng [mailto:[EMAIL PROTECTED] Sent: 19 June 2003 20:30 To: [EMAIL PROTECTED] Subject: MQ Client Channel Security Products? We are using MQ Clients V5 on various platforms (NT,Solaris,etc..) to connect to our MQ manager on MVS V1.2. We would like to implement some kind of client channel security and would like to know what others use? Do you write your own channel security exits?If yes, Is there any information you can share? OR do you use vendor product?If yes, what product and ballpark cost? Thanks, Karl (on behalf of our MQ admin.) (See attached file: C.htm) Title: MQ Client Channel Security Products? There are a number of products around. Primeur's DSMQ (which we use extensively at the customer where I'm currently working), Candle's MQSecure, CQ's ProtectMQ. Dunno costs I'm afraid. Best solution however, IMHO, is to upgrade to MQ5.3 and use the SSL implementation that comes with that release. Steve. ___ Steve Kelly CommerceQuest enabling the dynamic enterprise -Original Message-From: Karl Ng [mailto:[EMAIL PROTECTED]Sent: 19 June 2003 20:30To: [EMAIL PROTECTED]Subject: MQ Client Channel Security Products? We are using MQ Clients V5 on various platforms (NT,Solaris,etc..) to connect to our MQ manager on MVS V1.2. We would like to implement some kind of client channel security and would like to know what others use? Do you write your own channel security exits?If yes, Is there any information you can share? OR do you use vendor product?If yes, what product and ballpark cost? Thanks, Karl (on behalf of our MQ admin.)
Re: DLQ Handlers on z/OS (From: porting Unix C code to zOS)
Ian, The DLQ handler is shipped with MQ V5.2 on z/OS - CSQUDLQH - so perhaps you'd like to try our copy ? I'm afraid you'll have to buy V5.2 first though ;-) Cheers Morag Morag Hughson WebSphere MQ for z/OS Development Internet: [EMAIL PROTECTED] Ian Metcalfe <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Sent by: MQSeriescc: List Subject: Re: porting Unix C code to zOS <[EMAIL PROTECTED] N.AC.AT> 20/06/2003 12:50 Please respond to MQSeries List I've made a (brief so far) attempt to port the DLQ handler to z/OS. It didn't instantly fall into place, and wasn't a priority, so I left it. But I'd be happy to accept a copy of someone's successful attempt... if one exists? ;) Ian -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Tom Kane Sent: Friday, 20 June 2003 15:16 To: [EMAIL PROTECTED] Subject: porting Unix C code to zOS Does anybody do this regularly? I have simple unix command line programs that would be great to run on MVS. But I can't get past things like 'timeval'. I wanted to be able to time my code and figured it out on HP, Sun and AIX. But now I'm stumped on MVS. And that's where I started, all those years ago in MVS Support. TIA Tom Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Workflow directories in Workflow
Looking at my installation on AIX /var/fmc contains the directories cfgs, chltabs, ipc, log, qmgrsand the files fmcrc and fmczinsx.log /usr/lpp/fmc contains many directories (sorry, too many to type) but dirs like fmc.* and tivoli and msg and licenses etc. etc. The copyright file is in there as well as fmcrc and fmcrc-update.log Francois van der Merwe Senior IT Specialist: IBM MQSeries Certified Specialist, Solutions Expert & Developer IBM, Cape Town, South Africa +27 (0)82 556 9467 / +27 (0)21 402 5597 [EMAIL PROTECTED] George Smith <[EMAIL PROTECTED]To: [EMAIL PROTECTED] O.COM> cc: Sent by: MQSeriesSubject: Workflow directories in Workflow List <[EMAIL PROTECTED] N.AC.AT> 19/06/2003 16:44 Please respond to MQSeries List Can anyone provide information on what the workflow directories /var/fmc and /usr/lpp/fmc should contain after an install. Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Questions about Shared Queues - Help!!!
