| Author |
Message
|
| mexicanopelon |
 Posted: Wed Feb 09, 2005 1:14 pm Post subject: Monitoring Queue Activity Remotely |
 |
|
Newbie
Joined: 09 Feb 2005
Posts: 2
|
Greetings,
We have several systems communicating via MQ. I would like to be able to connect to a remote queue manager and query properties and activities in its queues such as current depth.
Is there any way (maybe some software) to do this without having to set up queues for remote administration as described in
http://middleware.its.state.nc.us/middleware/Documentation/en_US/htm/amqzag03/amqzag031j.htm#FIGPCHAN
Some of these systems will reside in different states. Since I will be troubleshooting them, I need to be able to connect and query them as necessary.
Thank in advance for any help you can provide. |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Wed Feb 09, 2005 1:46 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
ssh and runmqsc or Terminal Services... 
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| mexicanopelon |
| Posted: Wed Feb 09, 2005 1:56 pm Post subject: Thanks for the quick reply. |
|
|
Newbie
Joined: 09 Feb 2005
Posts: 2
|
| jefflowrey wrote: |
| ssh and runmqsc or Terminal Services... |
First of all, thanks for the quick response.
I realize terminal services is definitely a solution. I was trying to find a way to do it using ssh or runmqsc. However, it seems that doing it this way will require me to set up a management queue in my local system with channels connecting to/from the remote queue manager. Is there any way to avoid having to do this? |
|
| Back to top |
|
|
| cameron |
| Posted: Tue Apr 12, 2005 8:34 am Post subject: Monitoring Queue Activity Remotely |
|
|
Newbie
Joined: 06 Feb 2005
Posts: 7
Location: Livingston, UK
|
Do you mean you want to know of an 'off the shelf' app to do this for you? There are many, just search the web, BMC patrol is but to mention one of lots.
_________________
Sun Certified Programmer for Java 2 Platform 1.4 |
|
| Back to top |
|
|
| malammik |
| Posted: Tue Apr 12, 2005 3:59 pm Post subject: |
|
|
Partisan
Joined: 27 Jan 2005
Posts: 397
Location: Philadelphia, PA
|
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Apr 12, 2005 6:26 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Nothing comes without a price. I can recommend QPasa as we are using it.
You can set up great "logical views" and set up to email the queue depth every so often to your distribution list. (Accross multiple hosts and queue managers)
Enjoy |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Wed Apr 13, 2005 9:49 am Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
| jefflowrey wrote: |
| ssh and runmqsc or Terminal Services... |
MO72 MQSC Client
does require the command server to be active ... but then again so does using runmqsc with all paths and channels defined.
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Apr 13, 2005 11:26 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| MichaelDag wrote: |
| jefflowrey wrote: |
| ssh and runmqsc or Terminal Services... |
MO72 MQSC Client
does require the command server to be active ... but then again so does using runmqsc with all paths and channels defined. |
Runmqsc only needs the command server running if you're talking remotely, I thought. If you've sshed to the box, and use runmqsc local, I didn't think it needed a running command server.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Wed Apr 13, 2005 11:42 am Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
| jefflowrey wrote: |
| Runmqsc only needs the command server running if you're talking remotely, I thought. If you've sshed to the box, and use runmqsc local, I didn't think it needed a running command server. |
that is correct.
I was referring to mexicanopelon referring to setup and use runmqsc to access remote queuemanagers.
MO72 MQSC Client needs the command server too, but does not need the whole transmission queue and channels back and forth setup.
It does require a server conn, but MO72 inherited the ssl setup from MO71 so that should be ok (security wise) too.
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
| mikeHT |
| Posted: Fri Jul 01, 2005 6:00 am Post subject: locking down and control accessibility to QMGR by MO72 |
|
|
Voyager
Joined: 01 Jul 2005
Posts: 82
|
| MO72 is a great tool to remotely monitor QMGRs. But won't that be of some security concern? Anyone who has some knowledge of MQ series, can download MO72 and Websphere client and start connecting to QMGRs which have the command server started. Any insights? |
|
| Back to top |
|
|
| dgolding |
| Posted: Fri Jul 01, 2005 6:46 am Post subject: |
|
|
Yatiri
Joined: 16 May 2001
Posts: 668
Location: Switzerland
|
Hi Mike
That's correct - there is no security in the client connection, except for which you provide yourself via channel exits. If you have administrator rights on your box then you can do anything you want on the remote queue manager, IF there is no security.
There's a couple floating around I believe, search for BlockIP on this site for more info. Also there is something called msausx, check the Capitalware forum on this site.
HTH |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Fri Jul 01, 2005 9:25 am Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
| dgolding wrote: |
| That's correct - there is no security in the client connection, except for which you provide yourself via channel exits. |
not entirely, MO71 and MO72 both support SSL, so it would require 'anyone' to at least have the right certificate setup.
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
| mikeHT |
| Posted: Wed Jul 06, 2005 5:51 am Post subject: MCAUSER question |
|
|
Voyager
Joined: 01 Jul 2005
Posts: 82
|
I tried to use mqsc to connect remotely to QMGRs from Linux and Windows platform to a QMGR in Windows. The only difference between the 2 SVRCONN channels is that in channel "CLIENT" the MCAUSER has (testuser) and channel SYSTEM.ADMIN.SVRCONN has MCAUSER( ) which is blank and that supposed to allow connection request from any user. Why can I connect to qmgr via a channel with MCAUSER set to testuser and not when the MCAUSER is set to blank? Thank you.
./mqsc -c CLIENT -m CRDA01 -h '172.123.75.19' Connected to Queue Manager 'CRDA01'
./mqsc -c SYSTEM.ADMIN.SVRCONN -m CRDA01 -h "172.123.75.19" Error connecting via client to 'CRDA01' RC(2035) Not authorized. |
|
| Back to top |
|
|
|
|
