| Author |
Message |
 Topic: setmqaut - invalid group |
longnguk
Replies: 14
Views: 11604
|
 Forum: IBM MQ Security Posted: Sat May 31, 2014 10:01 am Subject: setmqaut - invalid group |
...However when you explicitly reference the domain the security stanza should not be needed.
Have fun 
In my experience, the Security stanza is needed just as the documentation indica ... |
| Topic: setmqaut - invalid group |
longnguk
Replies: 14
Views: 11604
|
Forum: IBM MQ Security Posted: Fri May 30, 2014 4:41 pm Subject: setmqaut - invalid group |
You will need to update the qm.ini file to include support for Domain groups
Security:
GroupModel=GlobalGroups
By default the support is not enabled hence the error message! |
| Topic: QM(SSL)-->MQIPT(SSL)-->QM |
longnguk
Replies: 9
Views: 9704
|
Forum: IBM MQ Security Posted: Sat May 24, 2014 7:25 am Subject: QM(SSL)-->MQIPT(SSL)-->QM |
Hi,
We discovered that the new version of IPT is stricter when checking SSL certificates than MQ. Or you could argue MQ is slopier however you want to look at it. We had to add the following extend ... |
| Topic: AMS - MCA Interceptor, which keystore.conf to use? |
longnguk
Replies: 16
Views: 22051
|
Forum: General IBM MQ Support Posted: Tue May 20, 2014 1:34 pm Subject: AMS - MCA Interceptor, which keystore.conf to use? |
...For Windows, I have not found out the default location for it yet...
Bearing in mind it's the home directory on UNIX, what about the %HOMEPATH% variable in Windows?
Well, it's not quite that st ... |
| Topic: AMS - MCA Interceptor, which keystore.conf to use? |
longnguk
Replies: 16
Views: 22051
|
Forum: General IBM MQ Support Posted: Tue May 20, 2014 1:15 pm Subject: AMS - MCA Interceptor, which keystore.conf to use? |
If you want to use MCA Intercept you might be interested in this customer experience on exactly that was presented at IMPACT 2014.
http://www.slideshare.net/MoragHughson/websphere-mq-ams
Regardi ... |
| Topic: AMS - MCA Interceptor, which keystore.conf to use? |
longnguk
Replies: 16
Views: 22051
|
Forum: General IBM MQ Support Posted: Tue May 20, 2014 10:37 am Subject: AMS - MCA Interceptor, which keystore.conf to use? |
| ...On the other hand I don't know what kind of latency this potentially introduces with the SSL store being at the endpoint and not at the server, and having to be fetched from the sever... :innocent ... |
| Topic: AMS - MCA Interceptor, which keystore.conf to use? |
longnguk
Replies: 16
Views: 22051
|
Forum: General IBM MQ Support Posted: Thu May 01, 2014 7:43 am Subject: AMS - MCA Interceptor, which keystore.conf to use? |
Can you confirm that CHLAUTH is not the reason for your 2035 Reason code?
Did you first try without setting up SSL for the channel? If you did set up SSL for the channel have you verified that SSL ... |
| Topic: MOT Authorized mqrc 2035 on cluster Q |
longnguk
Replies: 4
Views: 3858
|
Forum: General IBM MQ Support Posted: Wed Apr 30, 2014 5:45 pm Subject: MOT Authorized mqrc 2035 on cluster Q |
Typically, you would get more details about the error in the error log, e.g. in v7.5 you would see the error indicates what authority is expected e.g. put/get/inq authority etc.
With AMS in the mix ... |
| Topic: AMS - MCA Interceptor, which keystore.conf to use? |
longnguk
Replies: 16
Views: 22051
|
Forum: General IBM MQ Support Posted: Wed Apr 30, 2014 5:39 pm Subject: AMS - MCA Interceptor, which keystore.conf to use? |
We are trying to implement a solution using AMS MCA Interceptor and adapting the suggested http://pic.dhe.ibm.com/infocenter/wmqv7/v7r5/topic/com.ibm.mq.sec.doc/q014780_.htm.
The link does not ind ... |
| Topic: Viewing accounting and statistics data in MBX |
longnguk
Replies: 15
Views: 10109
|
Forum: WebSphere Message Broker (ACE) Support Posted: Thu Feb 27, 2014 2:02 pm Subject: Viewing accounting and statistics data in MBX |
Just stumble on this one and I totally agree that it's not acceptable to have to leave the system wide open just to be able to use its statistics capability.
On the other hand, I try the capability ... |
| Topic: Can JMS client use SSL CMS keystores via means of CCDT? |
longnguk
Replies: 4
Views: 4914
|
Forum: IBM MQ Security Posted: Mon Aug 05, 2013 6:00 pm Subject: Can JMS client use SSL CMS keystores via means of CCDT? |
Thanks everyone, I really appreciate your inputs, especially to fjb_saper, I was really in need of a confirmation and you provided it, in regard to my original question;-:
Maybe I am a bit over-cauti ... |
| Topic: Can JMS client use SSL CMS keystores via means of CCDT? |
longnguk
Replies: 4
Views: 4914
|
Forum: IBM MQ Security Posted: Sun Aug 04, 2013 9:26 am Subject: Can JMS client use SSL CMS keystores via means of CCDT? |
Sadly you cannot use a CMS keystore with Java... (you could but it deviates enough from the standard JKS that nobody bothers...)
So you just copy your CMS client store to JKS (using ikeyman) and you' ... |
| Topic: Can JMS client use SSL CMS keystores via means of CCDT? |
longnguk
Replies: 4
Views: 4914
|
Forum: IBM MQ Security Posted: Sat Aug 03, 2013 8:14 am Subject: Can JMS client use SSL CMS keystores via means of CCDT? |
Can JMS client use SSL CMS keystores via means of CCDT or the client still needs to use JSSE JKS?
I am hoping somebody may be able to tell me if that is possible,
Here's my scenario:
Configur ... |
| Topic: Parsing a BLOB as MRM |
longnguk
Replies: 3
Views: 3503
|
Forum: WebSphere Message Broker (ACE) Support Posted: Fri Aug 18, 2006 7:54 pm Subject: Parsing a BLOB as MRM |
| Have you considered using RCD node to make WMB doing the hard work for you? |
| Topic: How to ignore special char in XML |
longnguk
Replies: 10
Views: 12397
|
Forum: WebSphere Message Broker (ACE) Support Posted: Fri Aug 18, 2006 9:08 am Subject: How to ignore special char in XML |
| Thank you, Kim, the explanation makes sense. On the other hand, it begs a question about efficiency, i.e. the message tree is re-constructed everytime it enters a new node as opposed to the re-constru ... |