Tom, We've implemented shared queues last November into Production. It sounds like you will have to eliminate the application that has the affinity to run in one specific region. We ran across the same problem. We converted our files to RLS and made them available across three LPARS each one running a queue manager that belongs to our production QSG. We also implemented CPSM for CICS. CPSM routes the MQ transactions which are triggering a CICS program. What queue's do you have in the CF? Do you have the INIT and DATA queues in the CF? Also, are you using shared channels between your distributed queue managers and your QSG on the mainframe? In order for your environment to work each LPAR should have an exact clone of CICS regions needed to process your MQ work. If you have more questions you can contact me directly. [EMAIL PROTECTED] 440.395.0698 I hope this helps. Rich Santilli MQ Solutions Expert Progressive Insurance Thomas Lane <[EMAIL PROTECTED] To: [EMAIL PROTECTED] COM> cc: Sent by: Subject: Questions about Shared Queues - Help!!! MQSeries List <[EMAIL PROTECTED] en.AC.AT> 06/20/2003 07:31 AM Please respond to MQSeries List I would appreciate any ideas about this issue we are having with Shared queues: Let me first setup the question and later I will explain the reason we have a requirement that apparently cannot be support by MQ Series. We have implemented shared queues across two Mainframe Queue Managers. Lets call them P3 and P7. Our configuration is primarily a Unix based middleware communicating to the Mainframe based two queue managers(P3 and P7). On the Mainframe we have two regions(mostly duplicated applications, except one application that has region affinity(can only process in one region). Also, our mainframe regions are limited to reading from one queue manager(I was told this is an IBM limitation). Because of this, the mainframe region that has the application that must process in that region only, can only read from one queue manager thus the readers are only running on the one queue managerlets say the P3 queue manager. Now here comes the issue. Our Unix middleware handles request messages coming from the front end. The middleware also detects whether the mainframe queue readers are up and running by inquiring for open input count(handles) on a queue. If our Unix Middleware connects to the same queue manager that the P3(region affinity) application connects to it works fine. Because the readers are local to the queue manager in question. However, we have two queue managers that Unix middleware uses. When the Unix middleware inquires for open input count for the shared queue and the queue manager is P7(meaning not the queue manager where the MF readers are running for the shared queue) it gets an open input count(mainframe readers) of 0. Thus the Unix middleware cannot determine if there is some process in the mainframe to read the queues. In this case we will not send messages because we don't want the messages to stale out. The way our infrastructure is set up it it(will) be extremely undesirable and counter-productive to have a single point of failure(just one queue manager). Does anyone have any suggestions on how we can get past this issue while still having two queue managers? If so, I would greatly appreciate it! Thanks in advance, Thomas Lane Senior Manager, Unix Development - Middleware Pershing Technology Group East Brunswick, NJ Phone: 732-565-8289 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Setting up a user on NT to restrict to a single queue
I noticed the principal does not have CONNECT, will it inherit CONNECT from the group? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: 20 June 2003 05:27To: [EMAIL PROTECTED]Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsibEntity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBAIntranet DeveloperAnalyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry RdWest End, QLD 4101 For information about the Standard Bank group visit our web site www.standardbank.co.za Disclaimer and confidentiality note Everything in this e-mail and any attachments relating to the official business of the Standard Bank Group Limited is proprietary to the group. It is confidential, legally privileged and protected by law. Standard Bank does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of the group.The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Standard Bank can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference. II <>
Re: porting Unix C code to zOS
I've made a (brief so far) attempt to port the DLQ handler to z/OS. It didn't instantly fall into place, and wasn't a priority, so I left it. But I'd be happy to accept a copy of someone's successful attempt... if one exists? ;) Ian -Original Message-From: MQSeries List [mailto:[EMAIL PROTECTED]On Behalf Of Tom KaneSent: Friday, 20 June 2003 15:16To: [EMAIL PROTECTED]Subject: porting Unix C code to zOS Does anybody do this regularly?I have simple unix command line programs that would be great to run on MVS. But I can't get past things like 'timeval'. I wanted to be able to time my code and figured it out on HP, Sun and AIX. But now I'm stumped on MVS. And that's where I started, all those years ago in MVS Support. TIA Tom
Re: Kernel parameters to run 2 qmgrs on same box
This looks like a disk full problem.
Check /var/mqm, /var/mqm/errors and /var/mqm/log.
-Original Message-
From: Mittal, Gaurav [mailto:[EMAIL PROTECTED]
Sent: 20 June 2003 01:04
To: [EMAIL PROTECTED]
Subject: Kernel parameters to run 2 qmgrs on same box
WebSphere MQ v:5.3 install/upgrade requires Kernel paramter configuration.
IBM recommends minimum values for the kernel parameters as mentioned in the
following link for HP-UX env:
http://publibfp.boulder.ibm.com/epubs/html/amqcac05/amqcac05tfrm.htm
As our situation demands two QMgrs running on one server at the same time, I
wanted to know what all parameters are specific to QManager (like shmmni,
semmni, semmns, semmnu) and what should be their recommended value to be
able to handle two QueueManagers on the server?
