MQSeries.net :: View topic - how to restrict access to server connection channel

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » how to restrict access to server connection channel

how to restrict access to server connection channel

« View previous topic :: View next topic »

Author

Message

srinivas Raju

Posted: Sun Jun 24, 2007 9:50 pm Post subject: how to restrict access to server connection channel

Novice

Joined: 20 Feb 2007
Posts: 22
Location: India

Hai all

i have QMGR with server connection channel running in AIX server.
and one java client application puts messages in that.

but here i found that just by knowing IP address of server any other client could access server connection channel of that QMGR and able to put messages also. but it should not occur in my solution.

How can i restrict access to server connection channel from other clients.

i gone through SSL and security exits. but i have little confusion, because those are speaking about SSL certificates and all.

could you provide detailed procedure to do it?

Thanks for your time
regards

Raju

oz1ccg

Posted: Sun Jun 24, 2007 10:01 pm Post subject:

Yatiri

Joined: 10 Feb 2002
Posts: 628
Location: Denmark

Hi Raju,

I'm trying to keep track of some interesting links here:
http://mrmq.dk/links.htm
If you scroll a bit down, there is a couple of SSL Links there. I hope that you might find it usefull.

There are various articles on this SSL topic, I've just listed a couple:
http://www-128.ibm.com/developerworks/websphere/library/techarticles/0510_fehners/0510_fehners.html
http://www.kolban.com/mq/Security/SSL.pdf
http://www-1.ibm.com/support/docview.wss?fdoc=aimwmq&rs=171&uid=swg21255795
http://www-1.ibm.com/support/docview.wss?uid=swg24006696

And when you're saying Security exits; I know some:
BlockIP2: http://mrmq.dk/BlockIP2.htm
SupportPac MS0R: http://http://www-1.ibm.com/support/docview.wss?uid=swg24015658

http://www.capitalware.biz/mqssx_overview.html
http://www.capitalware.biz/mqausx_overview.html

-- Lock it or Lose it --

_________________
Regards, JÃ¸rgen
Home of BlockIP2, the last free MQ Security exit ver. 3.00
Cert. on WMQ, WBIMB, SWIFT.

Vitor

Posted: Mon Jun 25, 2007 12:05 am Post subject: Re: how to restrict access to server connection channel

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

srinivas Raju wrote:

How can i restrict access to server connection channel from other clients.

You've very much answered your own question:

srinivas Raju wrote:

i gone through SSL and security exits.

These are the methods you need to apply.
_________________
Honesty is the best policy.
Insanity is the best defence.

srinivas Raju

Posted: Mon Jun 25, 2007 2:10 am Post subject: how to restrict access to server connection channel

Novice

Joined: 20 Feb 2007
Posts: 22
Location: India

ya Mr. Jorgen

http://mrmq.dk/links.htm
i have gone through above link. and i got detailed procedure.

but while inmlementing i getting problems. let me explain what i did.

i have downloaded BlockIP2 and i copied file(BlockIP2) in /var/mqm/exits/

then i have altered server connection channel as floows

alter channel(SYSTEM.ADMIN.SVRCONN) chltype(SVRCONN) SCYDATA('10.1.54.*') scyexit('BlockIP2(BlockExit)')

this is given in site. here 10.1.54.* is my LAN ips . then i am trying to put messages in QMGR, it's giving return code

MQJE001: An MQException occurred: Completion Code 2, Reason 2009
MQJE016: MQ queue manager closed channel immediately during connect
Closure reason = 2009

please do it for me.

thanks for ur time
raju

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » how to restrict access to server connection channel

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP