| Author |
Message
|
| jeevan |
 Posted: Fri Dec 18, 2009 3:23 pm Post subject: (SOLVED)Problem in configuring MO71 with ssl enabled channel |
 |
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
I am back to mo71 in my new job. I , in fact, have not used MO71 that much ever. But when I used it, I did without SSL and I do not rememer having any problem. But wow, I have to connect through a SSL enabled channel and I am having problem connecting to qmgr.
I provided, channel name, connection name, SSL cipher Spec, and SSL Repository location. I am getting queue manager not available 2059 error. Not sure what I missed.
I also did not find any log so seems little bit difficult to find what it is complaining about. However, I know kind of it is complainign about SSL. I can tell this because when I do not give ssl cipher, it gives another error, (RC2393): MQRC_SSL_INITIALIZATION_ERROR.
I would appreciate any help.
Last edited by jeevan on Mon Dec 21, 2009 11:52 am; edited 2 times in total |
|
| Back to top |
|
 |
| Y.S.R |
| Posted: Fri Dec 18, 2009 9:41 pm Post subject: |
|
|
Newbie
Joined: 14 Oct 2009
Posts: 9
|
| Why you configuring MO71 with SSl....It's only a tool for admins to browse MQ. Correct me if i'm wrong. |
|
| Back to top |
|
|
| exerk |
| Posted: Sat Dec 19, 2009 2:06 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| Y.S.R wrote: |
| Why you configuring MO71 with SSl....It's only a tool for admins to browse MQ. Correct me if i'm wrong. |
It may be '...only a tool for admins to browse MQ...', in fact it is a lot more powerful than that, but as with any other channel if you don't lock it down it will be open to the world. That said, SSL is only part of the lock-down.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| jeevan |
| Posted: Sat Dec 19, 2009 3:51 am Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| exerk wrote: |
| Y.S.R wrote: |
| Why you configuring MO71 with SSl....It's only a tool for admins to browse MQ. Correct me if i'm wrong. |
It may be '...only a tool for admins to browse MQ...', in fact it is a lot more powerful than that, but as with any other channel if you don't lock it down it will be open to the world. That said, SSL is only part of the lock-down. |
In fact, in my current job, they use it a lot for almost everything, copying message, moving poison msg, and more.
But my question is not should it use SSL or not, my question is I am having problem in connecting mo71 to a qmgr. what could be problem or missing ?
Last edited by jeevan on Sun Dec 20, 2009 4:17 am; edited 1 time in total |
|
| Back to top |
|
|
| Y.S.R |
| Posted: Sat Dec 19, 2009 4:05 pm Post subject: |
|
|
Newbie
Joined: 14 Oct 2009
Posts: 9
|
| Can you provide the steps followed in setting up SSL? |
|
| Back to top |
|
|
| jeevan |
| Posted: Sat Dec 19, 2009 4:17 pm Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| Y.S.R wrote: |
| Can you provide the steps followed in setting up SSL? |
SSL is working correctly as MQ Explorer is working okay using SSL( same channel I am trying to connect mo71). But I could not connect mo71 with SSL enabled channel. That is my problem not setting up SSL.
thanks |
|
| Back to top |
|
|
| mqjeff |
| Posted: Sat Dec 19, 2009 6:41 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
MQ Explorer is written in Java.
M071 is written in C. |
|
| Back to top |
|
|
| jeevan |
| Posted: Sun Dec 20, 2009 3:29 am Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| mqjeff wrote: |
MQ Explorer is written in Java.
M071 is written in C. |
I have two different sslrepositories files; one for MQexplorere which is .jks and another for c client app such as mo71 which is .kdb. What else? |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Sun Dec 20, 2009 6:09 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| jeevan wrote: |
SSL is working correctly as MQ Explorer is working okay using SSL( same channel I am trying to connect mo71). |
Does this channel have an MCAUSER value set? If yes, does that ID have all the setmqaut rights it needs for MO71, which are not exactly the same as MQ Explorer? If no MCAUSER value set, does YOUR ID have these rights?
Using the same channel for 2 or more apps is never a good idea.
Create a new channel specifically for MO71, get it working without SSL, then add SSL.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| jeevan |
| Posted: Sun Dec 20, 2009 7:56 am Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| PeterPotkay wrote: |
| jeevan wrote: |
SSL is working correctly as MQ Explorer is working okay using SSL( same channel I am trying to connect mo71). |
Does this channel have an MCAUSER value set? If yes, does that ID have all the setmqaut rights it needs for MO71, which are not exactly the same as MQ Explorer? If no MCAUSER value set, does YOUR ID have these rights?
Using the same channel for 2 or more apps is never a good idea.
Create a new channel specifically for MO71, get it working without SSL, then add SSL. |
Yes, we have mcauser setup and has all necessary permission.
I am thinking the same line. But I was trying in production so I can not just create another channel( even I can technically, I dun like to do ). But eventually, I will do that in dev and see I can do that. then I will move into the prod.
Thanks |
|
| Back to top |
|
|
| jeevan |
| Posted: Mon Dec 21, 2009 11:51 am Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
I was mistaken some reasons. I have just installed MQclient. As I read:
Once the MQMONNTP program is in the path it can be run just by typing ‘MQMONNTP’ on the command line. No further set-up at this point is required. The program will dynamically load either the WebSphere MQ client or WebSphere MQ Queue Manager libraries as required. Note that to successfully connect to a Queue Manager at least one of these WebSphere MQ products must be installed. The windows WebSphere MQ client is available for free download at:-
http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg24009961&loc=en_US&cs=utf-8&lang=en2
Once I installled full MQ, it worked. I am not sure whether my understand was wrong or whether what is specified was not correct. Anyway, it sowkring now once I installed full MQ 7.X
It was nothing to do with SSL.
Thanks for all your input. |
|
| Back to top |
|
|
|
|
