ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ API Support » Create Server Connection Channel for Websphere MQ 7

Post new topic  Reply to topic Goto page Previous  1, 2
 Create Server Connection Channel for Websphere MQ 7 « View previous topic :: View next topic » 
Author Message
JosephGramig
PostPosted: Wed Feb 19, 2014 7:34 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1230
Location: Gold Coast of Florida, USA

Step 1, don't ever use any object that starts with the word SYSTEM.*

Step 2:
Code:
DEF CHL(SSL.TEST.CLNT) CHLTYPE(SVRCONN) TRPTYPE(TCP) REPLACE
* If CHLAUTH rules are enabled, also add this:
SET CHLAUTH(SSL.TEST.CLNT) +
   TYPE(BLOCKUSER) +
   USERLIST('nobody') +
   ACTION(REPLACE)


Try that channel.

Step 3: Secure that channel with SSL and map the cert to an ID
Back to top
View user's profile Send private message AIM Address
jalexmichaelraj
PostPosted: Fri Feb 21, 2014 3:03 am    Post subject: Reply with quote

Novice

Joined: 04 Dec 2013
Posts: 10

Thanks Joseph Graming and Vitor.. its working now.. As u said its bcoz of the security problem.. i Turned the channel security off from the MQexplorer itself.. Thanks alot guys..


JosephGramig wrote:
Step 1, don't ever use any object that starts with the word SYSTEM.*

Step 2:
Code:
DEF CHL(SSL.TEST.CLNT) CHLTYPE(SVRCONN) TRPTYPE(TCP) REPLACE
* If CHLAUTH rules are enabled, also add this:
SET CHLAUTH(SSL.TEST.CLNT) +
   TYPE(BLOCKUSER) +
   USERLIST('nobody') +
   ACTION(REPLACE)


Try that channel.

Step 3: Secure that channel with SSL and map the cert to an ID
Back to top
View user's profile Send private message
fatherjack
PostPosted: Fri Feb 21, 2014 6:44 am    Post subject: Reply with quote

Knight

Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island

The biggest problem with security, and not just WMQ security, is that "it's a bit hard isn't it".
So the OP has employed my favourite security solution, and one that works every time i.e. SWITCH IT OFF.
Perfect!
_________________
Never let the facts get in the way of a good theory.
Back to top
View user's profile Send private message
JosephGramig
PostPosted: Fri Feb 21, 2014 7:57 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1230
Location: Gold Coast of Florida, USA

No. None of us recommended or implied that it was a good idea to turn security off.

I make a living off people who do stuff like this...
Back to top
View user's profile Send private message AIM Address
fatherjack
PostPosted: Fri Feb 21, 2014 8:06 am    Post subject: Reply with quote

Knight

Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island

JosephGramig wrote:
No. None of us recommended or implied that it was a good idea to turn security off.

I make a living off people who do stuff like this...


My tongue was firmly in my cheek.
_________________
Never let the facts get in the way of a good theory.
Back to top
View user's profile Send private message
JosephGramig
PostPosted: Fri Feb 21, 2014 8:31 am    Post subject: Reply with quote

Grand Master

Joined: 09 Feb 2006
Posts: 1230
Location: Gold Coast of Florida, USA

fatherjack wrote:
JosephGramig wrote:
No. None of us recommended or implied that it was a good idea to turn security off.

I make a living off people who do stuff like this...


My tongue was firmly in my cheek.

Don't need to know where your togue has been...
Back to top
View user's profile Send private message AIM Address
bruce2359
PostPosted: Fri Feb 21, 2014 9:30 am    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9394
Location: US: west coast, almost. Otherwise, enroute.

JosephGramig wrote:
fatherjack wrote:
JosephGramig wrote:
No. None of us recommended or implied that it was a good idea to turn security off.

I make a living off people who do stuff like this...


My tongue was firmly in my cheek.

Don't need to know where your togue has been...

From your picture, it looks like your tongue was in a light-socket...
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Fri Feb 21, 2014 12:26 pm    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7717

fatherjack wrote:
The biggest problem with security, and not just WMQ security, is that "it's a bit hard isn't it".
So the OP has employed my favourite security solution, and one that works every time i.e. SWITCH IT OFF.
Perfect!

Unfortunately the sarcasm would be missed on the majority of readers here and they would take this literally. Not that any of us have any responsibility to post anything other than anything we want.
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
fatherjack
PostPosted: Tue Feb 25, 2014 2:59 pm    Post subject: Reply with quote

Knight

Joined: 14 Apr 2010
Posts: 522
Location: Craggy Island

PeterPotkay wrote:
fatherjack wrote:
The biggest problem with security, and not just WMQ security, is that "it's a bit hard isn't it".
So the OP has employed my favourite security solution, and one that works every time i.e. SWITCH IT OFF.
Perfect!

Unfortunately the sarcasm would be missed on the majority of readers here and they would take this literally. Not that any of us have any responsibility to post anything other than anything we want.


Sorry - you're right. But that's the problem with todays world of emails, blogs. twitterings, etc. You can't add 'intonation' to your posts, other than by adding a really annoying smiley.
_________________
Never let the facts get in the way of a good theory.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Goto page Previous  1, 2 Page 2 of 2

MQSeries.net Forum Index » IBM MQ API Support » Create Server Connection Channel for Websphere MQ 7
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.