| Author |
Message
|
| abhijit_mishra |
 Posted: Mon Oct 12, 2015 7:08 am Post subject: Impact of Refresh security type(authserv) on distributed sys |
 |
|
Apprentice
Joined: 21 Aug 2009
Posts: 35
Location: India
|
Hi All,
I need to understand what impact can a prod MQ server might have when I run a Refresh security type(authserv) on a distributed system (lets say Windows).
I could not find any IBM docs which explains how exactly a refresh authserv really works.
As per IBM "The list of authorizations held internally by the authorization services component is refreshed." So what could be the possible impacts on a prod system and whats would you suggest when we can run this command in production?
Also have anyone faced any real time issue due to a authserv refresh?
Please advise.
Regards,
Abhijit
_________________
All well that ends well. |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Mon Oct 12, 2015 7:14 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Have you considered running some basic performance tests?
Have you considered the impact of the availability of the auth server at the time of refresh?
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
| abhijit_mishra |
| Posted: Mon Oct 12, 2015 7:58 am Post subject: |
|
|
Apprentice
Joined: 21 Aug 2009
Posts: 35
Location: India
|
Hi Jeff,
I haven't done any performance test on the server. However the server is a shared MQ gateway.
What exactly are you referring to by availability of auth server? Are you pointing to amqzfuma process not running while the refresh command being run?
If thats the case then would it not be a issue on the qmgr already as the OAM manager of the MQ is already down?
_________________
All well that ends well. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Oct 12, 2015 9:18 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
What server do you get your authorization information from? If it's from the local host, then obviously that can't be unavailable if the queue manager is running.
If it's an LDAP, that's a different story.
Please share the results of your performance tests!
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
| abhijit_mishra |
| Posted: Wed Oct 14, 2015 1:01 am Post subject: |
|
|
Apprentice
Joined: 21 Aug 2009
Posts: 35
Location: India
|
Hi Jeff,
Yes it LDAP. There are no local accounts used. I was wondering if the qmgr automatically reloads it auth server cache?
If its true, how frequently does it do it?
For the performance test, I can say the qmgr might face a 10-15 TPS volume during peak hours on an average.
_________________
All well that ends well. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Oct 14, 2015 5:06 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| abhijit_mishra wrote: |
Hi Jeff,
Yes it LDAP. There are no local accounts used. I was wondering if the qmgr automatically reloads it auth server cache?
If its true, how frequently does it do it? |
Your LDAP admin surely has logs that tell you about the activity of the qmgr.
You also need to consider what happens when the LDAP is unavailable -both during normal Qmgr usage and when you run the refresh.
Please do share the results of your performance testing!
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
|
|
