Re: SSL certificate management
Does MQ tell you when the certificate is near expiration? Or does the channel just stop working? None of them. As far as I know the certificate is verified at the time of handshaking. That's why you get an error when channel starts next time. Tibor Does MQ tell you when the certificate is near expiration? Or does the channel just stop working? -Original Message- From: Nigel Pentland [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 09, 2004 7:36 AM To: [EMAIL PROTECTED] Subject: Re: SSL certificate management Neil, So far I have only had to replace z/OS MQ certs. This requires renewing the cert, and if a new cert updating the key ring, refreshing RACF and then ultimately restarting MQ. We haven't found any way to avoid an MQ restart. You will not be able to do it without disabling the existing certificate. Either you renew the certificate where the new cert will overwrite the previous one, or you have to generate a new one and add it to the keyring. At this point you would have to make the new one the default, effectively disabling the old one. Nigel... - Original Message - From: Neil Casey [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 09, 2004 2:33 AM Subject: SSL certificate management Has anyone got to the point where their MQ SSL certificate (on any platform) is about to expire? I have (or will have) MQ SSL channels running on Windows, various unixes and zOS, and I am trying to get my head around exactly what needs to be done in order to get a certificate renewed, and then inserted into the certificate store correctly so that MQSeries can use it. I can't find anything in the Security manual which discusses this issue. My preference would be to find a way to handle this without having to restart the queue manager, although I am doubtful that I can achieve that objective. I would also like to be able to do it without disabling the existing certificate (Web Servers can do this, so MQ should be able to), and without having to create a new key repository. Thanks, Neil Casey National Australia Bank Southern Star Technology WebSphere MQ Support 1/122 Lewis Rd Wantirna South office. +61 3 9886 2375 (x82375) mobile. +61 414 615 334 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Brokers or Execution Groups
The process 'DataFlowEngine' performs the task of an execution group, that's why doesn't matter how many broker process (bipbroker) managing them. I prefer a single broker to simplify the MQSI administration. Hope this helps, Tibor Hi Everyone, On a single machine, Is it better to have 2 or more brokers or a single broker with many execution groups? Thanks, Samuel ___ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Brokers or Execution Groups
John, Your are right, mainly in the case as written: Different brokers are used for different business areas. Execution groups within a broker handle work on behalf of different business systems. We have more brokers on a box, too, because of price... :-(. Tibor We have four brokers running across two machines on AIX with mutual failover support via HACMP. There are a number of reasons for doing this: Each broker runs under a separate user account. This enables us to control how much CPU resource is assigned to each broker at the user ID level. Different brokers are used for different business areas. Execution groups within a broker handle work on behalf of different business systems. We can fail over at the broker level. Thus if one machine gets too busy and the other is idle, we can fail a broker from one machine to the other to re-distribute the load (to a certain extent). All brokers can fail onto a single machine in the event of a hardware problem to keep all flows running at reduced capacity. We can fail everything onto one machine so we can perform maintenance (e.g. apply CSDs, fixpaks, operating system patches etc) with minimal downtime (though at reduced capacity). John Scott IBM Certified Specialist - MQSeries Argos ARG Infrastructure Services -Original Message- From: Tibor [mailto:[EMAIL PROTECTED] Sent: 03 November 2004 12:25 To: [EMAIL PROTECTED] Subject: Re: Brokers or Execution Groups The process 'DataFlowEngine' performs the task of an execution group, that's why doesn't matter how many broker process (bipbroker) managing them. I prefer a single broker to simplify the MQSI administration. Hope this helps, Tibor Hi Everyone, On a single machine, Is it better to have 2 or more brokers or a single broker with many execution groups? Thanks, Samuel ___ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** Check our latest prices and full range at http://www.argos.co.uk The information contained in this message or any of its attachments may be privileged and/or confidential, and is intended exclusively for the addressee. Unauthorised disclosure, copying or distribution of the contents is strictly prohibited. The views expressed may not be official policy, but the personal views of the originator. If you have received this message in error, please advise the sender by using the reply facility in your e-mail software. All messages sent and received by Argos Ltd are monitored for viruses, high-risk file extensions, and inappropriate content. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQ 5.3 with Sun Cluster v3.x
We had started a Sun cluster v3.1 with MQ last weekend with this agent and it works fine. It seems more elegant than solution of IBM: there is no cross-linking filesystem, etc. But this isn't a free software, official name is: Sun Cluster 3.1 Data Service for WebSphere MQ. You can read the online documentaion: http://docs.sun.com/db/doc/817-3325 or download http://docs-pdf.sun.com/817-3325/817-3325.pdf HTH, Tibor Yes, you need to get the Sun Cluster v3.xMQ Agent from Sun (payware!) Once you have that smooth sailing Michael From: MQSeries List[mailto:[EMAIL PROTECTED] On Behalf OfBrendan Drummond Sent: dinsdag 26 oktober 2004 14:54 To: [EMAIL PROTECTED] Subject: MQ 5.3 with Sun Clusterv3.x Has anybody had any experience with installing MQ (v5.3)onto a Sun Cluster v3.x .? IBM currently have a support pac (MC69) but this is for useon a v2.x Sun Cluster. I am led to believe that v3 is quite a bit different tothe previous version. My questions are, where do I find any information on theinstallation and configuration of the above?, and is this supported by IBM? Thanks in adavance, Brendan. Brendan Drummond Middleware Support Energis Direct Dial: +44 (0) 118 919 2443 Switchboard: +44 (0) 20 7206 http://www.energis.com AtEnergis we want our customers to succeed. That's why we really welcome your views on how we can improve our performance. If you have any comments, good or bad, please let us know by following this link to our feedback form: http://www.energis.com/contact/feedback.asp This e-mail is sent by Energis Communications Limited and its contents are confidential and may be legally privileged. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Compiling C++ MQ apps on HPUX - need help !
So, if you are using GNU compilers, you are restricted to c code only. If you want C++, you will have to use a HP compiler. Other way to rewrite the OO model for MQ in GNU environment. I've already seen it because one of our supplier made this and works fine. It is a bigger effort, of course - mainly in multithreaded environment. HTH, Tibor Hi Sid, I haven't checked the situation for HP/UX, but on Solaris you cannot use the GNU C++ compiler with MQSeries. I am guessing, but I think that g++ is the GNU c++ compiler, not a HP provided one. C code works fine with gcc (even though it is not supported) because the library formats are compatible between gcc and the supported compilers. When you get into C++, the module names get munged in wierd ways, and the different compilers do this in different ways. IBM have to ship a separate library for each C++ compiler that is going to be supported, and the library has to be compiled by the target compiler. At MQ5.2 there were actually separate libraries for the v4 and v5 SunWS compilers because of this issue. For this reason, they tend to only support the vendor provided compilers on unix systems. So, if you are using GNU compilers, you are restricted to c code only. If you want C++, you will have to use a HP compiler. Of course, if I have guessed wrong and you are already using the HP compiler, then I have no idea what your problem is. Regards, Neil Casey National Australia Bank Southern Star Technology WebSphere MQ Support 1/122 Lewis Rd Wantirna South office. +61 3 9886 2375 (x82375) mobile. +61 414 615 334 [EMAIL PROTECTED] .AU Sent by: MQSeriesTo List [EMAIL PROTECTED] [EMAIL PROTECTED]cc n.AC.AT Subject Compiling C++ MQ apps on HPUX - 08/10/2004 11:42 need help ! Please respond to MQSeries List [EMAIL PROTECTED] n.AC.AT G'Day all, I am trying to build some MQ apps in C++ on HPUX, and cannot get anything to compile. I can compile normal C MQ apps with no problems, so all the libraries are present and work fine. I am linking -limqi23ah and -lmqic libraries into the application but get the following errors, can anyone shed some light ? g++ main.cpp -omain -L/opt/mqm/lib -limqi23ah -lmqic /usr/ccs/bin/ld: Unsatisfied symbols: ImqCac::useEmptyBuffer(char const*, unsigned long)(first referenced in /var/t mp//cc3JlOPd.o) (code) ImqMgr::~ImqMgr [in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code ) ImqGmo3::~ImqGmo3 [in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (co de) ImqMsg::ImqMsg[in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqGmo3::ImqGmo3[in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code ) ImqQue::ImqQue[in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqObj::setConnectionReference(ImqMgr*) (first referenced in /var/tmp//cc 3JlOPd.o) (code) ImqObj::open()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqMgr::disconnect() (first referenced in /var/tmp//cc3JlOPd.o) (code) ImqMgr::connect()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqCac::dataLength() const(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqMtr::setCorrelationId(unsigned char const*)(first referenced in /var/tmp// cc3JlOPd.o) (code) ImqMgr::ImqMgr[in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqMsg::formatIs(char const*) const(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqQue::get(ImqMsg, ImqGmo3) (first referenced in /var/tmp//cc3JlOPd.o) ( code) ImqMtr::setMessageId(unsigned char const*)(first referenced in /var/tmp//cc3J lOPd.o) (code) ImqObj::close()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqMsg::~ImqMsg [in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code ) CMQSupport::CMQSupport[in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqQue::~ImqQue [in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code ) ImqObj::setName(char const*)(first referenced in /var/tmp//cc3JlOPd.o) (code) ImqObj::setOpenOptions(long) (first referenced in /var/tmp//cc3JlOPd.o) (code ) CTest::CTest[in-charge]()(first referenced in /var/tmp//cc3JlOPd.o) (code) collect2: ld returned 1 exit status *** Error exit code 1 Any help appreciated. Sid Young Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription
Re: Linear logging.
You are obviously worried about performance impact of the rcdmqimg. It's true when some queues are used like a database. In this case when you start the rcdmqimg, all messaging traffic will be stopped even for minutes! As Neil wrote about it: So, remember that MQSeries is not a database, and the access to messages is NOT optimised for long term storage. However, you can do long term message storage, and it does work, including recovery. However, if you have 1 Gb of messages in a q, and you perform a rcdmqimg of the queue, you will write 1Gb + overheads to the linear log. HTH, Tibor Actually Tim, bouncing the queue manager may not help much if you have long lifetime persistent messages, because a media image is only taken on shutdown if the queue is empty. From what I can see in the manual, I believe that non-empty queues only get media images when rcdmqimg is performed. You are obviously worried about performance impact of the rcdmqimg. Do you have any benchmarks of exactly what that impact is? In any case, I agree with your summary. MQSeries is not a database. Regards, Neil Casey National Australia Bank Southern Star Technology WebSphere MQ Support 1/122 Lewis Rd Wantirna South office. +61 3 9886 2375 (x82375) mobile. +61 414 615 334 Tim Armstrong [EMAIL PROTECTED] LESMYER.COM.AU To Sent by: MQSeries [EMAIL PROTECTED] List cc [EMAIL PROTECTED] n.AC.AT Subject Re: Linear logging. 28/09/2004 14:46 Please respond to MQSeries List [EMAIL PROTECTED] n.AC.AT So for a system with high activity and hence producing a large number of new linear logs you need to either bounce the system regularly, not realy 24x7 :( OR run rcdmqimg with its potential impact on response times. Either way if you want database functionality then use a database tool. Not quite as bad a I feared but still not exactly desirable. Regards Tim A Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: HA Architectures for MQ
Reil,
As far as I know the HA solutions on miscellaneous Unix platforms
there is no definitely difference in the MQ level ('hamqm' scripts).
So I recommend you reading some HA Manual e.g. Solaris.
Hope this helps,
Tibor
Where can I find a definitive White Paper on the best HA Architecture for MQ
5.3 running on Linux with Intel Based Hardware?
We have an environment which requires access to 1 Queue Manager at all
times, in the past we have used a load balancer to handle connections to 2
MQ Servers with 1 as primary, but it has never handled the long persistent
connections well and when the primary failed it was a manual process to fail
back from the secondary. Since I have an opportunity to rearchitect, I was
wondering whats the best path to have High Availability.