We tried running two QMgrs on one server with kernel parameters set to what
is recommended as minimum requirements and we are getting the following
error:
Here is the description out of FDC being created:
Probe Description :- AMQ6119: An internal WebSphere MQ error has occurred
|
| ('28 - No space left on device' from semop.)
|
| FDCSequenceNumber :- 0
|
| Arith1:- 28 1c
|
| Comment1 :- '28 - No space left on device' from semop.
Please let me know if anyone has faced a similar issue.Any help is
appreciated.
Gaurav Mittal
___
EAI Consultant
Wipro Technologies
(612)-291-4551 (W)
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
For information about the Standard Bank group visit our web site
www.standardbank.co.za
Disclaimer and confidentiality note
Everything in this e-mail and any attachments relating to the official business of the
Standard Bank Group Limited is proprietary to the group.
It is confidential, legally privileged and protected by law. Standard Bank does not
own and endorse any other content. Views and opinions are
those of the sender unless clearly stated as being that of the group.The person
addressed in the e-mail is the sole authorised recipient. Please
notify the sender immediately if it has unintentionally reached you and do not read,
disclose or use the content in any way.
Standard Bank can not assure that the integrity of this communication has been
maintained nor that it is free of errors, virus, interception or interference.
I
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Questions about Shared Queues - Help!!!
I would appreciate any ideas about this issue we are having with Shared queues: Let me first setup the question and later I will explain the reason we have a requirement that apparently cannot be support by MQ Series. We have implemented shared queues across two Mainframe Queue Managers. Lets call them P3 and P7. Our configuration is primarily a Unix based middleware communicating to the Mainframe based two queue managers(P3 and P7). On the Mainframe we have two regions(mostly duplicated applications, except one application that has region affinity(can only process in one region). Also, our mainframe regions are limited to reading from one queue manager(I was told this is an IBM limitation). Because of this, the mainframe region that has the application that must process in that region only, can only read from one queue manager thus the readers are only running on the one queue managerlets say the P3 queue manager. Now here comes the issue. Our Unix middleware handles request messages coming from the front end. The middleware also detects whether the mainframe queue readers are up and running by inquiring for open input count(handles) on a queue. If our Unix Middleware connects to the same queue manager that the P3(region affinity) application connects to it works fine. Because the readers are local to the queue manager in question. However, we have two queue managers that Unix middleware uses. When the Unix middleware inquires for open input count for the shared queue and the queue manager is P7(meaning not the queue manager where the MF readers are running for the shared queue) it gets an open input count(mainframe readers) of 0. Thus the Unix middleware cannot determine if there is some process in the mainframe to read the queues. In this case we will not send messages because we don't want the messages to stale out. The way our infrastructure is set up it it(will) be extremely undesirable and counter-productive to have a single point of failure(just one queue manager). Does anyone have any suggestions on how we can get past this issue while still having two queue managers? If so, I would greatly appreciate it! Thanks in advance, Thomas Lane Senior Manager, Unix Development - Middleware Pershing Technology Group East Brunswick, NJ Phone: 732-565-8289 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Off topic - TNG
Title: MQ Client Channel Security Products? Sorry folks, a bit off topic... Does anyone know of a list for Unicenter TNG? Either generally, or for MVS//z/OS specifically? Ian
Re: MQ Client Channel Security Products?
Title: MQ Client Channel Security Products? No, compression isn't being taken out of DSMQ. DCMQ is a complementary product to DSMQ, it does end to end compression as messages are put to or gotten from the queues. DSMQE2E can process (if so configured as to allow it) messages sent by DCMQ are compressed. You typically wouldn't install both DCMQ and the E2E part of DSMQ on the same QM. The channel data compression will remain in DSMQ Link (aka DSMQP2P) as we've found there can be quite a bit of benefit in compressing data prior to encryption. The platforms we support for E2E are 390 (2.1, 5.2 and 5.3), and Windows, AIX, HP_UX, Linux, and Solaris for 5.3 QMs with API crossing exit. We are investigating options for the other platforms. We don't support 5.2 Solaris as the version of the crossing exit at the 5.2 level needed quite a few fixes written for us which were done in 5.3 base, but were never rolled back into the 5.2 code. YMMV == "Your Mileage May Vary" from USA adverts for vehicles giving fuel consumption figures. To be read as the benefits may vary depending on the data compressibility and size. Dave
Re: MQ Client Channel Security Products?
