| Author |
Message
|
| Slave |
 Posted: Fri Mar 05, 2010 3:25 am Post subject: Is there any use the WMQ ESE? |
 |
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
Hi, friends
Is there any use the WMQ ESE?
Suggest me please how I can add remote queue manager to TAMBI protected space? |
|
| Back to top |
|
 |
| Vitor |
| Posted: Fri Mar 05, 2010 6:29 am Post subject: Re: Is there any use the WMQ ESE? |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Slave wrote: |
| Is there any use the WMQ ESE? |
Yes, if you want additional security features not provided by the base product.
| Slave wrote: |
| Suggest me please how I can add remote queue manager to TAMBI protected space? |
What have you tried? What went wrong? What does the documentation say?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Slave |
| Posted: Mon Mar 08, 2010 2:50 am Post subject: Re: Is there any use the WMQ ESE? |
|
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
| Vitor wrote: |
| Slave wrote: |
| Suggest me please how I can add remote queue manager to TAMBI protected space? |
What have you tried? What went wrong? What does the documentation say? |
Actually, I have installed WMQ ESE v5.1.1.6.. But I have only local Queue manager connected to TAMBI protected space. Documentations say nothing as far as I know. But I may have missed something..
I need an add remote queue manager to TAMBI protected space.. But I don't know the procedure how to do it.. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Mar 08, 2010 8:19 am Post subject: Re: Is there any use the WMQ ESE? |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| Slave wrote: |
| I need an add remote queue manager to TAMBI protected space.. But I don't know the procedure how to do it.. |
I am sure there is a how to somewhere in the doc.  try and let us know. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Slave |
| Posted: Mon Mar 08, 2010 4:18 pm Post subject: Re: Is there any use the WMQ ESE? |
|
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
| fjb_saper wrote: |
| Slave wrote: |
| I need an add remote queue manager to TAMBI protected space.. But I don't know the procedure how to do it.. |
I am sure there is a how to somewhere in the doc. try and let us know. |
well, well, well....
as I wrote above:
| Slave wrote: |
| Actually, I have installed WMQ ESE v5.1.1.6.. But I have only local Queue manager connected to TAMBI protected space. |
I wrote about the possibility of adding only local queue manager to protected space..
I had read the Documentations... but Admin Gude for TAMBI v5.1.1.6 say nothing about my question.. ("as far as I know" - had been added on the safe side  )...
as for my first part of question, I some missed.. I would like to say: have an anybody usage TABMI for MQ security for your business?
| fjb_saper wrote: |
| I am sure there is a how to somewhere in the doc. try and let us know. |
Please advise me where? in this case somewhere is nowhere.. |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Mar 09, 2010 12:05 am Post subject: Re: Is there any use the WMQ ESE? |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| Slave wrote: |
| fjb_saper wrote: |
| I am sure there is a how to somewhere in the doc. try and let us know. |
Please advise me where? in this case somewhere is nowhere.. |
Have you word-searched the document on the keyword 'remote'?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| Slave |
| Posted: Tue Mar 09, 2010 2:28 am Post subject: Re: Is there any use the WMQ ESE? |
|
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
| exerk wrote: |
| Slave wrote: |
| fjb_saper wrote: |
| I am sure there is a how to somewhere in the doc. try and let us know. |
Please advise me where? in this case somewhere is nowhere.. |
Have you word-searched the document on the keyword 'remote'? |
Please search yourself know-all..
Please read my post above more carefully.. I wrote that the TAMBI Admin Guide hasn't any information about adding remote queue managers to TAMBI protected space.. As I know the Admin Guide is the main document about product.. But I had the google-word-search too..
I have a questions to person who have the installed TAMBI..
Actually I understand that TAMBI( WMQ ESE) is never used in the world.. |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Mar 09, 2010 2:36 am Post subject: Re: Is there any use the WMQ ESE? |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| Slave wrote: |
| ...Please search yourself know-all.. . |
More than happy to; please post the the link to where I can download the manual, and I'll have a look. I haven't used ESE yet, but I am familiar with IBM documentation and have been 'bitten' before where I've looked for something and not found it because I was looking for the 'wrong' thing. It's why I asked if you'd word-searched...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| Slave |
| Posted: Tue Mar 09, 2010 2:53 am Post subject: |
|
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
|
| Back to top |
|
|
| exerk |
| Posted: Tue Mar 09, 2010 3:39 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
So, did THIS not work?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| Slave |
| Posted: Tue Mar 09, 2010 4:18 am Post subject: |
|
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
| exerk wrote: |
| So, did THIS not work? |
Thanks! I'm really grateful! But this is the process to add local queue managers to protected space...  |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Mar 09, 2010 4:22 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
So (and bear with me here because I'm on a learning curve with no previous reference points) it can't 'spider' out via a Tivoli Agent to queue managers within the 'domain'?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| Slave |
| Posted: Tue Mar 09, 2010 6:19 am Post subject: |
|
|
Novice
Joined: 13 Sep 2007
Posts: 13
|
| exerk wrote: |
| So (and bear with me here because I'm on a learning curve with no previous reference points) it can't 'spider' out via a Tivoli Agent to queue managers within the 'domain'? |
If I had to get right you talk about adding various queue managers to different Domains? It is no true because the term "Domain" is attribute to IDS( IBM Directory Server) which incorporate many users for grant access to TAMBI objects..
We have a command:
pdmqsvrcfg -action add -qm QM_TEST ....
which scanned file systems to find MQ Objects and put them into TAM protected space.. this command cannot find remote queue objects.. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Mar 09, 2010 2:13 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
From what you are telling us, I think you are going about this the wrong way.
You should add a local qmgr to a share TAMBI protected space between multiple hosts. So each host that has a qmgr is part of the same TAMBI Domain... Then you add the local qmgr on each host to that domain.
Note that I have absolutely no experience with the product, and am just looking at the problem in a different way...
Have fun
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Tue Mar 09, 2010 3:19 pm Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
| Slave wrote: |
| exerk wrote: |
| So (and bear with me here because I'm on a learning curve with no previous reference points) it can't 'spider' out via a Tivoli Agent to queue managers within the 'domain'? |
If I had to get right you talk about adding various queue managers to different Domains? It is no true because the term "Domain" is attribute to IDS( IBM Directory Server) which incorporate many users for grant access to TAMBI objects..
We have a command:
pdmqsvrcfg -action add -qm QM_TEST ....
which scanned file systems to find MQ Objects and put them into TAM protected space.. this command cannot find remote queue objects.. |
this section talks about all queue types local, remote, model, alias http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itamfbi.doc_5.1/ADM51mst81.htm
you talk about remote queue managers and remote queues those are totally different things, so please let us know what you are talking about.
as far as I know the PDMQ deamons must run on the machine the queue manager is on so from that perspective a Queue Manager must always be local to TAMBI agent.
with all security needs you are just 'ahead' of us and get to deal with the product, consider yourself priviliged and we can 'help' each other this way 
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
|
|
