| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Block IP ,MQException occurred:Completion Code 2,Reason 2009 |
« View previous topic :: View next topic » |
| Author |
Message
|
| lovish13 |
 Posted: Fri Sep 16, 2011 4:42 am Post subject: Block IP ,MQException occurred:Completion Code 2,Reason 2009 |
 |
|
Newbie
Joined: 12 Feb 2011
Posts: 3
|
Hi
I am configuring my QM to accept connection from only one IP.
I have made necessary changes in my configuration file. The entries in the file are absolutly correct.
When I try connecting the QM from that channel, without configuring block IP it runs fine.
But, after configuration it gives following error :
MQJE001: An MQException occurred: Completion Code 2, Reason 2009
MQJE016: MQ queue manager closed channel immediately during connect
Closure reason = 2009
MQJE001: An MQException occurred: Completion Code 2, Reason 2009
MQJE016: MQ queue manager closed channel immediately during connect
Closure reason = 2009
java.lang.NullPointerException 2011 TIME: 06:11 ATTEMPTS: 0 --------
at com.temenos.tocf.mqb.MQBridge.Post(Unknown Source)]
at com.temenos.tocf.mqb.MQBridge.Post(Unknown Source)
I am not able to find out wherethe problem lies.
Please help... |
|
| Back to top |
|
 |
| Vitor |
| Posted: Fri Sep 16, 2011 4:53 am Post subject: Re: Block IP ,MQException occurred:Completion Code 2,Reason |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| lovish13 wrote: |
| The entries in the file are absolutly correct. |
I admire your certainty.
| lovish13 wrote: |
| I am not able to find out where the problem lies. |
From what you've posted, I struggle to see how we're going to do better?
- What does this absolutely correct configuration file look like?
- What platform?
- What version of WMQ?
- What version of BlockIP2?
- What changes did you make to the channel definition to invoke the exit?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| lovish13 |
| Posted: Sun Sep 18, 2011 10:22 pm Post subject: |
|
|
Newbie
Joined: 12 Feb 2011
Posts: 3
|
Hi , my config file looks like this..
AllowBlankUserID=Y;
QMGR=QMGR;
MAXCHL=CLINT;100;
CHANNEL=CLINT;
CON=172.20.10.19;*;
- What platform?
AIX
- What version of WMQ?
WMQ v.6
- What version of BlockIP2?
BlockIP2 V2.69
- What changes did you make to the channel definition to invoke the exit?
SCYDATA('FN=/***PATH***/ini/FileName.ini;') +
SCYEXIT('BlockIP2(BlockExit)') +
Please Guide.. |
|
| Back to top |
|
|
| SAFraser |
| Posted: Mon Sep 19, 2011 5:44 pm Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
BlockIP2 allows logging and is configured in your "ini" file. Is a log file configured? Are there entries for the connection attempt?
I notice you are allowing a blank user ID. I believe that such configuration causes BlockIP2 to look explicitly for a blank user ID in the MQCONN call. Are you really passing a blank user ID?
Is the client an MQ Client or JMS? What version of MQ is the client application? Are you using WAS, and if so, what version?
The issue of blank vs passed user ID was quite skewed by a change in a v6 fixpack (JMS), later reverted in a v7 fixpack. This caused confusion not only for JMS clients, but also for v6.1 and v 7.0 WAS JMS connections. |
|
| Back to top |
|
|
| zpat |
| Posted: Mon Sep 19, 2011 10:14 pm Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
MQRC 2009 means that you have not permitted access and BlockIP2 has terminated the channel connection.
Try using this line at the end to permit this IP address,
CON=172.20.10.19;*;MCA=*;
You might also want to use this at the start of the ini file
BlockMqmUsers=N;
This allows use of mqm on your chosen IP address, you can then block it from other IPs with the later use of
CON=*;mq*,root;BLOCK;
You can then also block blank ids with
CON=*;BLANK_USERID;BLOCK;
This allows more control over when the blocking of mqm and blank ids occur since you may want to allow them in some circumstances.
These values are not needed
QMGR=QMGR;
CHANNEL=CLINT;
Unless you wanted BlockIP to ignore other QMs and channels (in which case why it is the exit being invoked on these?).
If you want conditional processing (for a particular channel) but keeping the ini file generic (for all channels to use the same file) do like this:
CHANNEL=CLINT; /* ONLY IF THIS CHANNEL */
CON=*;fred*;MCA=xxx; /* If id is fred* set id to xxx */
CHANNEL=*; /* RESUME FOR ALL CHANNELS */
The CON statement above is just an example.
To allow any other connection (which have not already matched a rule) to continue as is then use this at the end of the file
CON=*;*;MCA=*;
Remember than rule processing will terminate once a CON statement is matched, so code the most specific rules first. |
|
| Back to top |
|
|
| lovish13 |
| Posted: Thu Sep 22, 2011 2:59 am Post subject: |
|
|
Newbie
Joined: 12 Feb 2011
Posts: 3
|
Hi all
Tnx for your support, I havve found that there was a permission issue that made up this issue. I have successfully implemented BLOCK IP.  |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
