| Author |
Message
|
| LMD |
 Posted: Tue Apr 02, 2013 9:59 am Post subject: WebSphere MQ Explorer with SupportPac MS0P : problem |
 |
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
Hello,
I am trying to use the "administration of remote servers" function of the new version of MS0P.
Here is my configuration :
Workstation :
- Windows 7-64
- MS0T version 7.5, fresh install
- MS0P plugin version 7.1.0.3
Serveur :
- 192.168.0.101
- 2008R2 EE
- WMQ 7.5.0.1
I can administrate the 7.5.0.1 Queue Manager from the MQ Explorer on the workstation as usual.
When I clic the "Test" button on the Administrated servers / server properties window, I got immediatly a "Cannot establish session with server 192.168.0.101 using Windows/SMB/TCP".
User / password is ok, user is an admin account on serveur.
Remote Registry service is started on server.
I have tried to disabled windows firewall on both side, no luck.
I have tried to administrate a local server (localhost) from my workstation, no luck.
I have tried the same with a 7.1 MQ Explorer, no luck.
There is no info in both event viewers, no logs, nothing.
I am lost.
Any ideas ?
Thanks in advance !
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion |
|
| Back to top |
|
 |
| Vitor |
| Posted: Tue Apr 02, 2013 11:44 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Have you made the security changes MQ7.5 needs to allow connection, remote administration and so forth?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Apr 02, 2013 12:06 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| Vitor wrote: |
| Have you made the security changes MQ7.5 needs to allow connection, remote administration and so forth? |
 Le modele de permissions pour l'administration a distance a change depuis V 7.1. Par default aucune permission n'est donnee. It fault en consequence d'abord authoriser le canal de communications pour l'administration a distance. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| LMD |
| Posted: Tue Apr 02, 2013 12:58 pm Post subject: |
|
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
I know this.
I am able to reach the Queue Manager thru SVRCONN channel from MQ Explorer.
But what I want to achieve is connect the MQ Explorer to the Win 2008 Server to administrate all Queu Managers running on this host.
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Apr 02, 2013 1:12 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
You know what?
| LMD wrote: |
| I am able to reach the Queue Manager thru SVRCONN channel from MQ Explorer. |
| LMD wrote: |
| But what I want to achieve is connect the MQ Explorer to the Win 2008 Server to administrate all Queu Managers running on this host. |
| LMD wrote: |
There is no info in both event viewers, no logs, nothing.
I am lost. |
Do you mean that there are no error log files at all? No error logs on either client or qmgr platform? Exactly and precisely where did you look?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| LMD |
| Posted: Tue Apr 02, 2013 1:20 pm Post subject: |
|
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
hello,
I am aware about the security changes in MQ 7.1/7.5.
What I want use use here is the new feature from the "SupportPac MS0P: WebSphere MQ Explorer – Extended Management Plug-ins Version 7.1.0.3", page 30 of the MS0P documentation :
| Quote: |
Administration of remote servers
This plug-in provides a mechanism for the MQ Explorer to control queue managers on machines other than the local one. For example, you can now discover, start and stop queue managers from a central console, integrated with the rest of the MQ Explorer tooling. Access to Windows, UNIX and Linux platforms is available from this plug-in. |
AFAIK, this mecanism has nothing to do with channel security.
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Apr 02, 2013 3:24 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| LMD wrote: |
| I am aware about the security changes in MQ 7.1/7.5. |
Are you deliberately being uncooperative and unresponsive here?
OK, you are aware about the security changes. What, if anything, have you done to address these changes?
Also, please respond to my question about errors written to the error log files on both qmgr and client platforms.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| LMD |
| Posted: Tue Apr 02, 2013 10:06 pm Post subject: |
|
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
| bruce2359 wrote: |
| LMD wrote: |
| I am aware about the security changes in MQ 7.1/7.5. |
Are you deliberately being uncooperative and unresponsive here?
OK, you are aware about the security changes. What, if anything, have you done to address these changes?
Also, please respond to my question about errors written to the error log files on both qmgr and client platforms. |
Sorry if I appear uncooperative and unresponsive, it was not my intention.
On the server side, I have lloked to logs in
C:\WMQ750\Qmgrs\LMD75\errors
and
C:\WMQ750\errors
(LMD75 is the name of the QM).
To "address" security changes, I have disabled the Channel Auth parameter of the QM.
On workstation side (MQExplorer with MS0P), no logs in D:\WMQE75 directory (where the MQ Explorer is installed), no logs in D:\WMQE75\dropins\ms0p where MS0P plugin is.
