Author |
Message
|
George Carey |
Posted: Thu Dec 31, 2009 9:26 am Post subject: Linux MQ Explorer(strmqcfg) |
|
|
Knight
Joined: 29 Jan 2007 Posts: 500 Location: DC
|
Looking for the best way to get MQ Explorer for Linux working.
Here is the twist:
The linux MQ Server with Eclipse MQ Explorer is a remote network server. I need the GUI screen shipped back to the glass on my Window platform.
I have used X-windows for GUI screen exports in past(not done in a while now) but screen behavior was always less then satisfactory ... and have not done it with Eclipse MQ Explorer.
Any one done this with satisfactory results ... recommendations ... cheat sheet for environment variable setups, etc.
Nothing about this in MQ info center or manuals that I have seen yet.
TIA,
GTC _________________ "Truth is ... grasping the virtually unconditioned",
Bernard F. Lonergan S.J.
(from book titled "Insight" subtitled "A Study of Human Understanding")
Last edited by George Carey on Thu Dec 31, 2009 9:37 am; edited 1 time in total |
|
Back to top |
|
 |
bruce2359 |
Posted: Thu Dec 31, 2009 9:34 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
I need the GUI screen shipped back to the glass on my Window platform. |
I'm a bit confused...
Why don't you use the WMQ Explorer on your Windows platform to admin your Linux queue managers? _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
George Carey |
Posted: Thu Dec 31, 2009 9:41 am Post subject: Why not use windows? |
|
|
Knight
Joined: 29 Jan 2007 Posts: 500 Location: DC
|
I knew that was coming .... it is a restrictive security environment and many hoops are needing to be jumped through to make that(install MQ on Window box) happen which I am trying to avoid. (it may end up being the way to go but am trying to avoid it). _________________ "Truth is ... grasping the virtually unconditioned",
Bernard F. Lonergan S.J.
(from book titled "Insight" subtitled "A Study of Human Understanding") |
|
Back to top |
|
 |
mqjeff |
Posted: Thu Dec 31, 2009 9:52 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
There are a large number of "virtual console" apps that should allow you to do this.
X-windows is one, and there are a few different FREE environments that you can use to host the display on Windows (cygwin, for one).
If your environment does not think that X-windows is secure, then you might remind your security officers that you can tunnel X-windows over SSH.
This is true of other things as well, they can usually be tunneled over ssh or can create an SSL communication of their own.
For X-Windows, you should just be able to use ssh -X to configure the environment on the linux box, and then just strmqcfg& to launch explorer in your local setup.
That requires that your ssh client is running in the local X windows display, but that's dead easy. Again, cygwin is an option here, as is putty and other such. Putty even has a checkbox somewhere in the config for setting the -X flag.
Generally, this is straightforward. If you don't like the performance, then you can evaluate other things, like VNC(?) or etc. But they may have performance issues as well.
If you're in a secured environment, you need to confirm with your security team what kinds of connections they will allow to your desktop in the first place. There may not be *any* way you can do this. |
|
Back to top |
|
 |
Vitor |
Posted: Thu Dec 31, 2009 10:05 am Post subject: Re: Why not use windows? |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
George Carey wrote: |
it is a restrictive security environment and many hoops are needing to be jumped through to make that(install MQ on Window box) happen |
You don't need to install WMQ - all you need is to install the WMQ Explorer support pac. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
bruce2359 |
Posted: Thu Dec 31, 2009 10:30 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
... it is a restrictive security environment and many hoops are needing to be jumped through to make that(install MQ on Window box)... |
The WMQ Explorer AND server software is downloadable for free from IBM, and can be installed on any platform - like my laptop, and the laptops of thousands of potential hackers. This is a well-documented security exposure.
This demands that the platform where queue managers runs - the platform to be administered - be secured. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
George Carey |
Posted: Thu Dec 31, 2009 10:33 am Post subject: Thanks for suggests so far |
|
|
Knight
Joined: 29 Jan 2007 Posts: 500 Location: DC
|
MQ Explorer support pac ...?
Are talking about the MS0T (relatively new support pac -- out of Hursley according to T-Rob I believe).
Have you used it ? ... Any issues/restrictions on functionality for MQ Explorer?
General Pluses and Minues ? ... _________________ "Truth is ... grasping the virtually unconditioned",
Bernard F. Lonergan S.J.
(from book titled "Insight" subtitled "A Study of Human Understanding") |
|
Back to top |
|
 |
bruce2359 |
Posted: Thu Dec 31, 2009 10:40 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
The supportpac is the WMQ Explorer with all its capabilities - as described in the MS0T doc.
