| Author |
Message
|
| WMBDEV1 |
 Posted: Thu Apr 16, 2009 4:45 am Post subject: |
 |
|
Sentinel
Joined: 05 Mar 2009
Posts: 888
Location: UK
|
| Vitor wrote: |
Just to underline the point - you do not need a qmgr alias in all situations.
|
I agree with this point. It sounded like the alias was needed in this scenario however hence the orginal question. |
|
| Back to top |
|
 |
| Vitor |
| Posted: Thu Apr 16, 2009 5:06 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| WMBDEV1 wrote: |
| It sounded like the alias was needed in this scenario however hence the orginal question. |
No, the slightly kamakaze poster had already claimed 2 bi-directional queue managers.
But we do only have his word for that. And no information on naming conventions.
_________________
Honesty is the best policy.
Insanity is the best defence.
Last edited by Vitor on Thu Apr 16, 2009 5:07 am; edited 1 time in total |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Apr 16, 2009 5:07 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Vitor wrote: |
| Security is an issue, but the odds of a hacker being able to locate a temp dym queue name fast enough to send a spurious response are reasuringly small. |
But the odds of a hacker being able to manage both queue managers from either one is relatively high. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Apr 16, 2009 5:09 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqjeff wrote: |
| But the odds of a hacker being able to manage both queue managers from either one is relatively high. |
 but 
Restricting admin access to your queue manager (and indeed access generally) is a different issue.
I draw comfort that most hackers trying to get into a queue manager don't have your skills.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Apr 16, 2009 5:11 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Vitor wrote: |
| mqjeff wrote: |
| But the odds of a hacker being able to manage both queue managers from either one is relatively high. |
but
Restricting admin access to your queue manager (and indeed access generally) is a different issue. |
It is not a different issue than "security".
| Quote: |
| I draw comfort that most hackers trying to get into a queue manager don't have your skills. |
Yes, but we also need to worry about well-meaning developers. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Apr 16, 2009 5:14 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqjeff wrote: |
| It is not a different issue than "security". |
Pedantic much? It's a different issue to "how do I create a temporary dynamic remote queue".
| mqjeff wrote: |
| Yes, but we also need to worry about well-meaning developers. |
No. We don't.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| WMBDEV1 |
| Posted: Thu Apr 16, 2009 5:23 am Post subject: |
|
|
Sentinel
Joined: 05 Mar 2009
Posts: 888
Location: UK
|
| Vitor wrote: |
| And no information on naming conventions. |
Exactly.... you were assuming the best practises on these conventions had been followed, I wasnt  |
|
| Back to top |
|
|
| friedl.otto |
| Posted: Thu Apr 16, 2009 5:28 am Post subject: |
|
|
Centurion
Joined: 06 Jul 2007
Posts: 116
|
| Vitor wrote: |
| No. We don't. |
Well ... what exactly does well meaning constitute, because most
corporates are still struggling to understand what developer means. 
| Vitor wrote: |
You only need an alias if:
- you use a different naming convention for xmitqs |
Which we do ...
| Vitor wrote: |
| - you're doing a multi-hop |
Which we don't ...
| Vitor wrote: |
| - you're adding security. |
Adding security? Please explain to an ancient noob!? 
_________________
Here's an idea - don't destroy semaphores unless you're certain of what you're doing!  -- Vitor |
|
| Back to top |
|
|
| friedl.otto |
| Posted: Thu Apr 16, 2009 5:31 am Post subject: |
|
|
Centurion
Joined: 06 Jul 2007
Posts: 116
|
| Vitor wrote: |
| I draw comfort that most hackers trying to get into a queue manager don't have your skills. |
I now need a change of underwear!
_________________
Here's an idea - don't destroy semaphores unless you're certain of what you're doing! -- Vitor |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Apr 16, 2009 5:31 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| friedl.otto wrote: |
| Vitor wrote: |
| No. We don't. |
Well ... what exactly does well meaning constitute, because most
corporates are still struggling to understand what developer means. |
That's why you don't need to worry.
| friedl.otto wrote: |
| Vitor wrote: |
You only need an alias if:
- you use a different naming convention for xmitqs |
Which we do ... |
So you do need an alias and now know why best practice is to use the queue manager name.
| friedl.otto wrote: |
| Vitor wrote: |
| - you're adding security. |
Adding security? Please explain to an ancient noob!? |
See mqjeff above.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| friedl.otto |
| Posted: Thu Apr 16, 2009 5:56 am Post subject: |
|
|
Centurion
Joined: 06 Jul 2007
Posts: 116
|
| Vitor wrote: |
| So you do need an alias and now know why best practice is to use the queue manager name. |
Yeah Yeah ... WHATEVER! 
_________________
Here's an idea - don't destroy semaphores unless you're certain of what you're doing! -- Vitor |
|
| Back to top |
|
|
|
|
