| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| New MQ Install |
« View previous topic :: View next topic » |
| Author |
Message
|
| charanR |
 Posted: Fri Nov 03, 2017 11:54 am Post subject: New MQ Install |
 |
|
Apprentice
Joined: 05 Oct 2017
Posts: 28
|
I'm planning to setup multiinstance queue managers in the new environment.
So, there will be 3 different queue managers.
My question is, is it considered a good design if I disable PUT on all local queues and allow PUT only through remote queues ? I'm looking for best practises on MQ but so far I have only seen around MQ security.
Thank you. |
|
| Back to top |
|
 |
| exerk |
| Posted: Fri Nov 03, 2017 12:11 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
I assume you mean that you want applications to only GET from those queue managers?
The design should be that which fulfils the requirements of the application, the security model, and other associated requirements - if that means those queue managers only have applications with GET, then that will be 'best practice' for you.
And I also assume that by 'disable PUT' you do not mean the PUT(DISABLED) attribute?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Fri Nov 03, 2017 12:48 pm Post subject: Re: New MQ Install |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| charanR wrote: |
| My question is, is it considered a good design if I disable PUT on all local queues and allow PUT only through remote queues ? I'm looking for best practises on MQ but so far I have only seen around MQ security. |
If you 'disable PUT on all local queues' then that will be one pointless queue manager.
You do realize that the queue manager's MCA (Message Channel Agent), the component that interacts with other queue managers and client applications, actually does an MQPUT when it receives a message. So, if you issue 'PUT(DISABLED)' for all local queues then absolutely no message will ever be in the local queues.
Time for you to read up on OAM permissions (i.e. setmqaut) and do security the right way.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| charanR |
| Posted: Tue Nov 07, 2017 2:16 pm Post subject: |
|
|
Apprentice
Joined: 05 Oct 2017
Posts: 28
|
| thank you both. I should probably look at chlauth and mq aut instead PUT(DISABLED) |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
