ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexGeneral IBM MQ SupportMQ AMS Pub/Sub support

Post new topicReply to topic
MQ AMS Pub/Sub support View previous topic :: View next topic
Author Message
lamtbs
PostPosted: Tue Jan 15, 2019 2:19 am Post subject: MQ AMS Pub/Sub support Reply with quote

Acolyte

Joined: 07 Nov 2005
Posts: 52
Location: Hong Kong

Dear all,

I suppose AMS still does not support pubsub model?
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround?

Thank you!
Teresa
Back to top
View user's profile Send private message Send e-mail MSN Messenger
fjb_saper
PostPosted: Tue Jan 15, 2019 5:03 am Post subject: Re: MQ AMS Pub/Sub support Reply with quote

Grand Poobah

Joined: 18 Nov 2003
Posts: 19880
Location: LI,NY

lamtbs wrote:
Dear all,

I suppose AMS still does not support pubsub model?
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround?

Thank you!
Teresa


Instead of trying to publish the unencrypted data, publish the encrypted data.
i.e. first put with AMS to QA
retrieve using ALIAS QA and publish
subscription on QB
retrieve with AMS from ALIAS QB...

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
bruce2359
PostPosted: Tue Jan 15, 2019 7:59 am Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 8301
Location: US: west coast, almost. Otherwise, enroute.

AMS known limitations https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.0.0/com.ibm.mq.sec.doc/q014670_.html
_________________
There are two types of people in this world:
1) Those that can extrapolate from incomplete data
Back to top
View user's profile Send private message
Vitor
PostPosted: Tue Jan 15, 2019 8:01 am Post subject: Re: MQ AMS Pub/Sub support Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 25464
Location: Ohio, USA

lamtbs wrote:
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround?


Encrypt the disc at a hardware or OS level.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Wed Jan 16, 2019 11:36 am Post subject: Re: MQ AMS Pub/Sub support Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3098
Location: London, ON Canada

lamtbs wrote:
I suppose AMS still does not support pubsub model?
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround?

Still true. Why don't you have a look at MQ Message Encryption (MQME). MQME supports both point-to-point and Pub/Sub topology for message encryption/decryption (i.e. data at rest).

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
lamtbs
PostPosted: Thu Jan 17, 2019 1:24 am Post subject: Reply with quote

Acolyte

Joined: 07 Nov 2005
Posts: 52
Location: Hong Kong

Thanks all,

looking at the "limitations" which says ....

Quote "It is possible for an application to publish to a topic via an alias queue definition that is protected by a policy, it is also possible for a subscribing application to get messages from a policy protected queue. It is not possible to assign a policy directly to a topic string, policies can only be assigned to queue definitions."

What does it mean by "publish to a topic via an alias queue"? Is that actually what fjb_saper was suggesting? ...... seems this is my workaround with pub/sub if confidentiality is the AMS option I use anyway?
Back to top
View user's profile Send private message Send e-mail MSN Messenger
hughson
PostPosted: Thu Jan 17, 2019 2:56 pm Post subject: Reply with quote

Guardian

Joined: 09 May 2013
Posts: 970
Location: Bay of Plenty, New Zealand

lamtbs wrote:
What does it mean by "publish to a topic via an alias queue"? Is that actually what fjb_saper was suggesting?


Here's an example of that:-

Publish your MQ Event Messages

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
lamtbs
PostPosted: Thu Jan 17, 2019 7:44 pm Post subject: Reply with quote

Acolyte

Joined: 07 Nov 2005
Posts: 52
Location: Hong Kong

Thanks Morag!

So the publishing and subscribing application does NOT even need to be aware of the change to AMS (confidentiality option, at least)!! Great!!

Thanks all!
Back to top
View user's profile Send private message Send e-mail MSN Messenger
hughson
PostPosted: Thu Jan 17, 2019 8:07 pm Post subject: Reply with quote

Guardian

Joined: 09 May 2013
Posts: 970
Location: Bay of Plenty, New Zealand

lamtbs wrote:
So the publishing and subscribing application does NOT even need to be aware of the change to AMS (confidentiality option, at least)!! Great!!


In general applications are not aware of the change to AMS. In this case - taking a publishing application and changing it to put to a queue, and taking a subscribing application and changing it to get from a queue probably means that they are aware?

Anyway, hopefully you have all the building blocks you need now. If you have any further questions, you know where to ask them.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
lamtbs
PostPosted: Thu Jan 17, 2019 10:58 pm Post subject: Reply with quote

Acolyte

Joined: 07 Nov 2005
Posts: 52
Location: Hong Kong

I misunderstood previously! Thanks for the clarifications!
Back to top
View user's profile Send private message Send e-mail MSN Messenger
hughson
PostPosted: Fri Jan 18, 2019 1:45 pm Post subject: Reply with quote

Guardian

Joined: 09 May 2013
Posts: 970
Location: Bay of Plenty, New Zealand

You're welcome.
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexGeneral IBM MQ SupportMQ AMS Pub/Sub support
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.