| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| What is the difference in writing a msg to a local vs. clusQ |
« View previous topic :: View next topic » |
| Author |
Message
|
| Sam Uppu |
 Posted: Thu Nov 13, 2008 9:32 am Post subject: What is the difference in writing a msg to a local vs. clusQ |
 |
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
Hi Guys,
We are on MQ version 6.0.2.3 and running on SunOS.
We have 2 QMgrs in a cluster, QMGR1 & QMGR2.
A cluster queue, CLUSQ is defined on QMGR2.
The Java application is connected to the QMGR1 and accessing the cluster queue, CLUSQ to write a message.
The application id is provided with connect+inq permissions on QMGR1 queue manager.
The application is using this code while writing a msg to the cluster queue:
qmgr = new MQQueueManager("QMGR1");
outQ = qmgr.accessQueue("CLUSQ", MQC.MQOO_OUTPUT);
MQPutMessageOptions pmo = new MQPutMessageOptions();
MQMessage toMQ = new MQMessage();
toMQ.format = MQC.MQFMT_STRING;
toMQ.writeString("test");
outQ.put(toMQ, pmo);
outQ.close();
With the above code, the application is able to write the message to a local queue defined on connecting queue manager, QMGR1 but not a cluster queue which is remote to the connecting application.
Please let me know what is the difference is wring a msg to a local queue vs. cluster queue.
Is there any difference in Queue Open options?.
Thanks for your thoughts and suggestions.
Sam. |
|
| Back to top |
|
 |
| Sam Uppu |
| Posted: Thu Nov 13, 2008 9:36 am Post subject: Re: What is the difference in writing a msg to a local vs. c |
|
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
| Sam Uppu wrote: |
Hi Guys,
We are on MQ version 6.0.2.3 and running on SunOS.
We have 2 QMgrs in a cluster, QMGR1 & QMGR2.
A cluster queue, CLUSQ is defined on QMGR2.
The Java application is connected to the QMGR1 and accessing the cluster queue, CLUSQ to write a message.
The application id is provided with connect+inq permissions on QMGR1 queue manager.
The application is using this code while writing a msg to the cluster queue:
qmgr = new MQQueueManager("QMGR1");
outQ = qmgr.accessQueue("CLUSQ", MQC.MQOO_OUTPUT);
MQPutMessageOptions pmo = new MQPutMessageOptions();
MQMessage toMQ = new MQMessage();
toMQ.format = MQC.MQFMT_STRING;
toMQ.writeString("test");
outQ.put(toMQ, pmo);
outQ.close();
With the above code, the application is able to write the message to a local queue defined on connecting queue manager, QMGR1 but not a cluster queue which is remote to the connecting application.
Please let me know what is the difference is wring a msg to a local queue vs. cluster queue.
Is there any difference in Queue Open options?.
Thanks for your thoughts and suggestions.
Sam. |
Forgot to mention the error what the app is getting...the application is getting 2035 error(authorization error).
Thanks |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Nov 13, 2008 9:55 am Post subject: Re: What is the difference in writing a msg to a local vs. c |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Sam Uppu wrote: |
Is there any difference in Queue Open options?.
|
No. Aside from the binding options which are cluster specific but not relevant to your issue.
Does the id being used to put the message have the right authorities on the other queue manager?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Sam Uppu |
| Posted: Thu Nov 13, 2008 10:37 am Post subject: Re: What is the difference in writing a msg to a local vs. c |
|
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
| Vitor wrote: |
| Sam Uppu wrote: |
Is there any difference in Queue Open options?.
|
No. Aside from the binding options which are cluster specific but not relevant to your issue.
Does the id being used to put the message have the right authorities on the other queue manager? |
No. I didn't provide the permissions on the otherside(not provided the permissions on QMgr..QM2 and for the queue, CLUSQ), i.e., on QM2 for the cluster queue CLUSQ. Do we need to provide the permissions on the otherside also?.
The application is connecting vis Binding mode(the application and QMgr are on the same server).
Thanks. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Nov 13, 2008 10:48 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
You need to provide permissions to an object on the local side, that is not the same as the SYSTEM.CLUSTER.TRANSMIT.QUEUE, that provides you an authorization proxy to the correctly scoped objects on the remote side.
If you, instead, provide authorization to the S.C.T.Q, then you have immediately made every queue manager in your cluster insecure and subject to anonymous administration. |
|
| Back to top |
|
|
| Sam Uppu |
| Posted: Thu Nov 13, 2008 11:51 am Post subject: |
|
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
| mqjeff wrote: |
You need to provide permissions to an object on the local side, that is not the same as the SYSTEM.CLUSTER.TRANSMIT.QUEUE, that provides you an authorization proxy to the correctly scoped objects on the remote side.
If you, instead, provide authorization to the S.C.T.Q, then you have immediately made every queue manager in your cluster insecure and subject to anonymous administration. |
We DONT want the user to be part of mqm group and NOT provided the permissions for S.C.T.Q which makes him to access all the cluster queues in that cluster.
How to provide the access to this user(application id) to access his own queues within that cluster?.
Thanks. |
|
| Back to top |
|
|
| xhaxk |
| Posted: Thu Nov 13, 2008 10:42 pm Post subject: |
|
|
Apprentice
Joined: 30 Oct 2008
Posts: 31
|
| create a local alias queue not shared in the cluster, with a targq of the cluster queue, and give the user auth to put to the alias queue |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