Title: MQ Client Channel Security Products? Dave I thought compression was being taken out of DSMQ? Data compress MQ replaces? Also, when you say transparent application level security, does this mean the new API exits for MQ, cause of course they aren't supported on MVS (API crossing exit instead) or Tandem, VMS etc, only version 5.3 machines (and 5.2 on Solaris). YMMC? Neil -Original Message-From: David C. Partridge [mailto:[EMAIL PROTECTED]Sent: 20 June 2003 10:53To: [EMAIL PROTECTED]Subject: Re: MQ Client Channel Security Products? Each to their own view I guess, and I will admit to being biased :-) The SSL 5.3 song works well if you're all 5.3 and all TCP/IP, but what about other transports such as SNA, or those with mixed networks or non 5.3 QMs (lots of folks still run VMS and Tandem or MVS MQ 2.1). We also offer compression as part of the product. Also DSMQ is more than just channel exit security, we also provide an application transparent end to end security solution for MQ as part of the product. For those who know Tivoli's AMBI or PDMQ, it is similar in concept, but much easier to implement and has IMHO more functionality and is just as secure. Furthermore you don't require the whole Tivoli Access Manager infrastructure to make it work. For example DSMQ supports segmented messages and can also compress data prior to encryption processing (YMMV). Cheers,David C. PartridgeSecurity and MQ Products ManagerPrimeur GroupTel: +44 (0)1926 511058Mobile: +44 (0)7713 880197
Re: MQ Client Channel Security Products?
Title: MQ Client Channel Security Products? Each to their own view I guess, and I will admit to being biased :-) The SSL 5.3 song works well if you're all 5.3 and all TCP/IP, but what about other transports such as SNA, or those with mixed networks or non 5.3 QMs (lots of folks still run VMS and Tandem or MVS MQ 2.1). We also offer compression as part of the product. Also DSMQ is more than just channel exit security, we also provide an application transparent end to end security solution for MQ as part of the product. For those who know Tivoli's AMBI or PDMQ, it is similar in concept, but much easier to implement and has IMHO more functionality and is just as secure. Furthermore you don't require the whole Tivoli Access Manager infrastructure to make it work. For example DSMQ supports segmented messages and can also compress data prior to encryption processing (YMMV). Cheers,David C. PartridgeSecurity and MQ Products ManagerPrimeur GroupTel: +44 (0)1926 511058Mobile: +44 (0)7713 880197
Re: Setting up a user on NT to restrict to a single queue
Ok, I have narrowed it down to the PCF API calls, when I take these out of the program it works fine with the restricted security... so what do I need to add to a queue object for PCF access ??? The System Administrators guide does not make this very clear at all. Sid -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent: Friday, 20 June 2003 1:27 PMTo: [EMAIL PROTECTED]Subject: Setting up a user on NT to restrict to a single queue Howdy all, I am having trouble setting up a user to just be able to Browse/Inquire and destructively GET from a single queue. I granted +connect on the qmgr and browse, get and inq on the queue but I setup a servercon chanel and tied the MCA to the users login NT account name. However, all I get are 2035 errors when the client connects. C:\>dspmqaut -m QML_MQM -t qmgr -g tsib Entity test_user has the following authorizations for object QML_MQM: connect dsp C:\>dspmqaut -m QML_MQM -n TSIB.data -t q -p tsibEntity tsib has the following authorizations for object TSIB.data: get browse put inq set dsp passid passall setid setall What am I missing ? Sid Young B I.T. (cs dc) AD (cse) DBAIntranet DeveloperAnalyst / Programmer Information Systems Department [EMAIL PROTECTED] QML Pathology Phone: (07) 3840 4941 Fax: Fax??? This is the 21st Century! www.qml.com.au 60 Ferry RdWest End, QLD 4101 <>
Re: MQ Client Channel Security Products?
Title: MQ Client Channel Security Products? There are a number of products around. Primeur's DSMQ (which we use extensively at the customer where I'm currently working), Candle's MQSecure, CQ's ProtectMQ. Dunno costs I'm afraid. Best solution however, IMHO, is to upgrade to MQ5.3 and use the SSL implementation that comes with that release. Steve. ___ Steve Kelly CommerceQuest enabling the dynamic enterprise -Original Message-From: Karl Ng [mailto:[EMAIL PROTECTED]Sent: 19 June 2003 20:30To: [EMAIL PROTECTED]Subject: MQ Client Channel Security Products? We are using MQ Clients V5 on various platforms (NT,Solaris,etc..) to connect to our MQ manager on MVS V1.2. We would like to implement some kind of client channel security and would like to know what others use? Do you write your own channel security exits?If yes, Is there any information you can share? OR do you use vendor product?If yes, what product and ballpark cost? Thanks, Karl (on behalf of our MQ admin.)
