| Author |
Message
|
| J.D |
 Posted: Tue Jan 25, 2011 11:35 am Post subject: kdb expiration |
 |
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
Hi Guys,
How to find the .kdb file expiration if expire option was selected during creation?
Thanks
_________________
IBM WebSphere MQ & WAS Administrator |
|
| Back to top |
|
 |
| santnmq |
| Posted: Mon Jan 31, 2011 4:24 am Post subject: |
|
|
Centurion
Joined: 11 Jan 2011
Posts: 125
|
it's not the expiration of the kdb file, but the expiration time is set for the password of the kdb database.
the password will be expired after the mentioned days. |
|
| Back to top |
|
|
| J.D |
| Posted: Mon Jan 31, 2011 1:56 pm Post subject: |
|
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
MQ Clients make a SSL connection with Queue Managers and it is one-way authentication only (Client authenticates Server). The Client side .kdb has CA trust certificates which expire after 10 years. So, i don't have to worry about .kdb unless if i want to add new CA trust cert?
_________________
IBM WebSphere MQ & WAS Administrator |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Jan 31, 2011 2:59 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
| J.D wrote: |
| MQ Clients make a SSL connection with Queue Managers and it is one-way authentication only (Client authenticates Server). The Client side .kdb has CA trust certificates which expire after 10 years. So, i don't have to worry about .kdb unless if i want to add new CA trust cert? |
Wrong. If you want to use the kdb you need the password for it. If the password is expired you need to renew the password of the kdb and the stash file otherwise your kdb is unusable. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| J.D |
| Posted: Mon Jan 31, 2011 3:57 pm Post subject: |
|
|
Voyager
Joined: 18 Dec 2009
Posts: 92
Location: United States
|
How to check the expiration time for the password of .kdb?
_________________
IBM WebSphere MQ & WAS Administrator |
|
| Back to top |
|
|
| santnmq |
| Posted: Mon Jan 31, 2011 9:56 pm Post subject: |
|
|
Centurion
Joined: 11 Jan 2011
Posts: 125
|
not sure about how to check the expiration about the kdb already created.
But you can change the password according to your choice(Expiry or non expiry etc) for the present kdb if you know the current password. |
|
| Back to top |
|
|
| asudhakar |
| Posted: Mon Feb 21, 2011 3:32 pm Post subject: |
|
|
Centurion
Joined: 12 May 2007
Posts: 116
Location: Bangalore
|
| santnmq wrote: |
not sure about how to check the expiration about the kdb already created.
But you can change the password according to your choice(Expiry or non expiry etc) for the present kdb if you know the current password. |
Try below command, you can find expiry of kdb :
gsk7cmd -keydb -expiry -db "/var/mqm/qmgrs/QM NAME/ssl/QM NAME.kdb" -pw PASSWORD
_________________
WebSphere MQ, MB Support and Admin |
|
| Back to top |
|
|
| santnmq |
| Posted: Mon Feb 21, 2011 10:35 pm Post subject: |
|
|
Centurion
Joined: 11 Jan 2011
Posts: 125
|
| thanks, this is the right command ... i forgot that ... |
|
| Back to top |
|
|
|
|