Reil Brennan
Grand Central Communications
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: amqcrsta processes
On Tru64, the last version of MQ is v5.1. But I prefer runmqlsr independently of MQ version because works fine, moreover without sysadmin ;-). Tibor To get threading, you need to use the MQ listener (runmqlsr) instead of inetd. The MQ listener is the preferred method starting with MQ 5.3. -Original Message- From: W Samuel [mailto:[EMAIL PROTECTED] Sent: Thursday, June 17, 2004 9:24 AM To: [EMAIL PROTECTED] Subject: Re: amqcrsta processes Hi everyone, Thanks for your replies. The platform is Tru 64 unix. Do these TuningParameters apply for this platform? How do we configure a threaded inetd listener ? Regards W Samuel --- Someswara R Adirajuwrote: Hi WS, You can tune your qm.ini parameters. Consider adding these parameters and try restarting the queue manager.. TuningParameters: AgentClassMap=(1,1,1) AgentClassLimit=(10,15,100) Hope this helps. Cheers, Somesh Adiraju Emile Kearns Sent by: MQSeries List 06/17/2004 02:22 PM Please respond to MQSeries List To [EMAIL PROTECTED] cc Subject Re: amqcrsta processes Consider using a threaded listener. -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of W Samuel Sent: 16 June 2004 12:13 PM To: [EMAIL PROTECTED] Subject: amqcrsta processes Hi everyone, On our Unix system, we have 5 active queue managers We've reached a state where none of these queue are responding anymore I've noticed that there are around 200 amqcrsta processes. I know that amqcrsta is related to channels but cant understand why so many processes are running Any idea how come so many amqcrsta processes are running and how can this be controlled/tuned ? Thanks, WS ___ALL-NEW Yahoo! Messenger - so many all-new ways to express yourself http://uk.messenger.yahoo.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Any views expressed in this message are those of the individual sender, and T-Systems South Africa (Pty) Ltd accepts no liability therefore, except where the sender specifically states them to be those of T-Systems South Africa (Pty) Ltd. Although this message has been scanned for the possible presence of computer viruses prior to despatch, T-Systems South Africa (Pty) Ltd cannot be held responsible for any viruses or other material transmitted with, or as part of, this message. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ___ALL-NEW Yahoo! Messenger - so many all-new ways to express yourself http://uk.messenger.yahoo.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: debugging Windows api dll
As far as I remember I used this way for debugging channel exit: if you have an installed debugger application just place a "trap" into the desired place in your source:
asm { int 3 }
This will activate your debugger.
HTH,
Tibor
Does anyone know what process I can start to debug a windows api exit
dll. Normally I attach runmqchl.exe to my message exit dll and happily
go thru my debug session. I haven't found a similar process for api exit
dll.
_
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please
notify the system manager. This message contains confidential
information and is intended only for the individual named. If you
are not the named addressee you should not disseminate, distribute
or copy this e-mail.
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: SNDR channel INITIALIZING after QM bounce
Peter, I suspect a garbage in SYNCQ because I've already seen similar. There was 2 entry for 1 channel and only way for starting channel after deleting and re-defining. Wrong entries disappeared by command 'DELETE CHANNEL' from the sync queue. Hope this helps, Tibor All machines in question are Windows 2000. MQ 5.3 CSD4. Being Windows boxes, you know what that means - monthly security patches with reboots! Yay These regular server reboots have surfaced the following issue in 2 of my 4 environments. I have a channel which needs to be up pretty much all the time, so I have the DISCINT set to 30. And the channel speed is set to fast (probably not relevant). This channel goes from QM1 to QM2, and it has a partner going from QM2 to QM1. The channels perform as expected when the QMs are running. When the QMs get bounced, this channel (which was running when the QM went down) comes up ready for more message in all 4 environments from QM1 to QM2, and from QM2 to QM1 in the LAB and in PROD. But in DEV and QA, the QM2.QM1.FAST channel always comes up as initializing, and stays that way until I manually start it. All the servers and MQ versions are identical. All the channels are defined identically (really, they are). The only difference I can see is when I browse the SYSTEM.CHANNEL.SYNCQ. On the problem channels, the corresponding message in the SYNCQ looks like it was put by AMQPCSEA.EXE. But for all the SNDR channels that don't come up INITIALIZING (they trigger normally), the corresponding message in the SYNCQ was put by runmqchl.exe. The last 100 bytes of each message in the SYNCQ is all garbled, so I can't tell what it means or if there is a difference between the "good" channels and the "bad" channels. Any idea why these channels keep coming up in INITIALIZING mode, and then why they are stuck in INITIALIZING mode until I issue START? In the error log on the sending side, I see the following, until I manually restart the channel. A weird error, since the channel is most definitely there, just stuck in INITIALIZING. 05/20/2004 20:25:38 AMQ9002: Channel program started. EXPLANATION: Channel program 'QM2.QM1.FS' started. ACTION: None. --- 05/20/2004 20:25:38 AMQ9519: Channel 'QM2.QM1.FS' not found. EXPLANATION: The requested operation failed because the program could not find a definition of channel 'QM2.QM1.FS'. ACTION: Check that the name is specified correctly and the channel definition is available. - amqrccca.c : 452 05/20/2004 20:25:38 AMQ: Channel program ended abnormally. EXPLANATION: Channel program 'QM2.QM1.FS' ended abnormally. ACTION: Look at previous error messages for channel program 'QM2.QM1.FS' in the error files to determine the cause of the failure. - amqrccca.c : 776 Peter Potkay MQSeries Specialist The Hartford Financial Services [EMAIL PROTECTED] x77906 IBM MQSeries Certified This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Problem building MQ samples on cygwin
Mike, You have to use an other way in the linking step: gcc -o amqsbcg0 amqsbcg0.o ../../Lib/mqm.lib I've just tried it and working. Tibor I am attempting to build the sample program supplied with MQ to browse queues. I am more comfortable with an *IX environment than Windoes, so I am using cygwin, make and gcc/g++. Below is the output of make, why is it not locating the entry points? AFAIK they should be in mqm.Lib (I did rename all of the .Libs to libXXX.lib to fit in with the *IX convention) g++ -c -I../include -o amqsbcg0.o amqsbcg0.c g++ -L../Lib -limqb23in -limqb23vn -limqc23in -limqc23vn -limqs23in -limqs23vn - lmqic32 -lmqiccb32 -lmqiccbb -lmqm -lmqmax -lmqmcb32 -lmqmcbb -lmqmcics -lmqmcic s4 -lmqmenc -lmqmsom -lmqmtux -lmqmvx -lmqmvxd -lmqmxa -lmqmzf -o amqsbcg0 amqsb cg0.o amqsbcg0.o(.text+0xb3e):amqsbcg0.c: undefined reference to `_MQCONN' amqsbcg0.o(.text+0xbee):amqsbcg0.c: undefined reference to `_MQOPEN' amqsbcg0.o(.text+0xc33):amqsbcg0.c: undefined reference to `_MQDISC' amqsbcg0.o(.text+0xd8e):amqsbcg0.c: undefined reference to `_MQGET' amqsbcg0.o(.text+0x1196):amqsbcg0.c: undefined reference to `_MQCLOSE' amqsbcg0.o(.text+0x11e6):amqsbcg0.c: undefined reference to `_MQDISC' collect2: ld returned 1 exit status make: *** [amqsbcg0] Error 1 Not sure if my problem is caused by misunderstanding Windows, Cygwin, MQ or whatever, so any (polite:-) pointers appreciated. Mike Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: SSL channels and Self Signed certificates
Neil, I think you need only a *real* channel stopping: stop channel(XYZ) mode(terminate) because stopped channel status doesn't mean the process 'runmqchl' is stopped. HTH, Tibor Hi folks, I am setting up a cluster of machines using SSL channels with self-signed certificates (don't ask). It's all on Solaris, so I am using gsk6ikm and gsk6cmd. My channels are defined with mcatype(thread) and I am using the threaded listener. I initially created certificate stores and personal certificates for my repository systems, and cross added the certs as CA certs into the respective key databases. I set up the queue managers repositories, defined the cluster receivers and cluster senders with the sslpeer values and cipher specs, and everything started up Ok (Hooray!). I now have a cluster with three repos queue managers, using SSL channels I then tried to join a different queue manager into the cluster. I followed the same procedure, create the key database, the self signed cert, export the cert, add it into each of the other systems key dbs as a trusted CA cert. The static cluster sender channel won't start, so the new queue manager can't join the cluster. The manual says that certificate changes are available immediately, but that changes to the key database via "alter qmgr" may require a restart (if the channels have already been used). I have checked the certficate fingerprints etc, and everything looks Ok, but MQ fails the channel start with AMQ9633: Bad SSL certificate for channel ''. Now to my question: Has anyone tried this sort of thing? Is a queue manager restart required in order to get MQ to start looking at new CA certs? Neil Casey National Australia Bank Southern Star Technology WebSphere MQ Support 1/122 Lewis Rd Wantirna South office. +61 3 9886 2375 (x82375) mobile. +61 414 615 334 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: World Writable files under Unix
missing info about environment: MQ v5.3 + Solaris 9 Tibor hi all, Does anyone have or can point me to a list of files (esp. for MQ v5.3 on Solaris) for which the world writable bit can be turned off, without any impact to the functioning of MQSeries. Thanks in advance... ~mahen -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Tibor Sent: Thursday, April 29, 2004 10:45 PM To: [EMAIL PROTECTED] Subject: Re: World Writable files under Unix I found an interesting description in WAS Manual: http://publib.boulder.ibm.com/infocenter/wasinfo/topic/com.ibm.websphere.base.doc/info/aes/ae/tmj_secmqm.html But I don't understand why this is missing from MQ Security Manual... HTH, Tibor I started the Post I do not remember a final answer. Emile Kearns Certified MQSeries Specialist IBM Certified System Administrator - Websphere MQ, V5.3 -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Meekin, Paul Sent: 25 March 2004 05:59 PM To: [EMAIL PROTECTED] Subject: World Writable files under Unix Hi all, Last July there was a thread about directories under /var/mqm/qmgrs/@SYSTEM having permissions "drwxrwsrwx" here http://www.mail-archive.com/[EMAIL PROTECTED]/msg09014.html. Was there ever a final answer about what these are used for and if the world write access allowed a potential Denial of Service? Our audit people have just discovered them and are asking awkward questions !!! Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Any views expressed in this message are those of the individual sender, and T-Systems South Africa (Pty) Ltd accepts no liability therefore, except where the sender specifically states them to be those of T-Systems South Africa (Pty) Ltd. Although this message has been scanned for the possible presence of computer viruses prior to despatch, T-Systems South Africa (Pty) Ltd cannot be held responsible for any viruses or other material transmitted with, or as part of, this message. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: World Writable files under Unix
Mahen, The sysadmin ran the recommended script two weeks ago because forced by Security Team. However the queue manager works without any problem since them. Tibor hi all, Does anyone have or can point me to a list of files (esp. for MQ v5.3 on Solaris) for which the world writable bit can be turned off, without any impact to the functioning of MQSeries. Thanks in advance... ~mahen -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Tibor Sent: Thursday, April 29, 2004 10:45 PM To: [EMAIL PROTECTED] Subject: Re: World Writable files under Unix I found an interesting description in WAS Manual: http://publib.boulder.ibm.com/infocenter/wasinfo/topic/com.ibm.websphere.base.doc/info/aes/ae/tmj_secmqm.html But I don't understand why this is missing from MQ Security Manual... HTH, Tibor I started the Post I do not remember a final answer. Emile Kearns Certified MQSeries Specialist IBM Certified System Administrator - Websphere MQ, V5.3 -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Meekin, Paul Sent: 25 March 2004 05:59 PM To: [EMAIL PROTECTED] Subject: World Writable files under Unix Hi all, Last July there was a thread about directories under /var/mqm/qmgrs/@SYSTEM having permissions "drwxrwsrwx" here http://www.mail-archive.com/[EMAIL PROTECTED]/msg09014.html. Was there ever a final answer about what these are used for and if the world write access allowed a potential Denial of Service? Our audit people have just discovered them and are asking awkward questions !!! Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Any views expressed in this message are those of the individual sender, and T-Systems South Africa (Pty) Ltd accepts no liability therefore, except where the sender specifically states them to be those of T-Systems South Africa (Pty) Ltd. Although this message has been scanned for the possible presence of computer viruses prior to despatch, T-Systems South Africa (Pty) Ltd cannot be held responsible for any viruses or other material transmitted with, or as part of, this message. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: WBIMB and ICS SCM interface
However I never tried these, but I recommend you to visit eclipse plugin website in SCM category: http://eclipse-plugins.2y.net/eclipse/plugins.jsp?category=SCM There is a *lot* of connectors, mainly for freeware (CVS, Subversion), but ClearCase and VSS is also available. HTH, Tibor We are trying to interface the Toolkit to an SCM. They are using PeopleSoft so they are going to STAT. IBM has indicated STAT will not support ICS. (We have a call into the STAT people) They have suggested CVS but as it is FREEWARE the client will more than likely not go that rout (responsible vendor and all that). That leaves us with Clear Case. Is anyone using: 1 - ICS and WBI-MB with an SCM 2 - Using STAT with either of the above products 3 - Using Clear Case with the above products Any "gotchas"?? bobbee _ Stop worrying about overloading your inbox - get MSN Hotmail Extra Storage! http://join.msn.click-url.com/go/onm00200362ave/direct/01/ Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Unknow Database Reference (WBI-MB)
Bobbee, Perhaps it isn't same... but look this discussion onmqseries.net: Warnings in taskbar in WBI Message Broker Toolkit HTH, Tibor OS - AIX DB - DB2 ODBC - Merant Driver (REMOTE) The problem isn't connecting. We have have the DB access and the flows are updating fine. BUT.at times when you and "tweeking" the flow or playing with a node (Database Insert in this example) that has mapping the node looses is references for ALL the mapping elements and produces a error UNKNOWN REFERENCE TO DATABASE X for each element in the Toolkit Application Development prospective. Somehow, internally it gets lost in with itself. Like all of a sudden it has al-timners. We found the only way areound this is to delete the flow and recreat it. This could get to be a BIG pain when the flows start to get complicated. I was wondering if anyone has hit this and figured another way around the problem. bobbee From: "Rodrmguez Alvarez-Querol, Manuel Carlos" To: "'[EMAIL PROTECTED]'" Subject: RE: Unknow Database Reference (WBI-MB) Date: Tue, 4 May 2004 09:53:36 +0200 Hi Bobbee, This is out of the list just to make sure about your error and before sending wrong information to the list and make confussion. Can you explain me in more detail the database configuration? Which is you OS, DB, ODBC configuration, DSN used in the mapping node? I found a problem accesing to DB in Oracle and I opened a PMR with IBM. You might have the same problem. Regards, Manuel -Mensaje original- De: Robert Broderick [SMTP:[EMAIL PROTECTED] Enviado el: Monday, 03 May, 2004 10:36 PM Para:[EMAIL PROTECTED] Asunto: Unknow Database Reference (WBI-MB) Anybody deal with a mapping problem in WBIMB where you get an error on the database mappings indicating "UNKNOWN REFERENCE TO DATABASE ". This happens on all the mappings in the node. How do you recover (fix) this without redoing the WHOLE mapping. bobbee _ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.com/go/onm00200415ave/direct/01/ Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive _ MSN Toolbar provides one-click access to Hotmail from any Web page FREE download! http://toolbar.msn.com/go/onm00200413ave/direct/01/ Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: correct definition
BIMBO :) Tibor Whyworry about it the name will change again anyway :) Regards TimA -Original Message- From: Kulbir S. Thind [mailto:[EMAIL PROTECTED] Sent: Tuesday, 4 May 2004 8:28 AM To: [EMAIL PROTECTED] Subject: correct definition All, Quick question: What is the official acronym for WebSphere Business Integrator Message Broker? I have seen the following three stated: a) WBIMB b) WBI MB c) WBI-MB Which is it? Regards, Kulbir. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: ESQL : CASE WHEN
Won't work because syntax definition of 'CASE'
#1
SET myVar = CASE UPPER(var)
WHEN 'AB' THEN '12'
WHEN 'CD' THEN '00'
WHEN 'EF' THEN '00'
WHEN 'GH' THEN '00'
END;
#2
SET myVar = CASE
WHEN UPPER(var) = 'AB' THEN '12'
WHEN UPPER(var) IN ('CD' , 'EF' , 'GH') THEN '00'
END;
#3 (but this isn't identical to your question)
SET myVar = CASE UPPER(var)
WHEN 'AB' THEN '12'
ELSE '00'
END;
By the way, clause 'ELSE' is recommended to avoid NULL values.
