| Author |
Message
|
| raj429 |
 Posted: Tue Aug 18, 2009 6:41 pm Post subject: Can MQ explorer be installed on MQ client |
 |
|
Acolyte
Joined: 04 Jul 2009
Posts: 53
|
HI
I just want to understand can I install MQ explorer (windows xp) as a supportpac on my MQ client?
This idea came to me, when I saw one of the response given in below thread
http://www.mqseries.net/phpBB2/viewtopic.php?t=49887
if that is possible, i can to view all my related qmgrs statistics for myself. Dont need to approach MQadmin for every now and then?
I will share my understanding after experimenting it but wanted to check if anyone already had hands on on this type of monitoring? |
|
| Back to top |
|
 |
| AkankshA |
| Posted: Tue Aug 18, 2009 8:42 pm Post subject: |
|
|
Grand Master
Joined: 12 Jan 2006
Posts: 1494
Location: Singapore
|
did you check the pre req for the support pack??
check the read me..
ideally yes you should be able to do so.. however i am not sure what all is packed with MQExplorer as a support pack
_________________
Cheers |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Aug 18, 2009 9:53 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
It's available as the MS0T SupportPac, as AkankshA has already stated, but I don't think your Admins will be happy for you to poke around in queue managers without their nod - I wouldn't be.
Approach them on a friendly basis and discuss it with them, make a case for it, but be prepared for them to lock it down to read-only mode.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Aug 19, 2009 3:49 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Everything you need to connect to a remote queue manager should be included.
Except for the channel you'll need on the queue manager to connect. Which your admins have hopefully secured to prevent any random person with access the network port of the listener from getting anonymous administrative access. |
|
| Back to top |
|
|
| Sam Uppu |
| Posted: Wed Aug 19, 2009 10:48 am Post subject: |
|
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
It depends on the environment, type of data and your companies security policies etc.
Your admin should have closed all the default channels if you are dealing in a secured environment.
If there are any PCI compiants, you will be caught in stealing the data.
I should say, you better work with the MQ Admin and his team to get their blessings.
Thanks. |
|
| Back to top |
|
|
| raj429 |
| Posted: Thu Aug 20, 2009 1:03 pm Post subject: |
|
|
Acolyte
Joined: 04 Jul 2009
Posts: 53
|
Sorry guys for the above miscoception....
actually I am a member of MQadmin.
when I proposed the above thought to my seniors(MQ admins too), as a solution to Application teams frequent queries on queue statistics...They ruled it out saying MQexplorer read access privileges is not possible to our environment.
I learned a lesson that, as MQ admin I should not lend alter privileges of mq objects to any other team. if other team comes up with a justifiable reason, then should look around for a solution with as much less privileges as possible.
| Quote: |
be prepared for them to lock it down to read-only mode.
|
So we have initiated perl scripts with view querying access to MQ objects...these will be given to few special case app teams.
And here is some information of MQ explorer supportpac
As said by exerk MQ explorer supportpac(MS0T) is available for free and below is the link to it...
http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg24021041
"It does not need to be deployed with a WebSphere MQ client or server, and you can install as many copies as required. " this is an excerpt from the document present in the above link.
thanks all for your suggestions... |
|
| Back to top |
|
|
| Sam Uppu |
| Posted: Thu Aug 20, 2009 1:59 pm Post subject: |
|
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
I would say MQExplorer should only used by MQAdmins and not to the developers.
If you want to give the MQExplorer to developers, allow them to use only in Dev and lock down all the upper level environments. |
|
| Back to top |
|
|
| exerk |
| Posted: Thu Aug 20, 2009 2:06 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
There is a very useful article HERE in regard to using MQExplorer in read-only mode.
| Sam Uppu wrote: |
| ...when I proposed the above thought to my seniors(MQ admins too), as a solution to Application teams frequent queries on queue statistics...They ruled it out saying MQexplorer read access privileges is not possible to our environment. |
What was their justification?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Aug 20, 2009 8:01 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
In that case you might have some more luck with MO71 which allows quite a granular control. Add to that the right mq security setup and you should satisfy your paranoid admins. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| raj429 |
| Posted: Sun Aug 23, 2009 7:05 am Post subject: |
|
|
Acolyte
Joined: 04 Jul 2009
Posts: 53
|
Hmm...let me first say about my environment a bit...
we are serving a financial institution and MQ has been customized to client specification standards.
This environment is huge and we are using the customized authorization to MQ, not the IBM supplied OAM.
Database servers are assisting in maintaining authorizations to MQobjects (I am with little clue of this way setup).
Keeping our environment setup and client tools policy in view, we can't go ahead with MQ explorer here. |
|
| Back to top |
|
|
|
|
