| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Security Exit Problem |
« View previous topic :: View next topic » |
| Author |
Message
|
| pettitma |
 Posted: Tue Apr 26, 2005 2:42 am Post subject: Security Exit Problem |
 |
|
Novice
Joined: 26 Apr 2005
Posts: 18
|
Hi,
Running Websphere 5.3 on Windows and have a problem with Security Exits. The issue is they have worked fine in our UAT environment under significant load for months, then when we migrated to prod it worked for about a day before it just stopped working. Nothing further was written to the sec exit log (we're using exits with COMPA) and unauthorised connections were allowed.
Anyone else come accross this? The problem seems to be fixed by stopping and starting the qmgr, then it will work for another day before just stopping again. No fdc files are being written and nothing in any of the logs gives any indication as to the problem..
Anyone got any suggestions as to the cause please?
Many thanks,
Matt |
|
| Back to top |
|
 |
| Nigelg |
| Posted: Tue Apr 26, 2005 2:55 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
Your code has a fault in it that only happens under production load. You never put a sufficiently accurate simulation of production load through your test system, so you did not get any failure there. Change your test system to be more like production, reproduce the failure there, and fix it.
How obvious is all that?
Why did you post this question? |
|
| Back to top |
|
|
| pettitma |
| Posted: Tue Apr 26, 2005 3:04 am Post subject: |
|
|
Novice
Joined: 26 Apr 2005
Posts: 18
|
errr no, test load was greater on uat that it will ever be on production. Connectivity was established to all the production hosts (but to their dev systems) The SecurityExit code is identical on both, apart from the config file havinf test ip details.
I didn't ask for a sarcastic reply, I asked if anyone else had experienced the same problem. |
|
| Back to top |
|
|
| Nigelg |
| Posted: Tue Apr 26, 2005 4:13 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
Sorry, it was not particularly meant to be sarcastic.
The major points are:
1. Your test system has not reproduced production load.
2. The most likely cause of your problem is your exit code |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Tue Apr 26, 2005 7:43 am Post subject: Re: Security Exit Problem |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hi,
| pettitma wrote: |
| The issue is they have worked fine in our UAT environment under significant load for months, then when we migrated to prod it worked for about a day before it just stopped working. Nothing further was written to the sec exit log (we're using exits with COMPA) and unauthorised connections were allowed. |
What is COMPA ? What is the point of a security exit if "unauthorised connections were allowed"????
When you say it stopped working, do you mean
(1) the security exit would not allow any more connections i.e. clients receive 2009 reason code
(2) the security exit would allow connections but nothing is written to the log.
Did you check both sets of logs for MQ on Unix?
i.e.
/var/mqm/errors
/var/mqm/qmgrs/<QMgrName>/errors
Because if it failed because of item # 1 above, MQ will most certainly write messages to the error log files.
For item # 2, check your disk space. 'cd' to the actual directory where the security exit's log file is located and do 'df -u .' (include that dot - no quotes). Look to see if the allocated file system is full.
Now, we need far more details about your setup. Include the following information for BOTH systems (working and not working):
- What is the WMQ version INCLUDING CSD?
- What is the OS and what kernal level you are at?
- How did you compile AND link the shared library?
- Do you have any J2EE applications connecting to the queue managers?
Regards,
Roger Lacroix
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
