Re: Customized authentication Scheme
Thanks David. I believe we are using the Agent Buffer to send information back and forth between the exits. But here is the million dollar question (turned out to be show stopper for us). We have some customized return codes that need to be forwarded to the calling application from the client side security exit. How do i do that ? Can i access the exit response in the calling application ? Also i don't think we can set the value of the Exit Response to anything that MQ does not recognize.. can we ? Is there a structure or a field that an exit can set that the calling application can access ? Thanks in advance. - Usha At 02:54 PM 2/6/2004 -0500, you wrote: Usha, the security exit mechanism allows you to pass a buffer between the security exit on the Queue manager client, and the security exit on the Queue manager server. The parameter is called AgentBuffer. This is documented in the Intercommunications guide. After valuing the agentbuffer, value the ExitResponse before exiting from your function to indicate what you want MQ to do with the buffer. pChannelExitParams->ExitResponse = MQXCC_SEND_AND_REQUEST_SEC_MSG; pChannelExitParams->ExitResponse = MQXCC_SEND_SEC_MSG; Usha Suryadevara <[EMAIL PROTECTED]> To: > [EMAIL PROTECTED] cc: Sent by: MQSeries List Subject: Customized authentication Scheme <[EMAIL PROTECTED]> Thursday February 5, 2004 01:38 PM Please respond to MQSeries List Hi all, Sorry for the long email, but we have a requirement here that we are trying to meet and looks like MQ Series is not designed to do what we are trying to achieve. We have a requirement where we need to send and retrieve messages from a client machine to a server machine using an authentication scheme, which verifies authenticating a user id, and password as well as a secondary password (security token) and version number against entries in a database. User credentials being used in this authentication process are different from the credentials of the user logged on to that machine, so the authentication scheme cannot be tied into the authentication provided by the operating system (using Windows). So i turned the authentication service on the Queue Manager and we are using our own authentication algorithm. Currently i am trying to do this using security exits in a MQ Series (5.3) client/server environment. Although i have problems: - sending information from the calling application to the client security dll - also sending the result of authentication back from the security exits to the calling application. I did find work around for both the cases: - tried using MQCD struct to send info from calling application to the client side security exit. Different story i had to hack MQCD.Desc & MQD.XmitQueue for different purposes, which i am sure is an advisable thing to do.. - resolved the second problem by having the client side security exit write the return code to a file (the file name is a GUID created by the calling application and is sent to the client security exit in MQCD.Desc variable when the client security exit is triggered) client machine (where the calling application also resides). This is the most hopeless work around i ever came up with... and i am highly uncomfortable keeping it as a solution. Any information is appreciated.. And the story does not end here, Even with the work around in place, in a scenario where more than one clients try to access the Queue Manager at the same time, the server side security exit behaves differently. In other words say the first client issues an MQCONNX call and during this period where the exits are busy authenticating the user the second client issues an MQCONNX and this call also triggers the same server side security exit. Now in this case sometimes, both the clients finish their MQCONNX call successfully or one of them does and the other fails with 2059 and an channel ended by exit error forced to the STDERR. Now this is the simplest scenario, usually our architecture should support a common scenario of 100 users hitting the same queue manager at the same time. Does MQ support what i am trying to achieve here ? Am i doing something wrong ? Do you guys think that using MQ EveryPlace instead of MQ client would help any, as far as authentication/security scheme goes ? Thanks Usha Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv
Re: WBI MB Installation
Bhapinder WBI MB Install can't always recognise that you have met the Microsoft Data Access Component Version 2.7 SP1 or later requirement - it is documented somewhere but I can't remember where at the moment Just ignore the error - I think that you need to ignore it twice Also you need to install CSD1 before doing anything with WBI MB V5 - if your install already includes this then you are fine CSD2 is also available and should probably be strongly considered There are also problems with IBM Agent Controller for debugging but I havent seen any good solution to the problem - WBI MB V5 can't connect Brian S. Crabtree WBI Consultant - Original Message - From: "Bhapinder Bagar" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 07, 2004 12:34 PM Subject: WBI MB Installation > We are trying to install WBI MB 5.0.1 on a Windows XP machine, we have > installed the following pre requisites: > > IBM Agent Controller > MDAC 