| Author |
Message
|
| sclarke |
 Posted: Tue Mar 23, 2004 5:36 pm Post subject: mqjexplorer and security |
 |
|
Apprentice
Joined: 05 Jan 2002
Posts: 39
|
can security be implemented with mqjexplorer and if so how? I know I have to set authorities but what to do with mqjexplorer. The doc does not say very much.
From www.kolban.com/mqjexplorer
MQJExplorer provides both the client side security exit as well as a server side exit that may be configured into the queue manager.
<TBC - Function tested and working, still to document further>
Thanks for any help!!! |
|
| Back to top |
|
 |
| bduncan |
| Posted: Wed Mar 24, 2004 9:15 am Post subject: |
|
|
Padawan
Joined: 11 Apr 2001
Posts: 1554
Location: Silicon Valley
|
Perhaps you could be a little more specific about what you mean by "security"?
Are you trying to implement:
queue level security for users
channel security via ssh
message security by encrypting the contents
queue manager security (setmqaut)
etc...
_________________
Brandon Duncan
IBM Certified MQSeries Specialist
MQSeries.net forum moderator |
|
| Back to top |
|
|
| sclarke |
| Posted: Wed Mar 24, 2004 1:00 pm Post subject: mqjexplorer and security |
|
|
Apprentice
Joined: 05 Jan 2002
Posts: 39
|
Woops! Actually I have a pretty basic requirement - I would like some developers to use mqjexplorer to merely browse queues and the messages but not be able to create queues, delete queues, clear queues, create channels etc etc. I don't want to use a tool that requires the mq client.
Thanks. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Wed Mar 24, 2004 9:22 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Might I suggest that you have a look at MQ Visual Edit. Its primary purpose is to allow developers, QA Testers, etc... to view / edit messages in a queue. It does not have any administration functionality.
For more information or to download a 30-day trial of MQ Visual Edit, go to:
http://www.capitalware.biz/products.html
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| sclarke |
| Posted: Tue Apr 13, 2004 11:12 am Post subject: |
|
|
Apprentice
Joined: 05 Jan 2002
Posts: 39
|
I have not gotten any response as to whether mqjexplorer can be secured to be a queue browse utility only. Does anyone have any idea or do I have to get something like MQ Visual Edit (of course we don't have any money) to allow browse only. We do not use mq clients and want to use java access only.
Thank you very much for any help!!! |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Thu Apr 15, 2004 1:26 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hi,
You need to ask your boss (and yourself) a question:
How much productivity would you gain by having a nice GUI message browsing tool? Would you gain $1.00 worth of productivity per week? How much does your boss pay you per hour? Do you waste an hour a week doing the message viewing the hard-way? (i.e. amqsget > file)
Managers of companies always want their employees to be more productive. The trick is justifying the expense with a clear ROI explaination (i.e. don't explain the 'why' but rather how much 'more work' you can do in a normal day).
So, what is a good GUI message browsing tool worth (no editing capabilities)? $50, $40, $30, etc... ????
You tell me, a one time purchase of GUI message browsing tool will get you "X" productivity. Will you be more productive or would this just be a 'nice to have tool'?
Note: I am being serious. What would you pay?
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| mqonnet |
| Posted: Thu Apr 15, 2004 5:39 pm Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
Roger, sorry to bump into this one but just wanted to add something to sclarke.
Any type of security that you mentioned can be achieved with any/all tools available. Be it mqjexplorer or mqexplorer or visual edit. The type of security you are talking about is eventually in the queue manager itself or the system where your qm resides. And hence you can configure your qm access to users as you wish.
But on a different note, i did notice that Visual edit has lot many features than most of the tools in that category.
Ps: Hope i have answered your question. :)
Cheers
Kumar |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Fri Apr 16, 2004 6:56 am Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
All,
If sclarke does not want to give any feedback, then can everyone with an opinion  at www.mqseries.net give their 2 cents about what a GUI message viewer (browse only support) is worth.
Come on, I know you guys/gays have an opinion on this subject. 
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| bduncan |
| Posted: Fri Apr 16, 2004 9:01 am Post subject: |
|
|
Padawan
Joined: 11 Apr 2001
Posts: 1554
Location: Silicon Valley
|
Well, it's totally obvious.
I spent nearly a year administering queue managers entirely through runmqsc. I wrote a small perl utility to browse each message and a queue and dump the contents to stdout. Sure, I can type fast, but believe me, when I finally got my hands on MQJExplorer it was like the heavens parted! Believe me, it enhanced my productivity immensely. And it wasn't just that I was able to work faster; I was able to do things that I couldn't before (without a bunch of perl coding). I was able to undertake a major performance benchmark of a cluster running hundreds of transactions per second. All with MQJExplorer. At that company, I had access to candle too, but to be honest - and hey, it's not like they're sponsoring us, so I can tell the truth - I much preferred MQJExplorer to it...
_________________
Brandon Duncan
IBM Certified MQSeries Specialist
MQSeries.net forum moderator |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Sun May 09, 2004 5:20 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
All,
Except for Brandon's comment, nobody said if they were interested or not.
Anyway, I created a new product called MQ Visual Browse from the MQ Visual Edit's code base. MQ Visual Browse has the same features as MQ Visual Edit except that it cannot alter / update / delete messages. It can ONLY view / browse messages in a queue.
For more information or to try out a 30-day trial version of MQ Visual Browse go to:
http://www.capitalware.biz/products.html
Regards,
Roger Lacroix
Capitalware Inc.
http://www.capitalware.biz |
|
| Back to top |
|
|
|
|
