ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexIBM MQ Installation/Configuration SupportNew MQ Install

Post new topicReply to topic
New MQ Install View previous topic :: View next topic
Author Message
charanR
PostPosted: Fri Nov 03, 2017 11:54 am Post subject: New MQ Install Reply with quote

Newbie

Joined: 05 Oct 2017
Posts: 8

I'm planning to setup multiinstance queue managers in the new environment.

So, there will be 3 different queue managers.

My question is, is it considered a good design if I disable PUT on all local queues and allow PUT only through remote queues ? I'm looking for best practises on MQ but so far I have only seen around MQ security.

Thank you.
Back to top
View user's profile Send private message
exerk
PostPosted: Fri Nov 03, 2017 12:11 pm Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 5756

I assume you mean that you want applications to only GET from those queue managers?

The design should be that which fulfils the requirements of the application, the security model, and other associated requirements - if that means those queue managers only have applications with GET, then that will be 'best practice' for you.

And I also assume that by 'disable PUT' you do not mean the PUT(DISABLED) attribute?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.

Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Fri Nov 03, 2017 12:48 pm Post subject: Re: New MQ Install Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3021
Location: London, ON Canada

charanR wrote:
My question is, is it considered a good design if I disable PUT on all local queues and allow PUT only through remote queues ? I'm looking for best practises on MQ but so far I have only seen around MQ security.

If you 'disable PUT on all local queues' then that will be one pointless queue manager.

You do realize that the queue manager's MCA (Message Channel Agent), the component that interacts with other queue managers and client applications, actually does an MQPUT when it receives a message. So, if you issue 'PUT(DISABLED)' for all local queues then absolutely no message will ever be in the local queues.

Time for you to read up on OAM permissions (i.e. setmqaut) and do security the right way.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
charanR
PostPosted: Tue Nov 07, 2017 2:16 pm Post subject: Reply with quote

Newbie

Joined: 05 Oct 2017
Posts: 8

thank you both. I should probably look at chlauth and mq aut instead PUT(DISABLED)
Back to top
View user's profile Send private message
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexIBM MQ Installation/Configuration SupportNew MQ Install
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.