| Author |
Message
|
| JosephGramig |
 Posted: Wed Feb 19, 2014 7:34 am Post subject: |
 |
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
Step 1, don't ever use any object that starts with the word SYSTEM.*
Step 2:
| Code: |
DEF CHL(SSL.TEST.CLNT) CHLTYPE(SVRCONN) TRPTYPE(TCP) REPLACE
* If CHLAUTH rules are enabled, also add this:
SET CHLAUTH(SSL.TEST.CLNT) +
TYPE(BLOCKUSER) +
USERLIST('nobody') +
ACTION(REPLACE)
|
Try that channel.
Step 3: Secure that channel with SSL and map the cert to an ID |
|
| Back to top |
|
 |
| jalexmichaelraj |
| Posted: Fri Feb 21, 2014 3:03 am Post subject: |
|
|
Novice
Joined: 04 Dec 2013
Posts: 10
|
Thanks Joseph Graming and Vitor.. its working now.. As u said its bcoz of the security problem.. i Turned the channel security off from the MQexplorer itself.. Thanks alot guys..
| JosephGramig wrote: |
Step 1, don't ever use any object that starts with the word SYSTEM.*
Step 2:
| Code: |
DEF CHL(SSL.TEST.CLNT) CHLTYPE(SVRCONN) TRPTYPE(TCP) REPLACE
* If CHLAUTH rules are enabled, also add this:
SET CHLAUTH(SSL.TEST.CLNT) +
TYPE(BLOCKUSER) +
USERLIST('nobody') +
ACTION(REPLACE)
|
Try that channel.
Step 3: Secure that channel with SSL and map the cert to an ID |
|
|
| Back to top |
|
|
| fatherjack |
| Posted: Fri Feb 21, 2014 6:44 am Post subject: |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
The biggest problem with security, and not just WMQ security, is that "it's a bit hard isn't it".
So the OP has employed my favourite security solution, and one that works every time i.e. SWITCH IT OFF.
Perfect!
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Fri Feb 21, 2014 7:57 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
No. None of us recommended or implied that it was a good idea to turn security off. 
I make a living off people who do stuff like this... |
|
| Back to top |
|
|
| fatherjack |
| Posted: Fri Feb 21, 2014 8:06 am Post subject: |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
| JosephGramig wrote: |
No. None of us recommended or implied that it was a good idea to turn security off.
I make a living off people who do stuff like this... |
My tongue was firmly in my cheek.
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Fri Feb 21, 2014 8:31 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
| fatherjack wrote: |
| JosephGramig wrote: |
No. None of us recommended or implied that it was a good idea to turn security off.
I make a living off people who do stuff like this... |
My tongue was firmly in my cheek. |
Don't need to know where your togue has been...  |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Feb 21, 2014 9:30 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| JosephGramig wrote: |
| fatherjack wrote: |
| JosephGramig wrote: |
No. None of us recommended or implied that it was a good idea to turn security off.
I make a living off people who do stuff like this... |
My tongue was firmly in my cheek. |
Don't need to know where your togue has been... |
From your picture, it looks like your tongue was in a light-socket...
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Fri Feb 21, 2014 12:26 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| fatherjack wrote: |
The biggest problem with security, and not just WMQ security, is that "it's a bit hard isn't it".
So the OP has employed my favourite security solution, and one that works every time i.e. SWITCH IT OFF.
Perfect! |
Unfortunately the sarcasm would be missed on the majority of readers here and they would take this literally. Not that any of us have any responsibility to post anything other than anything we want.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| fatherjack |
| Posted: Tue Feb 25, 2014 2:59 pm Post subject: |
|
|
Knight
Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island
|
| PeterPotkay wrote: |
| fatherjack wrote: |
The biggest problem with security, and not just WMQ security, is that "it's a bit hard isn't it".
So the OP has employed my favourite security solution, and one that works every time i.e. SWITCH IT OFF.
Perfect! |
Unfortunately the sarcasm would be missed on the majority of readers here and they would take this literally. Not that any of us have any responsibility to post anything other than anything we want. |
Sorry - you're right. But that's the problem with todays world of emails, blogs. twitterings, etc. You can't add 'intonation' to your posts, other than by adding a really annoying smiley. 
_________________
Never let the facts get in the way of a good theory. |
|
| Back to top |
|
|
|
|