2.7 SP1 (Downloaded from the Microsoft site) > WMQ 5.3, CSD05 > DB2 8.1, with Fix Pack 4 > JRE 1.4 > > Looking at the pre requisite software in the launch pad, shows all > components have been installed, including: > > Microsoft Data Access Components (R), 2.7 + SP1 > > We have hit the following problem: > > Error occurred during the installation: > > Unresolved dependency: MDAC Prerequisite has an unresolved dependency on > Microsoft Data Access Component Version 2.7 SP1 > > We have also tried this installation using MDAC version 2.8 and we hit the > same problem. > > We're installing using a domain account that is a member of the local > administrators group, is this okay? or do we need to be logged on as the > local administrator account? Is there a known issue with this? > > Any help would be very appreciated. > > Thanks in advance. > > Regards, > > Bhapinder > > Instructions for managing your mailing list subscription are provided in > the Listserv General Users Guide available at http://www.lsoft.com > Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
WBI MB Installation
We are trying to install WBI MB 5.0.1 on a Windows XP machine, we have installed the following pre requisites: IBM Agent Controller MDAC 2.7 SP1 (Downloaded from the Microsoft site) WMQ 5.3, CSD05 DB2 8.1, with Fix Pack 4 JRE 1.4 Looking at the pre requisite software in the launch pad, shows all components have been installed, including: Microsoft Data Access Components (R), 2.7 + SP1 We have hit the following problem: Error occurred during the installation: Unresolved dependency: MDAC Prerequisite has an unresolved dependency on Microsoft Data Access Component Version 2.7 SP1 We have also tried this installation using MDAC version 2.8 and we hit the same problem. We're installing using a domain account that is a member of the local administrators group, is this okay? or do we need to be logged on as the local administrator account? Is there a known issue with this? Any help would be very appreciated. Thanks in advance. Regards, Bhapinder Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Jack White/Raleigh/IBM is out of the office.
I will be out of the office starting 02/07/2004 and will not return until 02/16/2004. I will respond to your message when I return.
Re: Stuck Messages
Paul, The next time this happens, use amqsbcg to see if you can even browse the message. Paul Hinks <[EMAIL PROTECTED] To: [EMAIL PROTECTED] TRAL.COM>cc: Sent by: Subject: Stuck Messages MQSeries List <[EMAIL PROTECTED] en.AC.AT> 02/06/2004 06:18 PM Please respond to MQSeries List Hi All. I have an interesting problem with a queue which is being polled for messages by two Java clients. Each of them is doing a get in a loop with the flags MQC.MQGMO_BROWSE_FIRST | MQC.MQGMO_WAIT | MQC.MQGMO_LOGICAL_ORDER | MQC.MQGMO_COMPLETE_MSG | MQC.MQGMO_FAIL_IF_QUIESCING | MQC.MQGMO_LOCK The wait interval is 200ms. No message or correlation IDs are set. Over 99% of the time, this works fine - a message appears on the queue and is removed immediately. Unfortunately, once in a while (apparently after a long period of inactivity on the queue, perhaps 6 hours) a message will appear and remain on the queue for about half an hour or so. The message is definitely committed on the queue, and other messages sometimes come along afterwards and get pulled off normally, leaving the stuck message where it is. I was hoping somebody on the list could shed some light on this, be it something I am doing or some problem with MQ. I can't call IBM because we're running 5.2 and upgrading isn't on the cards for a while. Thanks. --Paul Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Cant get amqscnxc sample program working
David: Where would I find the client is connecting to the right listener for the connected QM? I thought of that before, but in the program I could not see any reference to listener. Thanks, TC"David C. Partridge" <[EMAIL PROTECTED]> wrote: TEST_CH is defined as a SVRCONN channel at the default QM at the server, but is the client connecting the listener for that QM or another one? Dave Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online
Re: PeopleSoft Adapter
Bobbee, which PeopleSoft adapter are you referring to? When IBM bought Crossworlds they 'enabled' most of all ICS adapters for MQSI aswell, so are you referring to that one or another one? I have no specific info on the PeopleSoft adapter, but did do 2 workshops (more then a year ago) with the 'dual' adapters that originated from Crossworlds Michael -Oorspronkelijk bericht- Van: MQSeries List [mailto:[EMAIL PROTECTED] Robert Broderick Verzonden: zaterdag 7 februari 2004 2:45 Aan: [EMAIL PROTECTED] Onderwerp: PeopleSoft Adapter Is anyone using the PeopleSoft Adapter to the Broker to syncronize updates between to seperate (or more) PeopleSoft Application servers. The ICS adapter is also being evaluated so the use of this is of importance too. bobbee _ Optimize your Internet experience to the max with the new MSN Premium Internet Software. http://click.atdmt.com/AVE/go/onm00200359ave/direct/01/ Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Cant get amqscnxc sample program working
TEST_CH is defined as a SVRCONN channel at the default QM at the server, but is the client connecting the listener for that QM or another one? Dave
