| Author |
Message
|
| kishi_25 |
 Posted: Tue Dec 13, 2011 2:06 pm Post subject: Adding remote QM to Explorer, which is in remote desktop |
 |
|
Centurion
Joined: 19 Jul 2011
Posts: 100
|
hi,
I need to add a QM A to MQ explorer. This QM A is sitting on Windows server. For Direct accessing/Connecting this QM, usually I will go to citrix, click on Remote desktop icon and from there will connect to Windows server and can view QM A.
Is there anyway, I can add this QM as Remote QM to MQ explorer on my local machine?
I tried to add it like regular remote QM. But, I'm getting 2059 error
(QM not available for connection).
can anyone provide inputs on this?
thanks |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Tue Dec 13, 2011 2:25 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Yes, you need to configure the qm as a remote qm using the hostname, channel, and port # of the listener.
Then you need to reconfigure the queue manager so that it's actually secure. Then you will reconfigure the MQ explorer connection to use a CCDT so you can use an SSL enabled channel. |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Tue Dec 13, 2011 2:31 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
MQ Explorer on your local machine will require a TCP/IP network path (resolvable host name or IP address) to the QM A machine. I don't think Citrix provides this. It may be possible to run MQ Explorer on the Citrix server and set up a Citrix app icon. Speak to your Citrix support people about it. I don't know of anyone who has done this....
_________________
Glenn |
|
| Back to top |
|
|
| kishi_25 |
| Posted: Tue Dec 13, 2011 4:36 pm Post subject: |
|
|
Centurion
Joined: 19 Jul 2011
Posts: 100
|
hi mqjeff,
I have already configured the QM on remote server(Citrix) as you mentioned. I will try tomorrow morning on using CCDT. But, do you mean, using CCDT will allow me to connect a QM which is placed on remote server(and the only option to connect to it is using remote desk top through citirx?
thanks |
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Dec 13, 2011 5:12 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
No.
I'm saying that you need to configure the queue manager object in mQExplorer as a remote object using the relevant connectivity information.
Then I'm telling you that it is almost certain that your queue manager is not properly secured, and that you will need to take steps to secure it.
This will then require you to use an SSL connection from your MQExplorer instead of the normal one.
Using an SSL connection from MQExplorer requires using a CCDT. |
|
| Back to top |
|
|
| kishi_25 |
| Posted: Tue Dec 13, 2011 7:07 pm Post subject: |
|
|
Centurion
Joined: 19 Jul 2011
Posts: 100
|
ok thanks mqjeff for your quick response. ...
When I'm configuring my queue manager object in mq explorer as remote object and tried to connect ..getting 2059 error...as it's not able to connect due to citrix/remote desktop are present for the target QM..(I assume you are asking me to treat it as any other regular remote QM connection)
some one was saying me that there will be indirect connection mode I can use in mq explorer to connect this type of QM.
Regarding SSL, agree with you that We need to set it up so that there won't be security issues. SSL, I want to take it up as second step once, I get the connection successful.
Any thoughts on addressing this issue?
thanks, |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Dec 13, 2011 10:37 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| mqjeff wrote: |
| Using an SSL connection from MQExplorer requires using a CCDT. |
Which version of MQExplorer are you talking about?
Using MQExplorer (V 7.0.1.4) or MO71 I can set up a client connection with SSL without using a CCDT... (config changes are needed)
Of course if you are using applications, you will either have to specify the connection SSL parms in the APP (code and/or config changes needed) or rely on the CCDT to do it for you => i.e. no app code changes...
Also note if only some of your qmgrs are using SSL FIPS, you may have to run 2 instances of WMQE one for SSL FIPS, and one for the rest of your MQ estate.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Dec 14, 2011 2:38 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| fjb_saper wrote: |
| mqjeff wrote: |
| Using an SSL connection from MQExplorer requires using a CCDT. |
Which version of MQExplorer are you talking about?
Using MQExplorer (V 7.0.1.4) or MO71 I can set up a client connection with SSL without using a CCDT... (config changes are needed) |
   
I'd seen some recent discussion somewhere that asserted you needed a CCDT....
kishi_25 - it *is* just another remote queue manager. The fact that Citrix is involved is irrelevant. Either you can establish a network connection from the machine running MQExplorer to the queue manager's listener port, or you can't. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Wed Dec 14, 2011 5:35 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
The WMQ Explorer application works by connecting to a SVRCONN channel on the the qmgr server instance. A (SVRCONN) channel requires a transport like TCP at both ends of the channel, and a listener listening at the receiving end of the channel for inbound message flows across the network.
So, you are saying that your organization won't allow you to create a network connection from your desktop/laptop to a qmgr. Yes? If so, why?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Dec 14, 2011 5:43 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| kishi_25 wrote: |
| as it's not able to connect due to citrix/remote desktop are present for the target QM..(I assume you are asking me to treat it as any other regular remote QM connection) |
It's still technically possible to do this via Citrix. But if Citrix is in place it's almost certain your site security rules prevent that.
| kishi_25 wrote: |
| some one was saying me that there will be indirect connection mode I can use in mq explorer to connect this type of QM. |
It's the 3rd option for adding a remote queue manager, the first being "connect directly" & the 2nd being "connect via a CCDT". Does rather rely on there being a suitible queue manager you can indirect through. I would not be shocked to my bone to discover no such queue manager exists due to those same site security rules.
But it might.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| kishi_25 |
| Posted: Tue Dec 20, 2011 7:15 am Post subject: |
|
|
Centurion
Joined: 19 Jul 2011
Posts: 100
|
| I tried 3rd option. It's not working as you mentioned. Possible cause would be security. opening PMR with IBM to check for any other alternatives. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Dec 20, 2011 7:29 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| kishi_25 wrote: |
When I'm configuring my queue manager object in mq explorer as remote object and tried to connect ..getting 2059 error...as it's not able to connect due to citrix/remote desktop are present for the target QM..(I assume you are asking me to treat it as any other regular remote QM connection) |
Citrix has little/nothing to do with this. Citrix is not likely to be the solution to this either.
To test this theory, do an ip ping command from the client platform. The target of the ping needs to be the ipaddress of the qmgr's listener.
If the ip ping succeeds, then you have a network path from client to qmgr. Does the ping work? If not, then you don't have a network connection.
A WMQ Client application needs to connect across the network to a SVRCONN channel on the qmgr. If it can't, then don't expect the Explorer to work.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Dec 20, 2011 7:36 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| kishi_25 wrote: |
| opening PMR with IBM to check for any other alternatives. |
Do post any tips you get for accessing a queue manager to which remote access is forbidden by site security rules... 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Dec 20, 2011 12:10 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Vitor wrote: |
| kishi_25 wrote: |
| opening PMR with IBM to check for any other alternatives. |
Do post any tips you get for accessing a queue manager to which remote access is forbidden by site security rules... |
Do post any tips on how to create a network connection without a network connection. I'm especially interested in this.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| kishi_25 |
| Posted: Wed Dec 28, 2011 7:54 am Post subject: |
|
|
Centurion
Joined: 19 Jul 2011
Posts: 100
|
| sure..will post update, once I resolve this with IBM |
|
| Back to top |
|
|
|
|
