ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Does changing a security exit require a restart?

Post new topic  Reply to topic
 Does changing a security exit require a restart? « View previous topic :: View next topic » 
Author Message
garbagedook
PostPosted: Wed Jul 29, 2009 11:39 am    Post subject: Does changing a security exit require a restart? Reply with quote

Novice

Joined: 15 May 2006
Posts: 11

Hi,

I have a channel security exit in /var/mqm/exits64 on Solaris.

Its loaded and works fine.

If I recompile the exit (make some sort of change) and replace the file, do I need to restart the queue manager?

What is the best practice for replacing an exit?

Any thoughts or suggestions would be most helpful, thanks!
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Wed Jul 29, 2009 2:52 pm    Post subject: Re: Does changing a security exit require a restart? Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

garbagedook wrote:
If I recompile the exit (make some sort of change) and replace the file, do I need to restart the queue manager?

You need to stop ALL channels using the security exit or simply stop the listener.
i.e.
Code:
endmqlsr -f -m QMGR_NAME


Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
gbaddeley
PostPosted: Wed Jul 29, 2009 3:47 pm    Post subject: Re: Does changing a security exit require a restart? Reply with quote

Jedi Knight

Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia

garbagedook wrote:
...If I recompile the exit (make some sort of change) and replace the file, do I need to restart the queue manager?


No, you don't need to restart the qmgr.

Message Channel Agents for Running channels that use the exit will not immediately use the new copy, as they will have their own private copy loaded in their memory. However, next time the channel starts the MCA will load a fresh copy of the exit.

Quote:
What is the best practice for replacing an exit?


It depends what level of quality change control you wish to apply. If its a dev environment and you are the only user, just copy the new exit library file over the old one, and restart the affected channels.

If there are multiple users, you should coordinate an outage to the channel(s), take a backup copy of the exit, copy in the new one, do a PVT, and then inform the other users that all is OK.
_________________
Glenn
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Thu Jul 30, 2009 1:49 pm    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

Roger, don't understand the "...or stop the Listener..." part. All that will do is prevent new channels from starting while you swap in the new exit. Existing running instances of channels that may have the exit loaded will not pick up the changed exit via a stopped listener.
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
JosephGramig
PostPosted: Fri Jul 31, 2009 11:26 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA

if you stop the channel into the inactive status, then it will restart at the next msg ready to go...

Always make a backup and test!
Back to top
View user's profile Send private message AIM Address
RogerLacroix
PostPosted: Wed Aug 12, 2009 8:50 am    Post subject: Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

PeterPotkay wrote:
Roger, don't understand the "...or stop the Listener..." part. All that will do is prevent new channels from starting while you swap in the new exit. Existing running instances of channels that may have the exit loaded will not pick up the changed exit via a stopped listener.

Yes, you are right. I thought forcing the listener to stop would stop active channels. I just tried it and the running channels kept on running.

Hence, you need to stop all channels using the security exit or completely stop the queue manager.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
shashivarungupta
PostPosted: Wed Aug 12, 2009 1:22 pm    Post subject: Re: Does changing a security exit require a restart? Reply with quote

Grand Master

Joined: 24 Feb 2009
Posts: 1343
Location: Floating in space on a round rock.

RogerLacroix wrote:
garbagedook wrote:
If I recompile the exit (make some sort of change) and replace the file, do I need to restart the queue manager?

You need to stop ALL channels using the security exit or simply stop the listener.
i.e.
Code:
endmqlsr -f -m QMGR_NAME




Most of the times, I used to stop the channels and then make the changes. and Once I did stop the queue manager while making the changes to exit or exit64.
It works without fault. I did that..quite a few times, under Roger's guidance. Thanks.
_________________
*Life will beat you down, you need to decide to fight back or leave it.
Back to top
View user's profile Send private message Send e-mail
shashivarungupta
PostPosted: Wed Aug 12, 2009 1:29 pm    Post subject: Reply with quote

Grand Master

Joined: 24 Feb 2009
Posts: 1343
Location: Floating in space on a round rock.

And the most interesting one was..while upgrading the capitalware mqausx and got to take care of the permissions of the files under /var/mqm/exits/

_________________
*Life will beat you down, you need to decide to fight back or leave it.
Back to top
View user's profile Send private message Send e-mail
bruce2359
PostPosted: Wed Aug 12, 2009 9:11 pm    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.

Quote:
...and got to take care of the permissions of the files under /var/mqm/exits/

and by take care, you mean what?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
shashivarungupta
PostPosted: Thu Aug 13, 2009 5:41 am    Post subject: Reply with quote

Grand Master

Joined: 24 Feb 2009
Posts: 1343
Location: Floating in space on a round rock.

bruce2359 wrote:
Quote:
...and got to take care of the permissions of the files under /var/mqm/exits/

and by take care, you mean what?


I mean, keep the track which file is to be given which level of access. Some files are there which need root level access and some not. (This is what people generally miss out accidentally while upgrading the package.)
_________________
*Life will beat you down, you need to decide to fight back or leave it.
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Does changing a security exit require a restart?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.