ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » BlockIP2 Log

Post new topic  Reply to topic
 BlockIP2 Log « View previous topic :: View next topic » 
Author Message
chris boehnke
PostPosted: Thu Oct 29, 2009 12:25 pm    Post subject: BlockIP2 Log Reply with quote

Partisan

Joined: 25 Jul 2006
Posts: 369

All,

We have configured BLOCKIP2 security exit on our solaris machine.

I have defined the rules table to allow access from specific users.

We have more than one queue manager on this server and the svrconn channel names we use are same for all queue managers on this server.

The authorized users are able to connect to the queue managers.

But when I check the BlokIP2 log file, it shows only connection name, userids and channel name.

It doesn't show the Queue manager to which the user got connected.

can any of you let me know how can I get the queue manager name in my logs.

Thanks
Back to top
View user's profile Send private message
zpat
PostPosted: Sat Oct 31, 2009 9:04 am    Post subject: Reply with quote

Jedi Council

Joined: 19 May 2001
Posts: 5866
Location: UK

Other than changing the source code, you could have different BlockIp2 logs for each queue manager. The logfile name is configurable.
Back to top
View user's profile Send private message
SAFraser
PostPosted: Mon Nov 02, 2009 11:07 am    Post subject: Reply with quote

Shaman

Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA

We do as zpat says. We have separate logs for each queue manager.
Back to top
View user's profile Send private message
oz1ccg
PostPosted: Sat Nov 07, 2009 2:28 am    Post subject: Reply with quote

Yatiri

Joined: 10 Feb 2002
Posts: 628
Location: Denmark

This might be a future extension by adding the queue manager name to the log records, or add a qmgr-token instead to prevent the logrecords for growing with 50 bytes in case of of a qmgr-name of 48 characters.

Adding a config-token: QMGR_SHORT_NAME=what_you_want; and
let QMGR_SHORT_NAME=*; Just insert the queue manager name.

INC_QMGR={N|Y}; To include the qmgrname in the log record.

And extend LogFormat= with "M" to put the qmgr name automaticly into the logfile name.
Maybe I'll need a way to shrink the filename length.. Incase someone combine: path+filename+channelname+date+user+queuemanager+extension...

Let me hear what you think.

-- Lock it or lose it --
_________________
Regards, Jørgen
Home of BlockIP2, the last free MQ Security exit ver. 3.00
Cert. on WMQ, WBIMB, SWIFT.
Back to top
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
zpat
PostPosted: Sun Nov 08, 2009 3:29 am    Post subject: Reply with quote

Jedi Council

Joined: 19 May 2001
Posts: 5866
Location: UK

I would like to see the QM name in the log for sure.

Our QM names are fairly short (if you can live with 4 chars on z/OS then surely 8 is enough elsewhere!).
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » BlockIP2 Log
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.