| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
| What UserID started a queue manager on Linux? |
« View previous topic :: View next topic » |
| Author |
Message
|
| rekarm01 |
 Posted: Sat Sep 08, 2012 2:58 pm Post subject: Re: What UserID started a queue manager on Linux? |
 |
|
Grand Master
Joined: 25 Jun 2008
Posts: 1415
|
| RogerLacroix wrote: |
| I never said anything about the customer having multiple versions of MQ installed. |
Neither did anyone else. But if the one installed MQ instance is non-primary, it seems possible that that could explain the discrepancy regarding 1 MQ trace file showing LD_LIBRARY_PATH being set (albeit not quite correctly) and another where it is NULL. ... Or not.
After also reading the MQ listserv thread to fill in some of the missing pieces of the puzzle, it's clearer now what the security exit is trying to use LD_LIBRARY_PATH for. The problem is that the security exit should not depend on LD_LIBRARY_PATH in the first place; Linux offers much more suitable options for resolving external library references at runtime.
Other listserv subscribers have already explained how to inspect running processes for the real/effective user/group ids and environment variables; with that and a PMR, it should be fairly straightforward to narrow down where, how, and why the LD_LIBRARY_PATH is getting lost. So, good luck with that. |
|
| Back to top |
|
 |
| RogerLacroix |
| Posted: Sun Sep 09, 2012 5:23 pm Post subject: Re: What UserID started a queue manager on Linux? |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| rekarm01 wrote: |
| it seems possible that that could explain the discrepancy regarding 1 MQ trace file showing LD_LIBRARY_PATH being set (albeit not quite correctly) and another where it is NULL. |
Can I get what you are smoking. 
All trace files except for 1 shows the LD_LIBRARY_PATH is set CORRECTLY. 1 trace file has LD_LIBRARY_PATH is set to NULL.
I do not know where you get off saying "albeit not quite correctly".
| rekarm01 wrote: |
| it's clearer now what the security exit is trying to use LD_LIBRARY_PATH for. The problem is that the security exit should not depend on LD_LIBRARY_PATH in the first place; |
Technically speaking, the security exit is NOT using the LD_LIBRARY_PATH but rather it is simply making 3rd party API calls. Linux is resolving those 3rd party API calls by using the LD_LIBRARY_PATH to find the required 3rd party shared library.
| rekarm01 wrote: |
| Linux offers much more suitable options for resolving external library references at runtime. |
Well, what is it? Be specific.
| rekarm01 wrote: |
| Other listserv subscribers have already explained how to inspect running processes for the real/effective user/group ids and environment variables; |
And that information was sent to the customer and I am waiting for a reply.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| rekarm01 |
| Posted: Tue Sep 11, 2012 12:39 am Post subject: Re: What UserID started a queue manager on Linux? |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 1415
|
| RogerLacroix wrote: |
| Can I get what you are smoking. |
No.
| RogerLacroix wrote: |
| I do not know where you get off saying "albeit not quite correctly". |
There are too many colons. For a more detailed explanation, ask someone else.
| RogerLacroix wrote: |
| Technically speaking, the security exit ... is simply making 3rd party API calls. Linux is resolving those 3rd party API calls by using the LD_LIBRARY_PATH ... |
Linux uses LD_LIBRARY_PATH for more than just that. For a more detailed explanation, ask someone else.
| RogerLacroix wrote: |
| Well, what is it? Be specific. |
There are other linker options available. For a more detailed explanation, ask someone else. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Tue Sep 11, 2012 9:09 am Post subject: Re: What UserID started a queue manager on Linux? |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| RogerLacroix wrote: |
| Code: |
LD_LIBRARY_PATH=/var/mqm/exits64:$LD_LIBRARY_PATH
export LD_LIBRARY_PATH |
|
| RogerLacroix wrote: |
| Code: |
--{ xcsGetEnv
xcsGetEnv[LD_LIBRARY_PATH] = '/var/mqm/exits64:'
--} xcsGetEnv rc=OK |
|
| rekarm01 wrote: |
| RogerLacroix wrote: |
| I do not know where you get off saying "albeit not quite correctly". |
There are too many colons. |
On Linux (and Unix), the user separates each path by using a single colon ":". A trailing colon does not affect how the kernel will use the environment variable.
| rekarm01 wrote: |
| For a more detailed explanation, ask someone else. |
| rekarm01 wrote: |
| For a more detailed explanation, ask someone else. |
| rekarm01 wrote: |
| For a more detailed explanation, ask someone else. |
Well, why didn't you say you were one of those guys who likes to hear themselves speak!!!! If I had known that, I would have completely ignored your first post and not been aggravated by your nonsense.
mqseries.net is a forum for technical people who actually make an attempt at solving their own problem(s) first then post here when they get stumped by some gotcha. There are lots of helpful members here that post real technical answers to questions. i.e. I have been a member of mqseries.net since it was started in 2001 and have posted a large number of technical answers to people's questions over the years.