HTH,
Tibor
Can I not have multiple condition in a case like..
SET myVar = CASE UPPER(var)
WHEN 'AB' THEN '12'
WHEN 'CD' OR 'EF' OR 'GH' THEN '00'
END;
I tried
SET myVar = CASE UPPER(var)
WHEN 'AB' THEN '12'
WHEN IN ('CD' , 'EF' , 'GH') THEN '00'
END;
Gives me an error !!
__
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: ESQL SELECT to fetch non-null tags
Sorry, but I don't understand your problem correctly - perhaps because
I don't know your input. Can you send me the input XML structure?
Tibor
Tibor,
Sorry I forgot to mention that I can have others tags under Books.
But I need to fill the array with Book1 , 2 or 3 which ever exists.
Is there some way that I can refer to this Variable.
I tried REF.{'Book' || CAST I AS CHAR'};
Does'nt Work!
Tibor [EMAIL PROTECTED] wrote:
I try something like this (not tested):
DECLARE I INTEGER;
DECLARE J INTEGER;
DECLARE C INTEGER;
SET I = 1;
SET J = 1;
SET C = CARDINALITY(InputRoot.XML.Books[]);
WHILE I = C DO
IF InputRoot.XML.Books.*[I] IS NOT NULL THEN
SET APR[J] = InputRoot.XML.Books.*[I];
SET J=J+1;
END IF;
SET I=I+1;
END WHILE;
But when cardinality of Books[] is large, using reference is more
efficient.
Tibor
I have an XML
A
B
C
I want to fill out an array with only the non null tags Book1 , Book2 and Book3.
If Book2 is not present I want ARR[1] = A and ARR[2]=C
How should my ESQL be?
-
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
-
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: World Writable files under Unix
I found an interesting description in WAS Manual: http://publib.boulder.ibm.com/infocenter/wasinfo/topic/com.ibm.websphere.base.doc/info/aes/ae/tmj_secmqm.html But I don't understand why this is missing from MQ Security Manual... HTH, Tibor I started the Post I do not remember a final answer. Emile Kearns Certified MQSeries Specialist IBM Certified System Administrator - Websphere MQ, V5.3 -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Meekin, Paul Sent: 25 March 2004 05:59 PM To: [EMAIL PROTECTED] Subject: World Writable files under Unix Hi all, Last July there was a thread about directories under /var/mqm/qmgrs/@SYSTEM having permissions drwxrwsrwx here http://www.mail-archive.com/[EMAIL PROTECTED]/msg09014.html. Was there ever a final answer about what these are used for and if the world write access allowed a potential Denial of Service? Our audit people have just discovered them and are asking awkward questions !!! Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Any views expressed in this message are those of the individual sender, and T-Systems South Africa (Pty) Ltd accepts no liability therefore, except where the sender specifically states them to be those of T-Systems South Africa (Pty) Ltd. Although this message has been scanned for the possible presence of computer viruses prior to despatch, T-Systems South Africa (Pty) Ltd cannot be held responsible for any viruses or other material transmitted with, or as part of, this message. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: ESQL SELECT to fetch non-null tags
I try something like this (not tested): DECLARE I INTEGER; DECLARE J INTEGER; DECLARE C INTEGER; SET I = 1; SET J = 1; SET C = CARDINALITY(InputRoot.XML.Books[]); WHILE I = C DO IF InputRoot.XML.Books.*[I] IS NOT NULL THEN SET APR[J] = InputRoot.XML.Books.*[I]; SET J=J+1; END IF; SET I=I+1; END WHILE; But when cardinality of Books[] is large, using reference is more efficient. Tibor I have an XML Books Book1A/Book1 Book2B/Book2 Book3C/Book3 /Books I want to fill out an array with only the non null tags Book1 , Book2 and Book3. If Book2 is not present I want ARR[1] = A and ARR[2]=C How should my ESQL be? - Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: AW: Boot problem on Solaris: solved but HOW?
Pavel,
Tibor, we did not try the early tracing. I am not sure what more
information from the script itself I need. We had a pretty good
error message from strmqm complaining about not being authorized and
the error status (not documented, though: 119. Anyone from IBM?).
For me the (early) tracing is recommended anytime when I feel some
strange behavior in MQ. It helped me a lot of times without official
support, e.g. last when crtmqm failed because mqm user was in other
group then mqm - misconfigured by sysadmin...
So rc=119 may be a reason code of any system call, not an MQ error.
HTH,
Tibor
Hello,
Thanks to all who answered!
Hubert, thank you, we have it working as well. What we (Ian and I) could not do is
to reproduce the problem in a normal (not boot-up) mode to understand its root
cause.
Tibor, we did not try the early tracing. I am not sure what more information from
the script itself I need. We had a pretty good error message from strmqm complaining
about not being authorized and
the error status (not documented, though: 119. Anyone from IBM?).
Gunter, thanks, yes it was one of the last resort ideas to go and compare all the
environment -- but I think we have never actually done that. We will try it next
time we reboot.
Ian, I am not sure why you did not get messages. We created /var/mqm/init_d.log or
some similar file at the beginning of the start script, changed its ownership to
mqm:mqm and then appended to it
the output of all commands, approximately in this manner:
echo will run strmqm... $logFile
strmqm ... $logFile 21
rc=$?
echo error status $rc $logFile
So we had all the output in the log file.
I will let the list know if I find the answer..
Cheers,
Pavel
Kleinmanns,
HubertTo: [EMAIL PROTECTED]
Hubert.Kleinmanns@cc:
DREGIS.COMSubject: AW: Boot problem on
Solaris: solved but HOW?
Sent by: MQSeries
List
[EMAIL PROTECTED]
AC.AT
04/02/2004 04:34 AM
Please respond to
MQSeries List
Hi Pavel, Ian,
the following script starts my queue manager at boot time on Solaris:
#!/bin/ksh
#
# MQSeries start/stop script
#
case $1 in
start)
echo Starting MQSeries daemons
su - mqm -c /opt/mqm/bin/strmqm TESTQM
su - mqm -c /opt/mqm/bin/strmqcsv TESTQM
;;
stop)
echo Stopping MQSeries daemons
su - mqm -c /opt/mqm/bin/endmqm -i TESTQM
;;
restart)
$0 stop
$0 start
;;
*)
echo Usage: $0 {start|stop|restart}
exit 1
;;
esac
exit 0
On AIX just replace opt by usr. I put this file to the directory
/etc/init.d with name mqm and set up th following links:
# ln -s /etc/init.d/mqm /etc/rc1.d/K18mqm
# ln -s /etc/init.d/mqm /etc/rc2.d/S94mqm
Regards
Hubert
-Ursprungliche Nachricht-
Von: Chan, Ian M [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 2. April 2004 02:19
An: [EMAIL PROTECTED]
Betreff: Re: Boot problem on Solaris: solved but HOW?
Pavel,
I want to know the answer too!
We have the same problem on Sun Solaris and did the same thing to solve it
after upgrading to v5.3 (it works in v5.2 without su mqm). There is even no
error message produced in our case. MQ just not started after reboot. We
have AIX running MQ v5.3 and startup script works OK even without su mqm.
So as mentioned in the FAQ, it only affects Solaris and some Linux.
Cheers,
Ian
-Original Message-
From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Pavel
Tolkachev
Sent: Friday, 2 April 2004 9:26 AM
To: [EMAIL PROTECTED]
Subject: Boot problem on Solaris: solved but HOW?
Hello,
We had a problem -- with starting MQSeries 5.3 at bootup on Solaris --
actually exactly FAQ problem described in
http://www.developer.ibm.com/tech/faq/results/0,1322,1%253A401%253A411%253A1
0%253Amq,00.html#q10
and we solved it all right as FAQ suggested. What drives me crazy, however,
is that the problem itself could not be reproduced from the regular command
prompt, no matter what command prompt it was. I have sudo root access on the
machine and I tried all the ways of creating the process context similar to
the boot environment -- like
sudo su
sudo su -,
sudo sh,
sudo ksh
sudo ksh, then su -
etc. etc. etc.
We checked euid,egid,uid,gid and everything -- and all that was root and
system (most of the time) and still our startup scripts always worked fine
from the command line -- but not when system were booting (we added our root
in mqm group, that did not help either) -- and the simple trick in the FAQ
does the thing. I thought I knew Unix a little bit -- and now
Re: Boot problem on Solaris: solved but HOW?
