| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Monitoring tools using the command server |
« View previous topic :: View next topic » |
| Author |
Message
|
| kmtear |
 Posted: Tue May 10, 2005 11:32 am Post subject: Monitoring tools using the command server |
 |
|
Newbie
Joined: 10 May 2005
Posts: 1
|
| I'm new to working with MQ Series and was looking at some various monitoring tools to use. I see most of these tools use the command server for the access. What's the best way to secure the command server access? It looks like anyone can get access into it by default when you start it and this is a major concern. By default, we don't start the command server, but I brought it up to evaluate a monitoring tool in development. Having trouble going through the manuals and seeing how to lock it down. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue May 10, 2005 11:36 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Restrict the put permissions on the command queue and secure all svrconn channels (mcauser=none).
This should only allow connection either through another qmgr or local to the box (monitoring agent).
Enjoy  |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Tue May 10, 2005 12:15 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| fjb_saper wrote: |
Restrict the put permissions on the command queue and secure all svrconn channels (mcauser=none).
|
To be clear, that means actually typing n, o, n, e in the MCAUSER (I think that's what fjb meant anyway) . A blank MCAUSER is no security at all.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue May 10, 2005 6:05 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Thanks for clarifying Peter
In fact I should have typed MCAUSER('none')
 |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
