| Author |
Message |
 Topic: how to disable priority? |
flaufer
Replies: 7
Views: 4573
|
 Forum: IBM MQ Installation/Configuration Support Posted: Fri Oct 19, 2012 5:57 am Subject: how to disable priority? |
But this is exactly what I want to avoid (alowing customer to put prio 9 on all of their messages because it won't hurt). All customers are equal.
Maybe somebody will figure out that we could cha ... |
| Topic: how to disable priority? |
flaufer
Replies: 7
Views: 4573
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Oct 19, 2012 5:45 am Subject: how to disable priority? |
Changing the local queues to delivery sequence FIFO seems the safest option to me.
If you change your SYSTEM.DEFAULT.LOCAL.QUEUE as well - then any new queues will have that option.
:iagree:
Th ... |
| Topic: how to disable priority? |
flaufer
Replies: 7
Views: 4573
|
Forum: IBM MQ Installation/Configuration Support Posted: Fri Oct 19, 2012 2:07 am Subject: how to disable priority? |
Folks,
I was wondering, if there was a possibility to disable priority on incoming messages...
Scenario:
We have several customers sending us messages. Once they have been handed over to our ... |
| Topic: OAM on ModelQueues and Instances ... |
flaufer
Replies: 1
Views: 2429
|
Forum: IBM MQ Security Posted: Tue Sep 18, 2012 11:38 pm Subject: OAM on ModelQueues and Instances ... |
Folks,
have been doing some research, but I'm not able to find some decent documentation from IBM on this topic.
We have a QMODEL (PERMDYN) defined and privileges granted to the group our applic ... |
| Topic: Client connections and SSL chain |
flaufer
Replies: 15
Views: 9702
|
Forum: IBM MQ Security Posted: Fri Jul 06, 2012 6:16 am Subject: Client connections and SSL chain |
| CAs are used to verify the identity of the holder of the certificate. You either trust them to do that or you do not trust them. You can't choose to trust them for some identities and not for other ... |
| Topic: Client connections and SSL chain |
flaufer
Replies: 15
Views: 9702
|
Forum: IBM MQ Security Posted: Fri Jul 06, 2012 5:56 am Subject: *humm* |
Try open ssl tools in google... :innocent:
Ahmm. yes... thanks. :-)
Didn't help me figure out how to analyze SSL certificate chains that come during session startup and are not stored in my keys ... |
| Topic: Client connections and SSL chain |
flaufer
Replies: 15
Views: 9702
|
Forum: IBM MQ Security Posted: Thu Jul 05, 2012 9:49 pm Subject: but if.... |
| You should know or have an inventory of the certs in your different cert stores... Now all you need to do is delete and replace the expired intermediate certs in there. Certs have a valid until date. ... |
| Topic: just don't get it ... MQExplorer +get on S.A.C.Q? |
flaufer
Replies: 8
Views: 5321
|
Forum: IBM MQ Security Posted: Tue Mar 20, 2012 6:33 am Subject: just don't get it ... MQExplorer +get on S.A.C.Q? |
However, this browse or get is not in the manuals.... ?!?
Shame on my, I thought I've read it thorroughly... but then I maybe overinterpreted a blog post I found.
Thanks,
Felix
What blog po ... |
| Topic: OAM and cluster queues, permissions on ALIASQ or S.C.X.Q |
flaufer
Replies: 6
Views: 6365
|
Forum: IBM MQ Security Posted: Tue Mar 20, 2012 6:00 am Subject: OAM and cluster queues, permissions on ALIASQ or S.C.X.Q |
This is why you should always set an MCAUSER on the Cluster Receiver channels on every queue manager in the cluster, to prevent another machine from sending a message tagged as mqm.
But then, how w ... |
| Topic: just don't get it ... MQExplorer +get on S.A.C.Q? |
flaufer
Replies: 8
Views: 5321
|
Forum: IBM MQ Security Posted: Tue Mar 20, 2012 5:51 am Subject: just don't get it ... MQExplorer +get on S.A.C.Q? |
However, this browse or get is not in the manuals.... ?!?
Shame on my, I thought I've read it thorroughly... but then I maybe overinterpreted a blog post I found.
Thanks,
Felix |
| Topic: OAM and cluster queues, permissions on ALIASQ or S.C.X.Q |
flaufer
Replies: 6
Views: 6365
|
Forum: IBM MQ Security Posted: Tue Mar 20, 2012 5:49 am Subject: way cool! |
This is why you should always set an MCAUSER on the Cluster Receiver channels on every queue manager in the cluster, to prevent another machine from sending a message tagged as mqm.
This is a way c ... |
| Topic: OAM and cluster queues, permissions on ALIASQ or S.C.X.Q |
flaufer
Replies: 6
Views: 6365
|
Forum: IBM MQ Security Posted: Tue Mar 20, 2012 5:30 am Subject: OAM and cluster queues, permissions on ALIASQ or S.C.X.Q |
Folks,
I know that to put security for a putting application on a (remote) cluster queue, you either put an alias queue on the sending queue manager (the QM on which the app runs that wants to put ... |
| Topic: just don't get it ... MQExplorer +get on S.A.C.Q? |
flaufer
Replies: 8
Views: 5321
|
Forum: IBM MQ Security Posted: Tue Mar 20, 2012 5:21 am Subject: SYSTEM.MQEXPLORER.REPLY.MODEL? |
SACQ is used as a model for the replytoqueue.
At least, as I understand it.
Jeff,
wouldn't that be the SYSTEM.MQEXPLORER.REPLY.MODEL queue instead?
Felix |
| Topic: just don't get it ... MQExplorer +get on S.A.C.Q? |
flaufer
Replies: 8
Views: 5321
|
Forum: IBM MQ Security Posted: Mon Mar 19, 2012 11:41 pm Subject: just don't get it ... MQExplorer +get on S.A.C.Q? |
Folks,
I'm reviewing out security and have a section for MQExplorer users and how OAM needs to be set to allow MQExplorer to work. Apart from the usual OAM settings for the objects I want to grant ... |
| Topic: SSL working one way, not the other... |
flaufer
Replies: 4
Views: 4436
|
Forum: IBM MQ Security Posted: Fri Sep 30, 2011 2:31 am Subject: refresh security didn't help |
Jeff,
refresh security type(SSL)?
We did it and it did not help.
Also it is unclear to me, how this could have help since the channel in the one direction was already running (and also should ... |
