| Author |
Message
|
| Vitor |
 Posted: Thu Dec 31, 2009 12:26 pm Post subject: Re: MS0T |
 |
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| George Carey wrote: |
| I believe that was the whole reason Hursley came up with MS0T so one could avoid the security exposure of a whole MQ server installation just to have a first level monitoring/admin functionality. |
MS0T is the full Explorer, not just a first level function. It's as much of a "security risk" as the one with the server software, and the same rules apply to setting it up securely.
The reasoning being MS0T AFAIK is it's a clean cut way of getting Explorer without installing a license-requiring server software.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
 |
| PeterPotkay |
| Posted: Thu Dec 31, 2009 12:46 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Being able to create a local QM is another avenue for attacking a remote QM, so in that regard MS0T is slightly more secure than requiring an MQ Server install CD just to get MQ Explorer.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Thu Dec 31, 2009 2:25 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| Being able to create a local QM is another avenue for attacking a remote QM, so in that regard MS0T is slightly more secure than requiring an MQ Server install CD just to get MQ Explorer. |
This is a distinction without a difference.
Vitor is closer with this:
| Quote: |
| The reasoning being MS0T AFAIK is it's a clean cut way of getting Explorer without installing a license-requiring server software. |
All this is downloadable for free (nn-day trial license) from IBM via Mr. Internet.
The valuable asset that needs to be secured is the qmgr, its channels, objects. and messages. For a given qmgr instance, or for an organization, the presence or absence of server- or client-level software (or MS0T) on an install CD is not relevant to security.
I suppose you could observe that the above comprises a distinction without a difference. I'll agree, but only for those qmgrs that remain unsecured.
If the install CD also included network sniffing software, which was also available for free download, would conclude that the downloadable sniffer was more or less secure? I'd say it is just one more artifact that poses a risk. The more or less secure argument is of little or no value to a security discussion - the distinction without a difference.
( My 6-yr old granddaughter is watching over my shoulder, and she want's me to include this smiley. So here goes ) 
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| George Carey |
| Posted: Mon Jan 04, 2010 9:25 am Post subject: Hmmm... |
|
|
Knight
Joined: 29 Jan 2007
Posts: 500
Location: DC
|
Just a packaging option ??
Maybe so, but a considerable effort for just a packaging option ...
_________________
"Truth is ... grasping the virtually unconditioned",
Bernard F. Lonergan S.J.
(from book titled "Insight" subtitled "A Study of Human Understanding") |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Jan 04, 2010 10:49 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Packaging an unlicensed admin tool (and its unlicensed prerequisite - Eclipse) with licensed software seemed odd to many sysadmins.
IBM packaging the Explorer separately was in response to customer request (demand?).
IBM has package tooling. I'd suspect that a check in a checkbox here and there determines the package mix.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| mvic |
| Posted: Mon Jan 04, 2010 10:54 am Post subject: |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| bruce2359 wrote: |
| IBM has package tooling. I'd suspect that a check in a checkbox here and there determines the package mix. |
I don't understand what this means.
It's exactly as you said immediately before this. The explorer comes as a stand-alone download because that's what some customers want. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Jan 04, 2010 11:28 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| IBM has package tooling. I don't understand what this means. |
Sorry. This was in response to George Carey's comment about a considerable effort for just a packaging option ...
Software vendors/distributors usually have automated the process of creating the cd/dvd. They pick from a list of components what to include and what to exclude. So, I can't imagine that creating a standalone Explorer product package was labor-intensive at all.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| bbeardsley |
| Posted: Wed Sep 11, 2013 12:24 pm Post subject: |
|
|
Acolyte
Joined: 17 Dec 2001
Posts: 52
Location: Dallas, TX, USA
|
So, what I am seeing is that no one knows how to get this to work on Linux. Eclipse and MQExplorer are shipped with the linux install. Any tips on getting this to work?
I don't think the original thread wanted a work around, just an answer. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Sep 11, 2013 1:16 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Unless I'm reading the original question wrong, the question was "how do I use X-Windows to have a remote copy of MQExplorer show up on my desktop?"
And I think you just kind of use X-Windows to set the display to your local x-windows server, rather than the x-windows server running on the main linux host.
There's nothing specific to MQExplorer that is different than a normal Eclipse environment in this respect. So if you can ship an Eclipse desktop to a remote X-Windows server, then it'll work exactly the same way for MQExplorer.
I can't give you a better answer, because I've never bothered to try it. I usually just use a local MQExplorer (on windows) to talk to a remote qmgr (on linux) using MQ. Or I use a screen-sharing tool of some kind (remote desktop) to talk to the remote X-Windows server directly.
Again, there's no special switches for MQExplorer. |
|
| Back to top |
|
|
| ourtown |
| Posted: Mon Sep 16, 2013 2:34 am Post subject: |
|
|
Acolyte
Joined: 05 Feb 2002
Posts: 67
Location: Somerset, NJ
|
How to setup X11 forwarding in Putty using Xming
(1) Download and Install Putty on your PC
(2) Download and Install Xming on your PC
(3) Start Xming server
(4) Save the server you want to connect to in Putty in saved sessions
(5) Load the server you want to connect in putty
(6) In the left category pane, click on connections then SSH and then X11.
Check “Enable X11 forwarding” box
Enter “localhost:0” in “X display location box”
strmqcfg & from mqm on Linux
any errors that you get are from the set X display
_________________
Brian S. Crabtree
WBI Consultant |
|
| Back to top |
|
|
|
|