Pavel, Did you try to switch on the early tracing in your script? Some other cases it helps us in investigating the root of the problem. HTH, Tibor Hello, We had a problem -- with starting MQSeries 5.3 at bootup on Solaris -- actually exactly FAQ problem described in http://www.developer.ibm.com/tech/faq/results/0,1322,1%253A401%253A411%253A10%253Amq,00.html#q10 and we solved it all right as FAQ suggested. What drives me crazy, however, is that the problem itself could not be reproduced from the regular command prompt, no matter what command prompt it was. I have sudo root access on the machine and I tried all the ways of creating the process context similar to the boot environment -- like sudo su sudo su -, sudo sh, sudo ksh sudo ksh, then su - etc. etc. etc. We checked euid,egid,uid,gid and everything -- and all that was root and system (most of the time) and still our startup scripts always worked fine from the command line -- but not when system were booting (we added our root in mqm group, that did not help either) -- and the simple trick in the FAQ does the thing. I thought I knew Unix a little bit -- and now I am not sure :-( ... Does anybody have an idea what is the root cause of the problem described in the FAQ entry referred to above and how to reproduce it from the command prompt? What is that in the environment that is different when entering runlevel 3? BTW, the error message we were getting from strmqm was actually different from the one mentioned in the FAQ -- some error status 119 (not documented in Sys Adm Guide). Regards, Pavel -- This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQSeries on HP NSK (Tandem)
Harkishin, 1. MQCOMMIT, MQBACK and MQBEGIN are not supported on Tandem. Should use TMF functions, like BEGINTRANSACTION(), ABORTTRANSACION() and ENDTRANSACTION(). 2. There is no trigger message when a message lands on the local queue. The designers have to use MQ SET SIGNAL option with MQGET. I didn't understand it - where did you read about triggering facility lacks on NSK? Look the default trigger monitor in qmgr's pathway (MQS-TRIGMON00). 3. MQPUT As far as MQPUT is concerned, the problem is the heavy cost of setting up a process under Tandem. If we were to invoke a program everytime a message has to be sent, it would cause a set up of process which impacts performance. To eliminate the this cost, the output transaction also would have to be running continuously ready to send a message as soon as it receives required data. If you want to separate the MQ logic and other business logic, my recommendation is a pathway server reading $RECEIVE. In this case you stay inside transactional zone. But this is not necessary just in some special cases. I think simpler an MQI call from application inside same UOW. 4. and 5. Because MQ for NSK use the TMF firstly you need to read this chapter in Sysadmin manual (Chapter 11. Understanding transactional support and messaging, AMQPAG00.PDF). 6. As described above, the programs would be long running one. We have a feature on Tandem which causes the applications to autoabort in case the transaction time exceeds the autobort time... All transactions are so long as your business logic, and it isn't depend on MQ. HTH Tibor Dear Friends, I am looking for some guidance on MQ application design on the Tandem system. On Tandem, MQ is only a resource manager. The transactional coordination is carried out by TM/MP also referred to as TMF. There are some vital differences between MQ on Tandem and MQ on Unix. Some of these are as follows: 1. MQCOMMIT, MQBACK and MQBEGIN are not supported on Tandem. 2. There is no trigger message when a message lands on the local queue. The designers have to use MQ SET SIGNAL option with MQGET. When the message arrives on the queue, the signal is generated and the application restarts. However only one such open signal can be active at any time. If second such request is encountered while the first one is still waiting, the second requestor will get an error message. It therefore appears that the program to read the queue has to be always active with MQGET outstanding (with set signal option activated). After it receives the signal, it reads the message, processes it as per the design, executes ENDTRANSACTION to activate commit which deletes the message from the queue and them executes MQGET again with set signal option for the next message which may arrive. Is this correct? 3. MQPUT As far as MQPUT is concerned, the problem is the heavy cost of setting up a process under Tandem. If we were to invoke a program everytime a message has to be sent, it would cause a set up of process which impacts performance. To eliminate the this cost, the output transaction also would have to be running continuously ready to send a message as soon as it receives required data. The question is how to set this up? The data is comming from another application server. Can we use $RECEIVE File or $TMP file? Can somebody tell me what is the best way to start an output program which would MQPUT the message to the output queue? I am looking for a programmatic way of initiating a program or section of the program to execute MQPUT. Under Tandem, MQ 5.1, the application would pass the MQI instruction to LQMA (Local Queue Manager Agent) which then interact with the Queue and other servers to execute this instruction. At completion, the main transaction resumes. After ENDTRANSACTION, the program would go to wait for next input data to be sent. Is this correct? 4. Logging for recovery On the Unix and windows platform, we have MQ Logs, circular or linear. In case of Tandem, this does not appear to be a case. It appears that logging is carried out under TM/MP. So media recovery and recovery of message in flight would be the responsibility of TM/MP. Is this is correct? 5. Logging (continued) We separate the log files from the queue data files for performance. How do we do this on Tandem? Can we identify the volumes holding the TMF logs? If we can, them can we allocate disk drives selected by us to hold queue data? 6. As described above, the programs would be long running one. We have a feature on Tandem which causes the applications to autoabort in case the transaction time exceeds the autobort time. How do we ensure that this condition is never met? Transactions can run overnight. In a lightly loaded queues, the chances of the program waiting on MQGET for a message which may arrive many hours later is not impossible. How do we handle this? Any other
Re: MQ Error : MQSTR and MQHRF dll not found
Edward, These errors are coming when messages contains non-standard codepages for conversion. When an application call MQGET with MQGMO_CONVERT option, MQ looking for a data conversion exit. As far as I remember we got same errors on Latin-2 messages (CCSID=912 or 1250, but platform is 819). HTH, Tibor Dear all, I am a newbie for supporting MQ Series. We installed websphere MQ 5.3 and CSD 5. Then, it joins our MQ cluster which is in UNIX. Everything looks fine. However, it keeps posting the following errors in the event viewer. It said MQSTR.dll and MQHRF.dll can't be found. But I don't know which process(es) need to these dll files. Did anyone come cross the problem? Please shed some light on this. Many Thanks! AMQ6174: The library c:\mqm\exits\MQSTR was not found. The queue manager will continue without this module. EXPLANATION: The dynamically loadable file c:\mqm\exits\MQSTR was not found. ACTION: Check that the file exists and is either fully qualified or is in the appropriate directory. AMQ6174: The library c:\mqm\exits\MQHRF was not found. The queue manager will continue without this module. EXPLANATION: The dynamically loadable file c:\mqm\exits\MQHRF was not found. ACTION: Check that the file exists and is either fully qualified or is in the appropriate directory. %21~'^!B6:q!B$p,P,P... v:)9aAn 1!$_3sC4 http://ringtone.yahoo.com.hk/ Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Migrating MQSeries to another server
Plus if authentication system of the destination OS is similar to the source OS, I would save the OAM with amqoamd. Tibor Hi Dave, In the absence of vendor tools, I would use the saveqmgr program from the ms03 support pack. It will save the object configuration of your queue manager as a runmqsc format file. When you create your new system, you need to run crtmqm to create the queue manager, and then use runmqsc saveqmgr.tst This will create all of your objects on the new queue manager. You may need to edit the file for ip addresses in locladdr fields and such things. This will leave your channels in a broken state, because the sequence numbers will not match. You can get the saveqmgr tool to generate reset commands for sdr/svr channels, but you will need to manually fix your rqstr/rcvr channels. Regards, Neil Casey. |-+ | | Schaeffer Dave | | | [EMAIL PROTECTED]| | | ENDIX.COM | | | Sent by: MQSeries| | | List | | | [EMAIL PROTECTED]| | | n.AC.AT | | || | || | | 02/03/2004 08:42 | | | Please respond to| | | MQSeries List| | || |-+ --| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Migrating MQSeries to another server | --| We are replacing our current development server with new hardware, as part of this process we are rebuilding this server. Is there an easy way to unload the current MQSeries queue manager and load this into the new server? We are on MQSeries v5.2 on HP-UX 11.0. Thanks for any help that you can provide. Dave Schaeffer Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Dinosaur (AIX) + MQ
David, I mean AIX v2.1, and would be satisfied with a simple MQ client. Tibor Did you mean MQ2.1 for AIX or MQ for AIX 2.1. IIRC there was an MQ 2.1, but what release of AIX it pre-req'd I'm not sure (probably 4.2). In any case it would now be long out of support. David Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Queue Browsing and data conversion
There is a separate CCSID field to describe the folders in the RFH2 header. True. An error occurs when MQMD.CCSID = 912 and MQRFH2.CCSID = 912, too, and the sent message is AMQ4048 (unexpected error). In addition an FDC file created. When I modify MQMD.CCSID to 819 or 437, working fine. +-+ | | | WebSphere MQ First Failure Symptom Report | | = | | | | Date/Time :- Sze februar 25 10:18:34 Kvzip-eurspai tili idu 2004| | Host Name :- BATANOTE (Windows XP Build 2600: Szervizcsomag 1) | | PIDS :- 5724B4100 | | LVLS :- 530.5 CSD05 | | Product Long Name :- WebSphere MQ for Windows | | Vendor:- IBM| | Probe Id :- MS098000 | | Application Name :- MQM| | Component :- HandleMQRetcodes | | Build Date:- Sep 27 2003| | CMVC level:- p530-05-L030926| | Build Type:- IKAP - (Production)| | UserID:- bodi1atti209 | | Process Name :- C:\WINDOWS\system32\mmc.exe| | Process :- 3896 | | Thread:- 0002 | | Major Errorcode :- xecF_E_UNEXPECTED_RC | | Minor Errorcode :- MQRC_NOT_CONVERTED | | Probe Type:- MSGAMQ6118 | | Probe Severity:- 2 | | Probe Description :- AMQ6118: An internal WebSphere MQ error has occurred | | (847) | | FDCSequenceNumber :- 0 | | Arith1:- 2119 847 | | | +-+ ... We are using localized windows and the enviroment variables MQCCSID=437 is needed for connecting qmgrs (localized English). FYI, Tibor On Tue, 24 Feb 2004 10:39:59 +0100 Tibor [EMAIL PROTECTED] wrote: :Moreover, when I put a message with RFH2 header and non-ASCII :CCSID, MQExplorer can't handle this and drops an error message box... :even only one message is matching this condition in the first 200 :( There is a separate CCSID field to describe the folders in the RFH2 header. What is the reported error? -- Binyamin Dissen [EMAIL PROTECTED] http://www.dissensoftware.com Director, Dissen Software, Bar Grill - Israel Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Dinosaur (AIX) + MQ
Anyone heard about MQ for AIX v2.1? I got this version information from the sysadmin however I'd never seen such AIX... TIA, Tibor Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Zero bytes FDCs on a WMQ 5.3 CSD5 Solaris
Federico, Is there any free space in your /var/mqm filesystem? We got this malfunction in this situation. Try 'df -k /var/mqm' HTH, Tibor Hi folks, can anyone cast some light on the potential cause of zero bytes FDCs being generated on WMQ 5.3 CSD5? My guess is that MQ tries to write them for some reason but then it does not get further that a fopen(my.DFC, w) because some other (kernel?) resource is not available... but unfortunately I cannot investigate the real problem until I manage to have WMQ cutting FDCs properly! Any clues? F. PS: all Solaris patches and kernel settings look correct and there's plenty of diskspace available Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: NT: create listener service via script
Fichtner, Look the command 'amqmdain' in mq admin guide. An example create script: crtmqm -lc -lf 1024 -lp 5 -ls 15 -u SYSTEM.DEAD.LETTER.QUEUE QM1 amqmdain auto QM1 amqmdain crtchi QM1 SYSTEM.CHANNEL.INITQ amqmdain crtlsr QM1 -t TCP -p 1414 amqmdain reg QM1 -c add -s TCP -v KeepAlive=Yes HTH, Tibor For developing and testing it is nice to have a bunch of scripts which create queue managers and everything that's needed for communication between them. What I'm using is mainly the scripts dropped by SAVEQMGR in conjunction with a batch file that creates everything I want. However, the only thing I'm not able to create via scripts is the listener service (of course I could run it in a dos shell). Q.: Is there a way of creating services under NT via script? Thanks, Enrico Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sharing an Oracle Database
Kulbir, IMHO a sharing database is better, because an additional Oracle instance eating more resource than some new internal thread. Tibor Hi, Has anyone encountered any issues trying to use the WBI MB (or MQSI) on Sun Solaris with Oracle as the internal broker Database and the same Database instance also as a Database for your messaging needs (i.e. routing, transformations, batching, etc)? I would be interested if anyone has done this with DB2 even. Is there anything I need to be aware of? Any recommendations. Regards, Kulbir. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: SSL certificate administration with gsk6cmd - 7th January fix
David, Look this: http://www.mqseries.net/phpBB2/viewtopic.php?t=12776highlight=gsk6cmd Christian, Problem fixed: https://www6.software.ibm.com/dl/wsmqcsd/wsmqcsd-p HTH, Tibor What 7th January problem - do tell all! Dave Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sequence numbers out of sync.
Curt, We had already run into similar and only solution was deleting and re-creating channels, because this step remove the entries from SYNCQ. It was on distributed platform, not Z/OS. HTH, Tibor Curt, This sounds like an old problem where duplicate messages for the same channel exists in SYNCQ. IBM provided a batch utility to run, which would list duplicate entries for the same channel and, optionally, delete them. I don't know if this problem still pertains to MQ V5.3 on z/OS. Curt Dolny [EMAIL PROTECTED] To: [EMAIL PROTECTED] MUTUAL.COM cc: Sent by: MQSeries List Subject: Sequence numbers out of sync. [EMAIL PROTECTED] T 01/12/2004 02:04 PM Please respond to MQSeries List Hi All, The environment is z/OS 1.4 with MQSeries 5.3, HP-UX 11.0 with MQSeries 5.2 and AIX 5.1 with MQSeries 5.3. Maintenance is current on the queue managers, as far as I know. I frequently see that the channels between the z/OS queue manager and some of our HP-UX queue managers, and the channels between the z/OS queue manager and some of our AIX queue managers, will end because the message sequence numbers are out of sync. On the z/OS side, I see the following messages in the CHIN started task: +CSQX526E MQT1 CSQXRCTL Message sequence error for channel MQT1.TO.POOFB, sent=1 expected=95 +CSQX506E MQT1 CSQXRCTL Message receipt confirmation not received for channel MQT1.TO.POOFB +CSQX599E MQT1 CSQXRCTL Channel MQT1.TO.POOFB ended abnormally On the HP-UX side, I see the following message in the current .LOG file in /var/mqm/qmgrs/POOFB/errors: AMQ9526: Message sequence number error for channel 'MQT1.TO.POOFB'. EXPLANATION: The local and remote queue managers do not agree on the next message sequence number. A message with sequence number 1 has been sent when sequence number 95 was expected. ACTION: Determine the cause of the inconsistency. It could be that the synchronization information has become damaged, or has been backed out to a previous version. If the situation cannot be resolved, the sequence number can be manually reset at the sending end of the channel using the RESET CHANNEL command. I am not sure how to track down *why* this is happening. Under the Action part of the HP-UX message, it talks about synchronization information. Where/how do I investigate this? Issuing the Reset Channel command always resolves the problem when it happens. Any experiences that anyone can share or pointers to the appropriate documentation will be greatly appreciated. Thanks, Curt Dolny Northwestern Mutual Milwaukee, WI Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: clear qlocal
This is coming from to accelerate queue performance . When we was
comparing v5.1 and v5.2, this method seemed significant in some test.
http://www.mqseries.net/phpBB2/viewtopic.php?p=1858
Tibor
This is normal. MQ will clear up that actual file when its good and ready
(read:undocumented as to when it will really happen). Bouncing the QM
usually does force the file to drop in size I have noticed.