But I am not trying to reach a Queue Manager, I am trying to reach a server using the MS0P Extended Management function.
So setting for remote QM should have nothing to do with this.
Is anybody have been able to use this MS0P Extended Management here ?
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion |
|
| Back to top |
|
|
| markt |
| Posted: Wed Apr 03, 2013 12:21 am Post subject: |
|
|
Knight
Joined: 14 May 2002
Posts: 508
|
I don't have any solution, just some ideas.
Have you looked in the Windows event logs? There might be something there.
I have seen situations where firewalls and related blockers get in the way even when you think they're disabled - they sometimes lie.
How is the userid defined? Is it local? Or part of a doman? Are you using \\domain\userid syntax, or just the base userid? |
|
| Back to top |
|
|
| ramires |
| Posted: Wed Apr 03, 2013 12:38 am Post subject: |
|
|
Knight
Joined: 24 Jun 2001
Posts: 523
Location: Portugal - Lisboa
|
| LMD wrote: |
| Is anybody have been able to use this MS0P Extended Management here ? |
I've just installed it in a box with Win7 with MQ 75 and I can use "Administered Servers" to administer my local qmgrs, using "localhost" in server properties. I've to try with a remote server.
_________________
Obrigado / Thanks you |
|
| Back to top |
|
|
| LMD |
| Posted: Wed Apr 03, 2013 12:53 am Post subject: |
|
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
| markt wrote: |
I don't have any solution, just some ideas.
Have you looked in the Windows event logs? There might be something there.
I have seen situations where firewalls and related blockers get in the way even when you think they're disabled - they sometimes lie.
How is the userid defined? Is it local? Or part of a doman? Are you using \\domain\userid syntax, or just the base userid? |
There is nothing in the event log, both sides.
The userid is local admin on both systems, no AD.
I have tried to disable firewalls on both sides, but I know they can lies.
But there is nothins in firewalls logs.
I will make an other try next night.
Thanks for your support.
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion
Last edited by LMD on Wed Apr 03, 2013 1:00 am; edited 1 time in total |
|
| Back to top |
|
|
| LMD |
| Posted: Wed Apr 03, 2013 12:55 am Post subject: |
|
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
| ramires wrote: |
| LMD wrote: |
| Is anybody have been able to use this MS0P Extended Management here ? |
I've just installed it in a box with Win7 with MQ 75 and I can use "Administered Servers" to administer my local qmgrs, using "localhost" in server properties. I've to try with a remote server. |
Great !
Can you tell me what version of the plugin you are using ?
Version 7.1.0.3 or earlier ?
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion |
|
| Back to top |
|
|
| ramires |
| Posted: Wed Apr 03, 2013 1:01 am Post subject: |
|
|
Knight
Joined: 24 Jun 2001
Posts: 523
Location: Portugal - Lisboa
|
| LMD wrote: |
Can you tell me what version of the plugin you are using ?
Version 7.1.0.3 or earlier ? |
these versions:
MQ Explorer 7.5.0.201206041322 com.ibm.mq.explorer.ui.rcp.product
WebSphere MQ Explorer - Extended Management Plug-ins 7.1.0.2 com.ibm.mq.explorer.ms0p.feature.feature.group
Did you try with localhost as server? |
|
| Back to top |
|
|
| ramires |
| Posted: Wed Apr 03, 2013 1:15 am Post subject: |
|
|
Knight
Joined: 24 Jun 2001
Posts: 523
Location: Portugal - Lisboa
|
I also successfully connected to a Linux box. Didn't have success connecting to a XP box but I believe that's related to windows XP share/permissions/whatever
_________________
Obrigado / Thanks you |
|
| Back to top |
|
|
| LMD |
| Posted: Wed Apr 03, 2013 1:32 am Post subject: |
|
|
Acolyte
Joined: 30 Oct 2002
Posts: 56
Location: Paris - France
|
| ramires wrote: |
| LMD wrote: |
Can you tell me what version of the plugin you are using ?
Version 7.1.0.3 or earlier ? |
these versions:
MQ Explorer 7.5.0.201206041322 com.ibm.mq.explorer.ui.rcp.product
WebSphere MQ Explorer - Extended Management Plug-ins 7.1.0.2 com.ibm.mq.explorer.ms0p.feature.feature.group
Did you try with localhost as server? |
Yes.
But I'am using the 7.1.0.3 plugin.
I will try to find a 7.1.0.2 plugin.
_________________
lmd_at_demey-consulting.fr - http://demey-consulting.fr - Paris, France.
WMQ, WAS & IIB Certified.
#IBMChampion |
|
| Back to top |
|
|
|
|