Now, most of my questions are generally off the deep-end because I work within the bowels of MQ across 12 different platforms and there are very few people outside of those MQ people at Hursley that can answer my questions (but I do post here because you never know who knows what!!).
If you do not have a proper technical response that answers someone's question, then why are you posting? It is not like you get a prize if you make "x" number of postings.
Please refrain from anymore irrelevant postings.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Sep 11, 2012 9:44 am Post subject: Re: What UserID started a queue manager on Linux? |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9475
Location: US: west coast, almost. Otherwise, enroute.
|
| rekarm01 wrote: |
| For a more detailed explanation, ask someone else. |
Childish reply. 
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| rekarm01 |
| Posted: Wed Sep 12, 2012 11:52 pm Post subject: Re: What UserID started a queue manager on Linux? |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 1415
|
| bruce2359 wrote: |
| Childish reply. |
Ok. Unprofessional comments are no excuse for an unprofessional reply. Mea culpa. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Tue Sep 18, 2012 3:56 pm Post subject: Re: What UserID started a queue manager on Linux? |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| rekarm01 wrote: |
| Unprofessional comments are no excuse |
Interesting how people's brain works. I only made 2 posting directed at you (rekarm01) before you made your "unprofessional reply" and neither of my posting were unprofessional.
Secondly, I would have absolutely no problem clearly stating those 2 posting (plus the 3rd one) in PERSON. Are you going to any IBM conference in the near future (i.e. WebSphere Technical Convention or Impact), as I have no problem discussing this in person.
Finally, besides mqseries.net, I belong to many forums/discussion group and I use my REAL name not an anonymous UserID like you do. I also put my real name in my posting. I checked a bunch of your posting and you never include your name. Funny, how some people will not stand behind their postings.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Tue Sep 18, 2012 4:09 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
All,
Back to the real problem, still no luck in figuring out what MQ is doing under the covers. The customer has opened a PMR with IBM and we are waiting to hear back from IBM.
In an interesting twist, I don't think the customer is going to put much effort into this because they just got 2 new servers to put each queue manager on. So, unless the problem shows up with the new queue managers on the new servers, the problem will probably get kicked to the curb. 
Given that MQAUSX has been around for more than 7 years (and its used with thousands of queue managers) and this is the first time I have seen this issue, I'm left scratching my head.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| nathanw |
| Posted: Wed Sep 19, 2012 1:37 am Post subject: |
|
|
Knight
Joined: 14 Jul 2004
Posts: 550
|
Roger the fact that no one seems to have seen this before or the fact that it is not happening everywhere makes me think that this is local environment type issue.
As you say perhaps with the new servers etc this will disappear, however, I would monitor how they set up their servers so that if it does happen the resolution is a lot easier
Good luck
_________________
Who is General Failure and why is he reading my hard drive?
Artificial Intelligence stands no chance against Natural Stupidity.
Only the User Trace Speaks The Truth  |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Wed Sep 19, 2012 11:42 am Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| nathanw wrote: |
| Roger the fact that no one seems to have seen this before or the fact that it is not happening everywhere makes me think that this is local environment type issue. |
I have 7 Linux servers (x86 all the way up to zSeries) for testing and I always use the default shell of Bash. This customer happens to configure their mqm account to use Korn shell. I really don't think it is the shell, especially since the MQ trace files all show LD_LIBRARY_PATH set correctly except for 1, but on the other hand, who knows.
| nathanw wrote: |
| however, I would monitor how they set up their servers so that if it does happen the resolution is a lot easier |
I wish I could but there is zero chance of that (they're 1500 miles away and I'm not onsite).
As a backup plan to the issue, I set the linker to create a hard-coded path in the shared library to where the client LDAP libraries are by default. This is a terrible solution and breaks most programing standards but since this issue is causing the product to look bad, you gotta do, what you gotta do.
For those that are curious, the calling logic goes like this:
MCA (amqrmppa) -> mqausx -> mqausxldap64.so -> client LDAP libraries
MQAUSX supports other 3rd products like Quest Authentication Services and Centrify's DirectControl.
i.e.
MCA (amqrmppa) -> mqausx -> mqausxcdc64.so -> DirectControl libraries
So, getting to the root cause is a really good idea but like I said, it may get kicked to the curb by the customer.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