-Original Message-
From: Wright, Tim (ANTS) [mailto:[EMAIL PROTECTED]
Sent: Monday, January 05, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: clear qlocal
Hi
This is probably a really stupid question:
we're running MQ 5.2 on Solaris 8.
we sometime notice the following behaviour:
from within runmqsc, do a clear ql('SOME QUEUE') which returns AMQ8022:
MQSeries queue cleared.
display ql('SOME QUEUE') curdepth then gives a value of 0.
However the queue file for SOME QUEUE ( in /var/mqm/qmgrs/ ) remains the
same size until we restart the queue manager.
Anyone any ideas why this is happening?
thanks
tim
***
This communication (including any attachments) contains confidential
information. If you are not the intended recipient and you have received
this communication in error, you should destroy it without copying,
disclosing or otherwise using its contents. Please notify the sender
immediately of the error.
Internet communications are not necessarily secure and may be intercepted or
changed after they are sent. Abbey National Treasury Services plc does not
accept liability for any loss you may suffer as a result of interception or
any liability for such changes. If you wish to confirm the origin or
content of this communication, please contact the sender by using an
alternative means of communication.
This communication does not create or modify any contract and, unless
otherwise stated, is not intended to be contractually binding.
Abbey National Treasury Services plc. Registered Office: Abbey National
House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in
England under Company Registration Number: 2338548. Regulated by the
Financial Services Authority (FSA).
***
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
This communication, including attachments, is for the exclusive use of
addressee and may contain proprietary, confidential or privileged
information. If you are not the intended recipient, any use, copying,
disclosure, dissemination or distribution is strictly prohibited. If
you are not the intended recipient, please notify the sender
immediately by return email and delete this communication and destroy all copies.
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: segmentation not supported on Z/OS ?
Vivek, Which type of segmentation needed? Auto or manual? If you want to send messages to distributed platform, manual segmentation is easy, because MQMDE is fully specified. (Or maybe not so easy to handle all conversions on receiving msgs?) HTH, Tibor And if so, what workarounds exist if any ? -Original Message- From: Williams, Arlen [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 17, 2003 8:21 PM To: [EMAIL PROTECTED] Subject: Re: Installing CSD05 on Windows 2003 cluster You might try Process Explorer (also found at www.sysinternals.com). http://www.sysinternals.com/ntw2k/freeware/procexp.shtml My only other suggestion (and I have had to do this many times) is to start stopping services until it works and then restart the services (or reboot). -Original Message- From: Faizel Sedick [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 17, 2003 7:10 AM To: [EMAIL PROTECTED] Subject: Installing CSD05 on Windows 2003 cluster Please help. I am struggling to install the latest CSD ( CSD05 ) on a Windows 2003 server. I get a Files in use during the installation. I have struggled through this before, and the www.sysinternals.com utils - listdlls.exe and handle.exe usually tell me what I need to kill, but not this time. I searched for string mq in both of the command outputs and come out empty. The only difference between this and the other servers, is that this is a NT cluster. Has anyone else had something similar with the Windows 2003 cluster. Faizel Sedick Woolworths Integration IBM MQSeries Certified Specialist, Developer Solutions Expert Email: [EMAIL PROTECTED] Phone: +27 21 407 2452 Cell: +27 83 251 9361 Please note: This e-mail and its contents are subject to a disclaimer which can be viewed at http://www.woolworths.co.za/disclaimer. Should you be unable to access the link please e-mail [EMAIL PROTECTED] and a copy of the disclaimer will be e-mailed to you. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Secure communication w/o SSL or CA
Title: RE: Secure communication w/o SSL or CA Hi Pavel, yes, you right understood our requirement. We have SVRCONN channels defined yet therefore 2nd option is adequate for us. I hope this is quite enough. Many thanks for your help. Regards, Tibor -Pvodn zprva- Od: Pavel Tolkachev [mailto:[EMAIL PROTECTED]] Odeslno: 11. prosince 2003 20:34 Komu: [EMAIL PROTECTED] Pedmt: Re: Secure communication w/o SSL or CA Hello Tibor, Sorry for using your second name instead of first -- I need to be more focused. If my understanding of the problem is correct, you want to restrict the users who have login on the box from accessing MQ; if there is no defined SVRCONN channels it is easy to do: use setmqaut to restrict access to MQ objects only by those user accounts / groups who needs it and make sure noone of the bad guys is a member of mqm group. If you are running SVRCONN channel and listening for connections in MQ listener run by a trusted user or by inetd on behalf of a trusted user, or MCAUSER attribute of a SVRCONN channel is not empty and is one of a trusted user I would recommend using SSL (or one of other solutions mentioned in previous relplies) to authenticate those trusted users; otherwise, anyone connecting to the channel will be trusted in the same way, unless you leave MCAUSER blank and run listeners as a powerless user: in this case, however, a hostile java client app will be able to pretend any user even without necessity for the attacker to adulterate MQ client code. I hope this will help, Pavel Vilhan, Tibor [EMAIL PROTECTED] To: [EMAIL PROTECTED] FIN.CZ cc: Sent by: MQSeries Subject: Re: Secure communication w/o SSL or CA List [EMAIL PROTECTED] n.AC.AT 12/11/2003 11:47 AM Please respond to MQSeries List Hi Pavel, at first my first name is Tibor - no so quite standard e-mail convention, isn't it?:) We want to secure it against 'undisciplined' internal users (potential internal attackers) which have access to the server for another purposes than access to the MQ is. I agree with you that it's possible to achieve by proprietary application-to-application connection too. Thanks a lot for your opinion. Regards, Tibor -Pvodn zprva- Od: Pavel Tolkachev [mailto:[EMAIL PROTECTED]] Odeslno: 11. prosince 2003 17:03 Komu: [EMAIL PROTECTED] Pedmt: Re: Secure communication w/o SSL or CA Hello Vilhan, What kind(s) of attack you want to secure you communications from? I think you can't be secure from a (determined) man-in-the-middle passive attack without encryption and active attack -- without message authentication. You can have it all on application level though or in your own Exits -- but SSL seems to me a much less cumbersome way (unless you have it all already). Pavel Vilhan, Tibor [EMAIL PROTECTED] To: [EMAIL PROTECTED] FIN.CZ cc: Sent by: MQSeries Subject: Secure communication w/o SSL or CA List [EMAIL PROTECTED] n.AC.AT 12/11/2003 09:17 AM Please respond to MQSeries List Greetings All, are in the MQSeries another alternatives how to basically secure communication (it means without using SSL or messages subscribing)? Thank you very much in advance for any advice. Regards, Tibor -- This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive -- This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Secure communication w/o SSL or CA
Title: Secure communication w/o SSL or CA Greetings All, are in the MQSeries another alternatives how to basically secure communication (it means without using SSL or messages subscribing)? Thank you very much in advance for any advice. Regards, Tibor
Re: Secure communication w/o SSL or CA
Title: RE: Secure communication w/o SSL or CA Hi Pavel, at first my first name is Tibor - no so quite standard e-mail convention, isn't it?:) We want to secure it against 'undisciplined' internal users (potential internal attackers) which have access to the server for another purposes than access to the MQ is. I agree with you that it's possible to achieve by proprietary application-to-application connection too. Thanks a lot for your opinion. Regards, Tibor -Pvodn zprva- Od: Pavel Tolkachev [mailto:[EMAIL PROTECTED]] Odeslno: 11. prosince 2003 17:03 Komu: [EMAIL PROTECTED] Pedmt: Re: Secure communication w/o SSL or CA Hello Vilhan, What kind(s) of attack you want to secure you communications from? I think you can't be secure from a (determined) man-in-the-middle passive attack without encryption and active attack -- without message authentication. You can have it all on application level though or in your own Exits -- but SSL seems to me a much less cumbersome way (unless you have it all already). Pavel Vilhan, Tibor [EMAIL PROTECTED] To: [EMAIL PROTECTED] FIN.CZ cc: Sent by: MQSeries Subject: Secure communication w/o SSL or CA List [EMAIL PROTECTED] n.AC.AT 12/11/2003 09:17 AM Please respond to MQSeries List Greetings All, are in the MQSeries another alternatives how to basically secure communication (it means without using SSL or messages subscribing)? Thank you very much in advance for any advice. Regards, Tibor -- This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQExplorer Security Exit
Maybe off-topic, but anybody heard about SSL support from MQExplorer? I find it a better idea than security exit, because all of our queue managers are v5.3 but Tandem. We sent this request to IBM support and they promised this development so 3 month ago... Even if the 'unsupported' MO71 knows the SSL client connection, MQExplorer why don't? Tibor How can you use this in the UNIX environment? More specifically, AIX. Is there a link for the source code? -Warren At 09:52 AM 10/28/2003, you wrote: You can use it on Unix. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 28, 2003 12:50 PM To: [EMAIL PROTECTED] Subject: Re: MQExplorer Security Exit Peter, It is quite good. Any chance of getting this exit for UNIX environment ?? Regards Sony. -Original Message- From: Potkay, Peter M (PLC, IT) [mailto:[EMAIL PROTECTED] Sent: 28 October 2003 17:34 To: [EMAIL PROTECTED] Subject: MQExplorer Security Exit Has anyone implemented this Security exit from Neil Kolban in production? I have been fiddling with it in my LAB environment and it seems to work well. http://www.kolban.com/mq/Security/security.htm I was considering putting it on all my SYSTEM.ADMIN.SVRCONN channels, and tagging the channels with mqm on the MCAUSER. Since only trusted people would have the partner exit on their side, and only trusted people would know the ID / Password combos to get thru the Exit, and access to the servers is restricted, I would think this would secure MQExplorer functions while at the same time not requiring me to keep a current list of valid IDs in the mqm group on every server. Peter Potkay MQSeries Specialist The Hartford Financial Services [EMAIL PROTECTED] x77906 IBM MQSeries Certified This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: WMQI : Running Two Versions of Control Center, is it possible?
