| Author |
Message
|
| Pavan Kumar PNV |
 Posted: Thu Dec 13, 2007 6:01 am Post subject: Track SSL failure attempts |
 |
|
Acolyte
Joined: 03 Feb 2007
Posts: 66
|
I am trying to determine ways to track failure attempts (source IP or other details of the failure attempt) that were made to connect to a queue manager from a SVRCONN channel using SSL from MQ client and from a requester channel using SSL from another queue manager.
_________________
_____________
Pavan Pendyala
http://pavanz.blogspot.com |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Thu Dec 13, 2007 6:27 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Channel exit.
SSL events.
Network logs.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Pavan Kumar PNV |
| Posted: Thu Dec 13, 2007 11:12 pm Post subject: |
|
|
Acolyte
Joined: 03 Feb 2007
Posts: 66
|
I've enabled SSL Events. They just dont seem to give away too much information about the source of failure.
I see error messages like this on the queue manager logs:
AMQ9665: SSL connection closed by remote end of channel '????'.
or
AMQ9636: SSL distinguished name does not match peer name, channel
'SSLTEST.SVRCONN1'.
But is it possible to determine the source IP of the failure from within MQ or do we need to relay on sniffers on the listner ports / Network logs?
_________________
_____________
Pavan Pendyala
http://pavanz.blogspot.com |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Fri Dec 14, 2007 5:37 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
Well, you can install the WS0R Security Exit support pack which will record that information. You will need to read the documentation that is bundled with it...
How are you reading the security events? MS0P?
_________________
Joseph
Administrator - IBM WebSphere MQ (WMQ) V6.0, IBM WebSphere Message Broker (WMB) V6.1 & V6.0
Solution Designer - WMQ V6.0
Solution Developer - WMB V6.1 & V6.0, WMQ V5.3 |
|
| Back to top |
|
|
| Pavan Kumar PNV |
| Posted: Thu May 29, 2008 11:17 pm Post subject: |
|
|
Acolyte
Joined: 03 Feb 2007
Posts: 66
|
|
| Back to top |
|
|
|
|