Relatively new - Feb 2009. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
bruce2359 |
Posted: Thu Dec 31, 2009 10:44 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
I had this discussion with an auditor at a client site. He was target-locked on ensuring that no instances of the dreaded WMQ Explorer be installed anywhere IN the organization (like under penalty of death).
I slowly and patiently explained that it's freeware, and installable on any Win/Linus platform anywhere in the galaxy. Further, I droned on, you can't secure the entire galaxy; rather, you must focus on your valuable assets (queue managers and career), and secure what and where you can.
Let me add that WMQ Explorer, WMQ server, and WMQ client, are downloadable from IBM. Anyone can download these - for evaluation (wink, wink, wink). _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Last edited by bruce2359 on Thu Dec 31, 2009 10:46 am; edited 1 time in total |
|
Back to top |
|
 |
mvic |
Posted: Thu Dec 31, 2009 10:45 am Post subject: Re: Linux MQ Explorer(strmqcfg) |
|
|
 Jedi
Joined: 09 Mar 2004 Posts: 2080
|
George Carey wrote: |
The linux MQ Server with Eclipse MQ Explorer is a remote network server. I need the GUI screen shipped back to the glass on my Window platform. |
Is the network good? I find X-Windows Gui apps tolerable only over a LAN-quality line. |
|
Back to top |
|
 |
George Carey |
Posted: Thu Dec 31, 2009 10:45 am Post subject: Large Number |
|
|
Knight
Joined: 29 Jan 2007 Posts: 500 Location: DC
|
From Jeff:
Quote: |
There are a large number of "virtual console" apps |
Can you suggest some that might be used on windows. I have used cygwin(X-win for Windows platform basically) it did not exhibit good screen behavior.
Anyone used the MS0T MQExplr support pac enough to offer insight on usage. _________________ "Truth is ... grasping the virtually unconditioned",
Bernard F. Lonergan S.J.
(from book titled "Insight" subtitled "A Study of Human Understanding") |
|
Back to top |
|
 |
bruce2359 |
Posted: Thu Dec 31, 2009 10:48 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
Anyone used the MS0T MQExplr support pac enough to offer insight on usage. |
It allows both remote and local admin of the WMQ environment. It includes creating new qmgrs, new objects, starting and stopping qmgrs - substantially no limitations. It's best benefit is that it's a GUI. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
mqjeff |
Posted: Thu Dec 31, 2009 11:11 am Post subject: Re: Large Number |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
George Carey wrote: |
From Jeff:
Quote: |
There are a large number of "virtual console" apps |
Can you suggest some that might be used on windows. I have used cygwin(X-win for Windows platform basically) it did not exhibit good screen behavior.
Anyone used the MS0T MQExplr support pac enough to offer insight on usage. |
If you can't connect regular MQExplorer, then you can't connect MS0T. If you can't install MQ, then you probably can't install MS0T either...
If you have poor performance with cygwin/X, then you likely have networking issues or local cpu (win machine is too slow!) issues and changing technologies may not help.
A quick Google for "VNC" should give you some options. |
|
Back to top |
|
 |
George Carey |
Posted: Thu Dec 31, 2009 12:01 pm Post subject: MS0T |
|
|
Knight
Joined: 29 Jan 2007 Posts: 500 Location: DC
|
Quote: |
If you can't install MQ, then you probably can't install MS0T either... |
I believe that was the whole reason Hursley came up with MS0T so one could avoid the security exposure of a whole MQ server installation just to have a first level monitoring/admin functionality. _________________ "Truth is ... grasping the virtually unconditioned",
Bernard F. Lonergan S.J.
(from book titled "Insight" subtitled "A Study of Human Understanding") |
|
Back to top |
|
 |
bruce2359 |
Posted: Thu Dec 31, 2009 12:26 pm Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
I believe that was the whole reason Hursley came up with MS0T so one could avoid the security exposure of a whole MQ server installation just to have a first level monitoring/admin functionality. |
No. The purpose of MS0T was to distribute the Explorer without the client and server software. Nothing to do with security. Nothing to do with security exposure. It's just a packaging option.
It's the WMQ queue manager instance that is exposed - not the client and not the Explorer. These are tools used to access the objects and messages on the qmgr.
Think of these like a crescent wrench. Securing one wrench does not protect the car engine (queue manager) from exposure to any other wrench. Similarly, securing a client or Explorer does not secure the queue manager from any other tools. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
|