Jeff, This is possible, look this topic: http://www.mqseries.net/phpBB2/viewtopic.php?t=9885highlight=CC Of course, Frank is right - officially... Tibor Jeff, Is it possible to run the Control Center of both versions on the same computer? No. In fact, the install of the WBI MB V5 toolkit will fail if it detects that the WMQI Control Center is currently installed. Regards, Christopher Frank Sr. I/T Specialist - IBM Software Group IBM Certified Solutions Expert - Websphere MQ MQ Integrator Phone: 612-397-5532 (t/l 653-5532) mobile: 612-669-3008 e-mail: [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: The equivalent of Windows Event Viewer on HP-UX
Similar to bobbee's environment, we are running scheduled processes (by cron, of course) to select and mail WMQI messages to developers. Plus rotating of log files is needed but I think this is a sysadmin task... Tibor At one client, we wrote a script that ran out o CRON that parsed the SYSLOG looking for certain message,What they were I do not recall. Also there is a directory under the install directory barticular to the Broker where it stores ABENDs. If one of these exits you hit a problem. If your running ADAPTERS, like R/3 Link you need to monitor the Adapter log it creates. Also if I remember correctly you need to manage the space from the ADAPTER logs as they tend to grow and Grow and GRow and GROw and GROW!! bobbee From: Kulbir S. Thind [EMAIL PROTECTED] Reply-To: MQSeries List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: The equivalent of Windows Event Viewer on HP-UX Date: Fri, 12 Sep 2003 11:30:51 +0100 Hi, Has anyone got any thoughts on this? Thanks, Kulbir. Kulbir S Thind 09-Sep-2003 11:39 SCITD3 GSK House(020) 8047 2820 To: MQSeries List cc: Subject:The equivalent of Windows Event Viewer on HP-UX Hi, We're beginning to look at migrating our WMQI set-up from Windows 2000 to HP-UX and have a query. As part of our support processes we make extensive use of the Windows Event Viewer for exception handling purposes, what is the equivalent on HP-UX and is it used in much the same way? Thanks in advance, Kulbir. _ Get 10MB of e-mail storage! Sign up for Hotmail Extra Storage. http://join.msn.com/?PAGE=features/es Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: archives of the listserver
Tania, If you need, I can send my own archive from Apr 2000 in Unix mailbox format or RFC-822 message format (or of course the original RitLabs MSB and TBB files). HTH, Tibor mail-archive.com is the most current but it only goes back to July. I don't know whether it will still go back to July in a few months. A lot of people have stopped using the listserver because they see too many questions being repeated. We NEED a search engine that covers the period between Apr 99 and Jul 03. How hard is it to get Google or someone to index the Vienna hosted archive? If there's a cost we should get IBM to pay from their MQ marketing budget. Tania SJG Enterprise Integration http://www.sjg-enterpriseintegration.com/ -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of David Awerbuch Sent: 11 September 2003 16:43 To: [EMAIL PROTECTED] Subject: Re: archives of the listserver An update. Please correct me if anyone has a different experience. 1. www.infochain.be This site is still there, and so is the archive, but it appears that the archive ended during March or April 1999; I can not find any messages beyond that point. 2. www.ebizq.net/vintage/messageq//forums/vienna/ This link does not refer you in any way to an archive of the server; they do not appear to support one. However, there is a link to Community/Forums on the bottom of the page. This takes you to the list of discussion forums, one of which is MQSeries. There are questions and answers, but not related to this listserv. BTW, this forum was last posted to on August 20, 2003; prior to that was June 30 - compare that to the amount of traffic we get on this list. 3. www.mail-archive.com/mqseries%40akh-wien.ac.at/index.html This archive still exists, and appears to be only a day behind; 10-sep-2003 appears to be most current date. It is keyword searchable, too. 4. //vm.akh-wien.ac.at/wa/~listserv/mqser_l Supposedly the official archive of the listserver, it is archived by month, non-searchable, and is about 9 days behind. quote Last append: 02 Sep 2003 04:22:97 /quote Regards, Dave A. Date:Wed, 10 Sep 2003 19:10:50 +0100 From:Business Integration [EMAIL PROTECTED] Subject: Re: archives of the listserver infochain is still there if you want to look at very old postings too. www.infochain.be We need someone to write an engine which calls all the engines and gives the output together. Tania SJG Enterprise Integration http://www.sjg-enterpriseintegration.com/ -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Potkay, Peter M (PLC, IT) Sent: 10 September 2003 14:27 To: [EMAIL PROTECTED] Subject: Re: archives of the listserver http://www.ebizq.net/vintage/messageq//forums/vienna/ OR http://www.mail-archive.com/mqseries%40akh-wien.ac.at/index.html OR http://vm.akh-wien.ac.at/wa/~listserv/mqser_l David A. Awerbuch, IBM Certified MQSeries Specialist APC Consulting Services, Inc. Providing Automated Solutions to Business Challenges West Hempstead, NY(516) 481-6440 [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: The equivalent of Windows Event Viewer on HP-UX
Kulbir, Ask any of your unix sysadmins about syslog. WMQI sends all events (warning, error) through syslog daemon to files or network. Tibor Hi, We're beginning to look at migrating our WMQI set-up from Windows 2000 to HP-UX and have a query. As part of our support processes we make extensive use of the Windows Event Viewer for exception handling purposes, what is the equivalent on HP-UX and is it used in much the same way? Thanks in advance, Kulbir. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
MQ and MQSI on AIX with TCB install
Hi, We will install a new AIX box for MQ Integrator and TCB is very recommended by security guys. But I'm not sure in the success, because known MQ books don't analyze this configuration. Anyone is using a similar? TIA, Tibor Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQExplorer Security - Another way
Paul, I know that MO71 can handle *all* of the MQCONNX parameters, we tested it and worked fine. Tibor Peter, We sent a request (PMR?) to IBM about implementing SSL settings in MQExplrorer dialog box and they inserted into the future development. And we are hoping... Tibor While you're waiting for Explorer to support SSL you could try SupportPac MO71 which already allows you to enter SSL parameters on the client connection. MO71 does pretty much all Explorer can do plus a bit more besides, Cheers, P. Paul G Clarke WebSphere MQ Development IBM Hursley Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQExplorer Security - Another way
Peter, We sent a request (PMR?) to IBM about implementing SSL settings in MQExplrorer dialog box and they inserted into the future development. And we are hoping... Tibor I'm looking for the easiest way to continue using MQExplorer, for myself and others in a Windows user group, while preventing others from taking advantage of a a server-connection channel. I could try writing a channel exit; I'm not sure I want to get into SSL; that would be part of a bigger implementation than I want to deal with. What I'm thinking of doing is using the authentication and authorization functionality of a logon to a Windows server, and then only allowing remote administration to take place from that server. That means that all other (distributed) queue managers would have to verify that an incoming server connection is coming from this (MQ admin) particular server. You know, if Server-Connection channels had the Connection Name property of a Requester channel, I wouldn't need exits... My questions are: Can my Server-Connection channel security exit get access to the MQCD's ConnectionName? Can I then compare this value to a known list, supplied in the Send Exit Data attribute, of authorized client machines? If the connection name of the client is not a match, then I can terminate the channel? Do I have to install a matching exit on the admin server, or can I just have exits on the remote servers? How much of the loophole am I closing? What's left? I still need to think about the Command Server. I can't just disable SYSTEM.ADMIN.COMMAND.QUEUE because then I can't use MQExplorer. As long as I have the local server-connection channel disabled, then have I closed the remaining remote access loopholes? Then I just have to worry about sneaky local applications.. Peter Heggie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:36 PM To: [EMAIL PROTECTED] Subject: Re: MCAUSER - conflicting descriptions? FYI... There's another wrinkle to the MCAUSER field. This field is also available on SENDER/SERVER channels, implying that a security exit could change the id to something other than mqm. Unfortunately, that's not how it works and therefore, the affect of setting the MCAUSER field on the these channel types is nothing at all. That is, the authority taken by the MCA is that which started the MCA. The MCAUSER field is ignored. IBM will be changing the documentation... Phil |-+ | | Heggie, Peter | | | [EMAIL PROTECTED]| | | NGRID.COM | | | Sent by: MQSeries| | | List | | | [EMAIL PROTECTED]| | | n.AC.AT | | || | || | | 08/08/2003 01:36 | | | PM | | | Please respond to| | | MQSeries List| | || |-+ --- ---| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Re: MCAUSER - conflicting descriptions? | --- ---| Thanks Rob, Great summary and a full answer. Peter Heggie -Original Message- From: Wyatt, T. Rob [mailto:[EMAIL PROTECTED] Sent: Friday, August 08, 2003 1:30 PM To: [EMAIL PROTECTED] Subject: Re: MCAUSER - conflicting descriptions? Peter, There is a resolution process that is used when the MCAUSER is blank. The client will generally inherit the UserID from its process. When this happens, the ID is passed to the SVRCONN channel MCA which uses it to check authority on the CONNECT and OPEN calls. If no UserID is presented by the client, then the UserID that gets authorized is that of the MCA itself, which is usually mqm. It is trivially easy for a client to present the mqm UserID to the SVRCONN channel. In Java the value is set in the code. For some platforms it is set in an environment variable. Even on some platforms that enforce logon (NT, W2K) the user can usually create a local ID called mqm and run under that. If you leave a SVRCONN channel open with no exit and no MCAUSER, then ANYONE CAN CONNECT TO THE CHANNEL AND OPERATE WITH FULL ADMIN AUTHORITY. If you set the MCAUSER and do not use a channel exit, this is the value that is always used for authority. This is a great way to restrict client channels to specific IDs but it is usually used with a low-privileged ID. If your client program needs a high-privileged ID (for example, it needs to access
Re: MQSI Configuration Managers
Sony, Cristopher is right, only one ConfigMgr can have on a machine. This is an old pain for me (and other mqsi admins, IMHO). I don't / can't understand why developers stick to this dummy idea. That's why we are forced to maintain 3 Windows box for the different environments (dev, test, prod). Tibor Sony, Is it possible to have 2 configuration managers on the same box ? No, it is not possible to have more than one configuration manager on a machine. You can have more than one broker, but only one configuration manager. Regards, Christopher Frank Sr. I/T Specialist - IBM Software Group IBM Certified Solutions Expert - Websphere MQ MQ Integrator Phone: 612-397-5532 (t/l 653-5532) mobile: 612-669-3008 e-mail: [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: XML to MRM
Andre, Just a question: ... and in another Compute I concatenate these elements as required to create the required SAP IDOC format... Why aren't you using the IDOC parser (embedded from CSD02) instead of concatenating? In this case your process would be clear and simpler, because all segment fields is defined in the MRM model. HTH, Tibor Hi, MQSI v2.0.1 - CSD6: I have an XML message which I need to convert to MRM (in SAP IDOC format). We have been working with SAP IDOCs in MRM format for quite a while, but the inbound data we have received up to now has always been in fixed length string format which makes it easy to convert it to IDOC (MRM) format. The problem I am having now is that the inbound messages are in XML format (not fixed length). One solution I tried was to first create an MRM message which resembles the XML structure (The reason for this was so I could add all the necessary padding character details by using this interim MRM message). I then map the XML tagged fields to each respective MRM element in this interim MRM message and in another Compute I concatenate these elements as required to create the required SAP IDOC format. Unfortunately what now happens is that the elements seem to be trimmed before concatenation but in SAP the IDOC data is expected to be in a pre-determined fixed length format (including all the padding characters specified in the interim MRM message). I have set the custom wire format of the interim MRM message to fixed length and specified a padding character of space - however the element padding doesn't seem to be holding during concatenation. Then I tried something else - in a compute node (same compute as where I do the concatenation) I declare a temporary field for each of the elements before concatenation and use PAD to obtain the required padding (spaces or zero's). Concatenating these temporary padded fields worked 100% with no leading or trailing spaces being trimmed. I would like to know if there is a simpler way to ensure that when an element of a message is used in concatenation, the entire element length (including padding characters) is used and not only the trimmed actual data. Thanks Andre Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQ test tool
Another very useful is amqsblst in mqm/samp/bin. MQ for Win32
package contains only the C source but you can compile it (or I can
send the binary).
amqsblst ('mq blaster') can put, read or echo messages with any size
and count, waiting time and give statistics.
HTH,
Tibor
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: WMQI - BIP2066E for all execution groups
Start a service trace at 'debug level' on broker side and let we look into it - just for a happy hacking :-) Tibor The configmgr and broker are comuunicating fine. The problem is between the broker and its execution groups. For example, SYSTEM.BROKER.EXECUTIONGROUP.QUEUE has messages on it, but an open input count of zero. SYSTEM.BROKER.EXECUTIONGROUP.REPLY has an open output count of zero. There are no mq errors in any mq log or event viewer. WMQI errors are limited to BIP2066E (and the expected BIP2087E). Tony From: Robert Broderick [EMAIL PROTECTED] Reply-To: MQSeries List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: WMQI - BIP2066E for all execution groups Date: Mon, 9 Jun 2003 08:47:15 -0400 One place to start: Take a look at the SYSTEM.BROKER.* queues and see if as you are doing Deploys there are messages building up. The BROKER should be consuming these messages. If not, then there is a breakdown in the Brokers access to the QMGR, or something simular. Are there any dups in the ERROR directories. Did you check /Errors/, errors/qmgr/system, error/QMGR/yourqmgr. Did you look at SYSLOG on the Broker machine. The EVENTLOG on the Config machine? bobbee From: tony madden [EMAIL PROTECTED] Reply-To: MQSeries List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: WMQI - BIP2066E for all execution groups Date: Sun, 8 Jun 2003 07:29:29 + All of a sudden, WMQI isn't working for me. Every time I deploy, I get BIP2066E (Configuration Timeout). This even occurs with a broker with empty Execution Groups and with no Message Sets. As a last resort, I have re-installed WMQI (v2.1 CSD 4) and defined a configmgr and a broker. I added the broker to the topology, but when I deploy the topology I get BIP2066E for the $SYS_mqsi Execution Group. I assume this is a system Execution Group? I tried adding an Execution Group called EG1 and deploying, and get a similar result - three BIP2066E error, one each for the $SYS_mqsi, default and EG1 Execution Groups. The Windows Event Viewer shows 3 DataFlowEngines, so the broker is starting the Execution Groups, but the Execution Groups aren't responding to commands. There are no MQ or DB2 errors. Has anyone else seen anything like this? Setup: WMQI v2.1 CSD4, W2k,DB2 cheers Tony _ Stay in touch with absent friends - get MSN Messenger http://www.msn.co.uk/messenger Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive _ Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive _ Tired of 56k? Get a FREE BT Broadband connection http://www.msn.co.uk/specials/btbroadband Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: 2 different broker databases
Paul, Is it possible to run 2 brokers (on AIX in this case) at the same time with one broker using DB2 and the other using Oracle for its permanent store database? I'm on WMQI 2.1 if that matters. Yes, it is. When we migrated our brokers from DB2 to Oracle, we was using two parallel brokers in test phase. HTH, Tibor Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: wmqi deploy question
Tony, AFAIK, ConfigMgr stores msgflow msgset data to BLOB fields in XML format. In this view, a deploy from its database not a 'traditional' SQL SELECT - even more a transactional text processing. Moreover stored and deployed format is different. We are working on 3 NT box and I highly recommend you a dual processor server rather than a double speed single processor (this is coming from my observation, not a performance test) HTH, Tibor Hello. I've got an NT box - 1 G memory and approx 1GHz chip - with a WMQI v2.1 configmgr on it (not a broker). We have a total of about 100 flows. Deploys take anything from 4 to 15 minutes, with the NT box maxed out on CPU for all of that time. We have seen delta deploys of single flows (which do not have child or parent flows) take upwards of 10 minutes. Nothing else uses the NT box. What could the configmgr possibly be doing that uses up that much CPU? Memory usage is minimal (20%). cheers Tony _ Express yourself with cool emoticons http://messenger.msn.co.uk Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Backing Up Services in NT
You have no chance :-( the best way is a 'create script' as Darry wrote, because all of MQ properties is stored in registry. HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configuration\Services\qmgr This is unofficial, but you can make a 'hacking', just backup this subtree and restore when needed. regedit /e filename regkey Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configuration\Services\BTX] InstanceID=1025699765 [HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configuration\Services\BTX\Channel Initiator] Startup=dword:0001 ServiceType=dword:0001 RecAction=dword:0001 RecDelay=dword:0001 RecAttempts=dword:0003 Hide=dword:0001 InitQueue=SYSTEM.CHANNEL.INITQ [HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configuration\Services\BTX\Command Server] Startup=dword:0001 RecAction=dword:0001 ServiceType=dword:0002 RecDelay=dword:0001 RecAttempts=dword:0003 [HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configuration\Services\BTX\Listener] Startup=dword:0001 ServiceType=dword:0003 RecAction=dword:0001 RecDelay=dword:0001 RecAttempts=dword:0003 Protocol=dword:0002 Port=dword:0586 Hide=dword:0001 [HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configuration\Services\BTX\Queue Manager] RecAction=dword:0001 ServiceType=dword:0004 RecDelay=dword:0001 RecAttempts=dword:0003 Tibor I guess I am looking for a way to export the current configuration first. -Original Message- From: Gorse, Darry [mailto:[EMAIL PROTECTED] Sent: Monday, March 03, 2003 11:47 AM To: [EMAIL PROTECTED] Subject: Re: Backing Up Services in NT I don't know if there is a formal support pac or utility but I have used the amqmdain command in a bat file to recreate MQ services. Here is a sample, you just need to modify it to your needs. Cheers, Darry -Original Message- From: De Seve, David [mailto:[EMAIL PROTECTED] Sent: Monday, March 03, 2003 9:41 AM To: [EMAIL PROTECTED] Subject: Backing Up Services in NT Does anybody know a utility for backing-up/restoring MQ Services in NT so that I don't have to recreate them from scratch after I delete/recreate a queue manager? Thanks Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Backing up MQSeries for DR.
amqoamd -m qmgr -s Tibor I appologize for the time difference between threads dates... Thought I had this DR stuff down until thinking about security and OAM. All of this stuff is persisted on the QMgr. Has anyone thought about how one would save the queue backing the OAM... I believe the SYSTEM.AUTH.DATA.QUEUE. I recall asking IBM for the structure of this queue and was promptly told that it was proprietary. I don't think the message format is rocket science... Any thoughts? Maybe an RFE to the MS03 support pack to save some queue stuff. Thanks in advance, -B Brian Bumpass Wachovia Bank E-Channels [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Query on compatibility of MQSI2.0.2 with MQ5.3
On Windows we had problems upgrading, had to apply CSD01 to overcome We had, too, but a specific upgrade problem was discovered: if I start the official v5.3 pack (e.g. MQ53Server_Win32.exe) this unpack itself and start the MSI file. And Installer roll back often the upgrade process at the end of upgrade process. BUT when I run the unpacked installer package, it is working fine :-) OK, that wasn't ordinary (so 30%) but very interesting Tibor On Windows we had problems upgrading, had to apply CSD01 to overcome -Original Message- From: Seshasayee Nalamati , Tidel Park - Chennai [mailto:[EMAIL PROTECTED]] Sent: Friday, 21 February 2003 4:27 PM To: [EMAIL PROTECTED] Subject: Query on compatibility of MQSI2.0.2 with MQ5.3 Dear MQers A quick question for all . I am trying to migrate the MQ on our box from 5.2 to 5.3 We are running MQSI 2.0.2 and MQ Series WorkFlow (which will be upgraded to WMQI soon afterwards) Has anyone experienced any issues with MQSI2.0.2 over MQ5.3 or is it really worthwhile to do it . Are all the libraries for MQ5.2 still available in 5.3 (The readme for 5.3 doesnt give all these changes) Any help is greatly appreciated Best Regards Sesha Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Data Conversion Problem on Sun Solaris with European Characters
Andrea, If you're working with R3Link try setting an environment variable to disable any conversion on gateway: PATH_TO_CODEPAGE=NONE HTH, Tibor We are currently experiencing a problem with the translation of certain European characters once they've gone through the MQSeries routines. The file is created by a SAP/R3 application on a Windows NT 4 server and is transferred to a Sun Solaris using a MQSeries V5.2 queue manager on the NT server and MQSeries V5.2 client on the Sun Solaris V2.8 server. Routines on the Sun are written with the conversion get option included. Several characters are represented incorrectly. For instance, umlauts are translated into back slashes. We thought perhaps it was an OS problem, however if we ftp the same file from NT to Unix, the data displays correctly. Has anyone else encountered this problem and if so, how did you resolve it? Or perhaps there is a solution in MQS Server V5.3? Thanks in advance, Andrea Dorsey MQSeries Support Timken Company ** This message and any attachments are intended for the individual or entity named above. If you are not the intended recipient, please do not forward, copy, print, use or disclose this communication to others; also please notify the sender by replying to this message, and then delete it from your system. The Timken Company ** Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Compaq True64 Unix V5.1
Hi mqm, For your first question, we are using the last MQ version (v5.1) on 3 Tru64 box. Queue managers is working fine and stable. $ uname -a OSF1 monaxp2 V5.1 732 alpha Second issue seems very hard, 'cause I heard a lot of rumor (it is/was the last release, maybe... but I'm waiting for all official denial). Tibor IBM MQSeries (sorry can't bring myself to call it WebsphereMQ) website says IBM MQSeries for Compaq Tru64 UNIX, Version 5 Release 1 requires Compaq Tru64 UNIX V4.0F or V5.0 operating system. Anyone know if it runs on V5.1 of True64. Also, anyone know if/when MQ5.2 or 5.3 will be supported on True64. mqm __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Wish list for Conference
1. the new, eclipse-based GUI for MQSI. I hope this will contents almost my (and Peter's) wishes. 2. a new concept in user management of UserNameServer - own users instead opsys users. But I think this is coming from MQ object authority handling, so it seems only a pipedream 3. a straight declaration about the future of MQ on Alpha platform (DEC / Compaq / HP Tru64 Unix) Tibor I wish. 1.) The OTMA Bridge would honor the Request message's Expiry when it builds the Reply message. 2.) There was a property on the MQInput node where you could specify the minimum size MQSI would make the message buffer. MQSI could increase the size above this value if it had to, but it would never drop below the user specified minimum. 3.) A second pair of Reply2Queue / Reply2QueueManager fields in the MQMD. This would allow me to have my replies come to queue1 and my report messages go to queue2. This would also allow me to stick MQSI in between 2 apps and still have all the apps simply reply to the reply 2 info. Currently, MQSI has to strip the original reply2info, replace it with its own, and then replace the original again on the way back. In the meantime, it has to store the original reply info in a database. (Adding this info in a message header or relying on a queue instead of a database have their own issues) 4.) A super remote queue def. Currently, a remote queue def has only 1 destination Q / QM / XMIT queue associated with it. There is no way to administratively have your app start putting to 2 or more queues on the fly. You have to either change the app to do multiple puts, change the app to use a dist list, or insert MQSI and have it split the message. A super-remote-queue-def would allow us to add 1 or more queue / queue manager / xmits to the original def. Instantly, you can fan your message out to other queues (additional destinations, a logging queue, etc). 5.)For the WMQI editor, it would be nice to not only have a search function but something that will match up your IF/ELSE/END IF's and WHILE/END CASE/ENDS, etc. I used to work with FOXPRO and it had this feature where it would do this so you could see if they were mismatched or missing. It would be even more helpful now that we have combined the majority of our code in one flow into one compute node and we now have over 4000 lines of code. 6.)One of the WMQI developers here was saying they would like the ability to check, IF field NUMERIC. Today we have to go through byte for byte and check for '0','1','2','3','4','5','6','7','8','9'. 7.)Someone also brought up DATE FUNCTIONS, such as GREG to JUL and back for WMQI. 8.)QPASA figured out how to give GUI capability to mainframe, why not MQExplorer. Also, MQJExplorer by Neil Kolban is great in that it doesn't require a local QM. 9.) (This may be unpopular) : Make the MQ certifications more relevant by requiring periodic retesting. 10.) Channel Tables for JAVA clients. Peter Potkay -Original Message- From: Peter Heggie [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 22, 2003 11:17 AM To: [EMAIL PROTECTED] Subject: Wish list for Conference Anyone want to throw in an item or two they would like to see included or changed in future releases of WMQ ? Someone can give this to Mr Jones on Wednesday or earlier.. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: WMQI V2.1 Control Center Question
I wrote a little script, but this is only working with cygwin (or another posix shell). If any expert can re-write it as a CMD script, just do it... #!/usr/bin/bash # # start mqsi CC with specific Panes.ini file # lcc.sh env tracelevel tracelogsize # if [ `ps -efW | grep -i mqsi.Tool.bin.java | wc -l` -eq 0 ]; then LASTCONN=`grep RepoQueue Panes.ini | cut -d'=' -f2` cp Panes.ini Panes.$LASTCONN.ini if [[ /$1 != / -f Panes.$1.ini ]]; then cp Panes.$1.ini Panes.ini fi $SYSTEMROOT/system32/cmd /c mqsilcc.bat $2 $3 else echo CC is already running! (ENTER) read fi I placed this file (lcc.sh) into directory mqsi\Tool. Tibor Sort of yes, but, it's pretty brutal. I had the same issue, and raised the question with Hursley. This information is stored in a file \tool\panes.ini. One option was that a person could write a script to edit this file and remove some of the lines before starting the control center, forcing the connection dialog. But it was pretty messy figuring out what to remove. Instead, the other option that they suggested was to just delete the file. This does force the connection dialog, but it also removes the graphical information associated with the control center as well as your repository information. Which gave me more problems then it solved. I requested that they make the displaying of the connection dialog at startup either an option or a feature of the product, but, am not holding my breath on that. Tim Halbur -Original Message- From: Hornby, Derek [mailto:[EMAIL PROTECTED]] Sent: Friday, January 17, 2003 1:29 PM To: [EMAIL PROTECTED] Subject: WMQI V2.1 Control Center Question ... is there a way of forcing Control Center to always request connection info when connecting to a remote config manager (instead of just connecting to the last config manager it was used with) ? ... that way, I could avoid the scenario where someone opens up Control Center, sees the Topology in the Config Manager, thinks they are in Dev. , then deletes a few unwanted brokers then --- oops, finds that they were connected to a Prod Config Manager ! forcing the entry of the Connection info every time would at least cause the user to stop and think ! Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: SSL performance evaluation
So three months ago I made a simple performance test with amqsblst. I connected two local qmgrs on Win2K and I sent messages in difference size (1*1 KB, 10*1 MB) w/ and wo/ SSL. My observations was next: - significant slowing on small messages (50%) - minimal difference in performance on large messages (10%) I was thinking about the reasons: - firstly, SSL handshake is an overhead, similarly other protocols (like MCA handshake, TCP, and so on) - slowing caused by the special environment (2 local queue manager). In this case same box had been loaded with crypto tasks. Tibor KK, Not sure if you're looking for W2K performance numbers or not since you didn't start the thread with W2K in the subject line. I know that there are currently z/OS figures published in the Performance Support Pac MP16 on the cost of starting SSL channels and also the cost of transmitting data as a cost per K of data. These might be of interest to you. I'll see if I can find out about other platforms and will post another message later if I find anything published that you can go and look at. Cheers Morag Morag Hughson WebSphere MQ for z/OS Development Internet: [EMAIL PROTECTED] K K hkmqseries@hotmaTo: Morag Hughson/UK/IBM@IBMGB il.com cc: MQSeries List [EMAIL PROTECTED] Subject: Re: Re: MQ v5.3 and SSL W2K 09/01/2003 15:01 I would like to know where there is an performance evaluation on the overhead of using SSL on MQV5.3. Besides, any experience on the usage of SSL on MQ (e.g. stability, overhead, concerns etc) in particular on the comparison with other MQ encryption tool such as MQSecure or 'Data Secure'. KK - Original Message - From: Morag Hughson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 09, 2003 6:33 PM Subject: Re: MQ v5.3 and SSL W2K To echo a few responses already, yes, you can certainly have SSL and non-SSL channel coexisting on the same queue manager since the attributes to use SSL are specified on a per channel basis. However, you cannot configure SSL as optional on a particular channel and have some SSL and some non-SSL connection coming into the *SAME* channel. You will need a separate channel each for SSL and non-SSL. I think the confusion here might be with the SSLCAUTH parameter where you can specify REQUIRED or OPTIONAL to indicate whether you require client authentication AS WELL AS server authentication. Hope this clarifies the point. Cheers Morag Morag Hughson WebSphere MQ for z/OS Development Internet: [EMAIL PROTECTED] Luc-Michel Demey [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent by: MQSeriescc: List Subject: Re: MQ v5.3 and SSL W2K MQSERIES@AKH-WIE N.AC.AT 08/01/2003 21:32 Please respond to lmd_listmq in one word, yes. SSL is defined at channel level, not at qmgr level You can even configure SSL as optionnal for a channel, so SSL and no-SSL partners will be able to connect. Useful in a migrating phase probably. HTH, Luc-Michel. Date sent: Wed, 8 Jan 2003 13:10:41 -0800 Send reply to: MQSeries List [EMAIL PROTECTED] From: Nick Dilauro [EMAIL PROTECTED] Subject:MQ v5.3 and SSL W2K To: [EMAIL PROTECTED] I have been reviewing the requirements for using SSL with client to server connections. From my reading I understand the qmgr must be configured to point to the repository file containing digital certificates. Then a server connection channel must be defined with the SSL settings. My question is whether it is also possible to have non-SSL server connection channels defined for an SSL configured qmgr. In other words, could there be both secure server conn and non-secure server conn channels supported by the same qmgr? TIA Nick Nicholas C. DiLauro MQSeries Administrator Technical Services IBM Certified Specialist - MQSeries IBM Certified Developer - MQSeries QRS Corporation 1400 Marina Way South, MS 231 Richmond, California 94804 510 231 6544 Voice 510 621 6544 Fax [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Regards, Luc-Michel Demey, [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Eclipse
A snippet from Transaction Messaging Conference's Agenda: (http://www-3.ibm.com/services/learning/conf/us/t_m/t_m_agenda_sessions.pdf) M42 WMQI Solution Studio - A Preview In December 2002 IBM shipped a technical preview of WMQI Solution Studio, the eagerly anticipated new graphical AD tooling for WebSphere MQ Integrator. Based on the Eclipse open framework adopted for all WebSphere AD tools, the WMQI Solution Studio is a complete overhaul of the existing WMQI tooling with loads of new features and improvements, such as support for external repositories and versioning, an XML Schema based message model, new mapping editor, fully fledged ESQL editor, RAD support, configurable deployment, an ESQL debugger and a new Broker Administration Console. This session covers all these new features backed up by demos. Some experience of developing WMQI V2 applications is recommended. Tibor Quoting Jeff A Tressler [EMAIL PROTECTED]: I have heard that MQSeries will be using the Eclipse development environment. Anyone have an idea on when this will be? Is there a site with more information? Jeff Tressler Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: File in use when applying MQSeries W2K 5.2.1 CSD3 - amqxcs2.dll
Matt, Anyone is looking the system events with Event Viewer? Tibor I am having a problem attempting to apply CSD3 to MQSeries W2K 5.2.1. I am getting a file in use error on amqxcs2.dll. I have had similar problems in the past, with other CSD's which I have always been able to circumvent by: 1) switching the MQSeries startup to manual 2) rebooting 3) apply CSD - knowing that no MQSeries files should be in use because MQSeries has not run since the server has been rebooted However my normal method is not working. Does anyone have any ideas, or any information on what might be using amqxcs2.dll. Thanks in advance, Matt Gurney Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: BITSTREAM changes between MQSI version 2.0.2 and 2.1
Look this topic: http://www.mqseries.net/phpBB2/viewtopic.php?t=6536highlight=pq%2A There is a regression in WMQIv2.1 CSD03 with the BITSTREAM function. The symptoms match what you have described here in that BITSTREAM(Root) and BITSTREAM(InputRoot) evaluate to X''. There is an efix avaliable for WMQIv2.1 CSD03 on all platforms under the defect (APAR) number PQ66348. Suggest you contact your IBM support team for this. HTH, Tibor In WMQI CSD3 the BITSTREAM functionality was broken. I believe this has been addressed and will be corrected in the next release. The ASBITREAM function though not documented yet - does work. If you need further assistance please contact me. Cheers Kevin Kevin Tobin Senior IT Specialist IBM WebSphere Services Asia Pacific Level 9, 601 Pacific Hwy, St Leonards, Sydney NSW 2000 Phone: +61 2 947-88249 Fax: +61 2 947-88467 Mobile0421-052-812 - International : +61 421-052-812 e-Mail:[EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Exporting a flow from WMQI for promotion/version control purposes .
John, I have looked at the IC01 support pack, but this seems to want me to export all the flows to a single file and then use mqsifiltermsgflows multiple times to split out each distinct flow in the single export file. IC01 *can* export a single message flow! just you should to set parameters correctly, like: mqsiexportmsgflows.bat -m Test-1 You are right, sub-flows is included this file, but not *ALL* message flows will be exported. Tibor When I export a flow from WMQI that uses sub-flows, the dependant sub-flow(s) get exported into the file also. Is there any way I can export each flow to a separate file without each export containing all the dependant sub-flows? I want to check each of these as separate files into a version control system. We give the short description as $Id$ which gets expanded on committing into version control. When this file is then imported back into the config manager, the sub-flows have the wrong version stamp. I have looked at the IC01 support pack, but this seems to want me to export all the flows to a single file and then use mqsifiltermsgflows multiple times to split out each distinct flow in the single export file. This is tedious, unless I write a splitter script to do it. However, this means we have lots of multiple scripts all over the place and it requires the promoter of code to remember to export the correct set of flows to a single file so that the splitter script can break them up successfully. How do other people promote code from the development? Regards John. ** Click here to visit the Argos home page http://www.argos.co.uk The information contained in this message or any of its attachments may be privileged and confidential, and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you are not the intended addressee, any disclosure, reproduction, distribution, dissemination or use of this communication is not authorised. If you have received this message in error, please advise the sender by using your reply facility in youe e-mail software. All messages sent and received by Argos Ltd are monitored for virus, high risk file extensions, and inappropriate content. As a result users should be aware that mail maybe accessed. ** Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Webshere Integrator V2.1 - how do I tell what database a broker is attached to...
this command is working all platforms: mqsiservice brokername ... and reading the registry directory. Tibor he install MQSI directory for a directory called registory down in there you will find all sorst of nce information!! From: Dennis Bryngelson [EMAIL PROTECTED] Reply-To: MQSeries List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Webshere Integrator V2.1 - how do I tell what database a broker is attached to... Date: Mon, 25 Nov 2002 16:22:24 -0600 1) We are running V2.1 broker on Solaris8. How do I tell what database a broker is attached to and what the database userid was set to AFTER an mqsicreatebroker has been done? 2) Is the database that is accessed in a compute the same database that is set in the mqsicreatebroker command -n setting? Thanks, Dennis Bryngelson Phone: (763) 765-4224 Fax: (763) 765-3820 mailto:[EMAIL PROTECTED] * PRIVILEGED AND CONFIDENTIAL: This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential and/or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this communication and destroy all copies. * Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive _ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Websphere 5.3
Edward, Yes, it's possible, BUT... we had already upgraded 7 servers (WinNT and Win2000), but I'm not happy, because 5 upgrade was unsuccessful. There was sporadic problems: corrupting queue managers, internal errors, etc. So I recommended a re-install, like Mike wrote, especially on WinNT. This is not platform-dependent: I had to re-install MQ on AIX, because there was a symlink confusing in the /usr/lib. HTH, Tibor Hello, Is it possible to upgrade from MQ 5.2.1 to Websphere MQ 5.3? Or should I do an uninstall of 5.2.1 and an install of 5.3? Edward Pius. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: LSX and WMQ of NT 5.3
Jim, ... It's fine for IBM to say just use Java, ... Just a question: MQv53 is _really_ working with Lotus Notes' embeddded JVM? AFAIK, Notes JVM is on level 1.1.8, but MQ Java API supported the version 1.3.0 or above. So how can a Notes developer work with MQv53? Tibor I'm also interested in this. It's fine for IBM to say just use Java, but we've got LSX programmers, not Java programmers. I don't care how similar the languages are, some of these people are guaranteed to be befuddled by any change. Any at all. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
RFH2 + automatic segmentation sends 2195
We are working on large messages with automatic segmentation without any problem - up to now :-(. Developing a new functionality, an RFH2 header, caused RC_UNEXPECTED_ERROR (2195). BUT when I tried same with manual segmentation, working fine. (first message got a Format MQFMT_RF_HEADER_2, 2nd and later MQFMT_NONE). Moreover, when I set MQMD.Format to MQFMT_NONE, errors pass away. We was running this code on MQv5.3 (WinNT, Win2K, AIX) and MQv5.2 (Win2K) but result was same. Any ideas? Tibor Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Security issues with WMQI and Control Center
Does anybody know if the use of SSL channels is supported by WMQI at the moment? If not, does anybody know if there are plans to support SSL channels in the (near) future? WMQI communication is entirely MQ based, so SSL channels are working transparently, similar to a message exit. So this is only an MQ administrative task and independent from WMQI. Tibor Hi, the security 'hole' between the Java control center (WMQI) and the configuration manager has been discussed before. The suggested solution for this issue is the use of channel-exits. However, with the 5.3 release of MQSeries, SSL was introduced, which can be used to build a trust relation between the control center and the configuration manager. By using the SSL connection as authentication between machines, in my point of view, the need for channel-exits would no longer exist. Does anybody know if the use of SSL channels is supported by WMQI at the moment? If not, does anybody know if there are plans to support SSL channels in the (near) future? Met vriendelijke groet / Regards, Ard van der Leeuw Belastingdienst/Centrum voor ICT Continuiteit Generieke Infrastructuren Netwerk- en gedistribueerde services Tel: 055 528 3011 Mob: 06 28846008 -- De Belastingdienst gebruikt e-mail niet voor officiele mededelingen. == Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQGMO_SET_SIGNAL for waiting on multiple events
Set signal is an OS390 feature ...and Tandem... Tibor From: Anupama Vaid [EMAIL PROTECTED] A question for Win 2000 MQSeries v 5.1 I would like to wait on Multiple events while also waiting for messages on a queue. Can this be done using MQGMO_SET_SIGNAL on Win 2000 and if yes, then how? Thanks, Anupama Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: SSL tutorial
Kevin, If your system will reject the Java application then please let me know and I will not include it in the distribution. Our mail servers won't reject packaged attachment, so you can feel free to send me. Regards, Tibor Tibor Bors MQ/MQSI Consultant Matav Rt. Hungary PS: I've just got your mail, thanks all! Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQSeries for UNIX, MQSeries for Linux, GUI Available ?
Roberto, Try the famous MQJExplorer, a Java based MQExplorer clone. http://www.kolban.com/mqjexplorer Tibor Anyone know if MQ has some graphic interface on UNIX and LINUX or all still are command-line style, start, stop display, etc ? MQExplorer for KDE ?, something like that ?, Third part GUIs? Thank you. --- Roberto Oscar Sanchez - Arquitecto de Sistemas Centrales Banco Galicia - Gerencia de Sistemas - Arquitectura Corporativa Peron 525 - Piso 8 - C1038AAK - 54-11-6329-5349 Buenos Aires - Argentina - [EMAIL PROTECTED] --- Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQSI CSDs
Robert, A faster and browser-free site: ftp://ftp.software.ibm.com/software/mqseries/fixes/wmqiv21/ Tibor -Original Message- From: Robert Broderick [mailto:[EMAIL PROTECTED]] Sent: Sunday, August 25, 2002 6:48 PM To: [EMAIL PROTECTED] Subject: MQSI CSDs Anybody got the URL for the Integrator Csd downoad page?? bb _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive _ Send and receive Hotmail on your mobile device: http://mobile.msn.com Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQ R/3 Link
Rao, This is a 'normal' entry in file SMQERR01.LOG, not a warning or error. Just you (or anyone) sent a message thru R3Link, but EDI_DC40.docnum field (IDOC number) was filled with blanks. Tibor Hi, When i try to send inbound IDoc to SAP i am hitting below error. --- 06/18/02 16:59:27 SMQ4174: Inbound IDoc number received from queue. EXPLANATION: None ACTION: None. Anybody encountered this before, and let me know what i am missing here. thanks in advance Regards Rao Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
