Re: Using gsk6cmd to create certificates and key ring files on AI X

2004-11-23 Thread Pavel Tolkachev
I have been using gsk6cmd on AIX (4.3, 5.1) for quite a while. It is a bore but it works. I have never used GUI (I tried but some windows were appearing shrinked to zero size so I dropped). Pavel Lovett, Alan J [EMAIL PROTECTED]To:

Re: Sending a PDF file as MQ payload

2004-11-22 Thread Pavel Tolkachev
Hello Bill, Basically, use MQFMT_NONE in a message format field to avoid character conversions and maybe other smart moves of the beast.. Also, make sure your documents are less than 4 Mb; otherwise, use application-level segmentation or you will have to make sure some set of conditions is

Migration QM data from Solaris to Linux

2004-11-04 Thread Pavel Tolkachev
Hello all, I need to migrate user's queue manager from one platform to another (Solaris to Linux to be precise). Is there some utility or support pac that can help in migrating queue data? For example some utility that can gather all data on one platform to some platform-independent file that

Re: Migration QM data from Solaris to Linux

2004-11-04 Thread Pavel Tolkachev
. Other than that it works well. bobbee From: Pavel Tolkachev [EMAIL PROTECTED] Reply-To: MQSeries List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Migration QM data from Solaris to Linux Date: Thu, 4 Nov 2004 10:19:00 -0500 Hello all, I need

Re: Comparison of MQ monitoring tools

2004-11-04 Thread Pavel Tolkachev
Just to confirm that all horror stories below are all true.. :-) Additionally, the user interface is the most counterintuitive GUI I have ever used. Additionally, now that Candle is bought, there is an uncertainty in terms of what of the product families will evolve better --- or even at all.

Re: What do MQAdmins read?

2004-10-18 Thread Pavel Tolkachev
Just a hypothesis: IBM's and contributed documentation and their Web site in general, mqseries.net and this mailing list leave too narrow niche for any potential enterpreneur who would think of starting such a publication :-). Also, the stability of the product features might matter.. (I do not

Re: AW: Creating report messages ends with reason 2035

2004-09-22 Thread Pavel Tolkachev
I would try to set MQPMO_SET_IDENTITY_CONTEXT in your app1 and set UserIdentifier to the one of the app2. Just a blind shot -- I have never done this trick before. If it works, it sounds as another MQ security hole to me though :-). Pavel

Re: Question about Security under v5.3 on Win2K

2004-09-22 Thread Pavel Tolkachev
Hello Sid, Just interested: are you going to write a special program doing PCF to re-create all those objects? I would go for scripting and runmqsc response files.. sounds easier to me. Pavel [EMAIL PROTECTED] .AU To:

Re: AW: Cannot un-install MQ

2004-09-22 Thread Pavel Tolkachev
lists which dlls are used by programs. Just search in the output of listdlls and stop the processes, which use amq*.dll. This should help. Regards Hubert -Ursprüngliche Nachricht- Von: MQSeries List [mailto:[EMAIL PROTECTED] Auftrag von Pavel Tolkachev Gesendet: Dienstag, 21. September

Re: Cannot un-install MQ

2004-09-21 Thread Pavel Tolkachev
Hello Mike, To check real Windows ACLs, use CACLS command on NT. As for the problem itself I noticed that couple of DLLs could not be removed when I uninstalled MQ for Windows last time (more than a year ago, so I do not remember much details like versions). I had to add some hack into the

Re: Question about Security under v5.3 on Win2K

2004-09-19 Thread Pavel Tolkachev
I do not think so. Windows Shell will eat them up before giving them to the setmqaut.exe (by them I mean double quotes). This may work though (although with no guarantee, I did not try myself): C:\setmqaut -m QML_MQM -t q -n 'di_results' -p diclient -get +put +inq Pavel

Re: MMC/Any GUI for administering MQ on AIX

2004-09-09 Thread Pavel Tolkachev
For someone who already owns Tivoli ITM MQ PAC: it offers, besides monitoring,, a powerful remote administration facility. However, the user interface (although formaly it can be called graphical, I guess) is the most counter-intuitive I have ever seen. Just my 2c Pavel

Re: Connecting to more than one queue managers on solaris, linux

2004-09-03 Thread Pavel Tolkachev
of threads is directly defined by the number of local queue managers. Eugene --- Pavel Tolkachev [EMAIL PROTECTED] wrote: Well, for a loopback interface (I mean, when client connects to localhost or 127.0.0.1), it should not call real network drivers. I think it uses some platform-specific IPCs

Re: Connecting to more than one queue managers on solaris, linux

2004-09-03 Thread Pavel Tolkachev
like that). It is somewhat analagous to how the command server works, only customized to your specific requirements. -Original Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 31, 2004 1:31 PM To: [EMAIL PROTECTED] Subject: Re: Connecting to more

Re: Connecting to more than one queue managers on solaris, linux

2004-09-03 Thread Pavel Tolkachev
connections to all active local queue managers. And I am using it in multithreaded mode on several platforms including SUN Solaris. Eugene --- Pavel Tolkachev [EMAIL PROTECTED] wrote: Thanks eugene, Probably, not in 5.3. This is the error we are getting on Solaris: 2103

Re: MQ Series JMS SSL Client getting Could not find trusted cert in chain.

2004-09-01 Thread Pavel Tolkachev
Hello Rajesh, Are you sure your certificates are self-signed, (e.g., not signed by your own CA)? If yes, what do you mean by CA? Pavel Rajesh-IT Sharma rajesh-it.sharma+exterTo: [EMAIL PROTECTED] [EMAIL

Re: Connecting to more than one queue managers on solaris, linux

2004-09-01 Thread Pavel Tolkachev
that). It is somewhat analagous to how the command server works, only customized to your specific requirements. -Original Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 31, 2004 1:31 PM To: [EMAIL PROTECTED] Subject: Re: Connecting to more than one queue

Re: MQ Series JMS SSL Client getting Could not find trusted cert in chain.

2004-09-01 Thread Pavel Tolkachev
Hello Rajesh, I did almost as you did although I always use ketool to work with jks keystores instead of gsk6cmd. From the error you are getting, the problem can equally be on either client or server side. Make sure that: 1. *both* your truststore and keystore java properties point to the

Re: Connecting to more than one queue managers on solaris, linux

2004-09-01 Thread Pavel Tolkachev
- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 31, 2004 1:31 PM To: [EMAIL PROTECTED] Subject: Re: Connecting to more than one queue managers on solaris, linux Thanks Dennis, This is a low-level monitoring application (requiring mqm credentials, by the way). Making

Connecting to more than one queue managers on solaris, linux

2004-08-31 Thread Pavel Tolkachev
Hello all, Is there any way to write a C or C++ Server application (multi-threaded, anyway) that talks to more than one queue manager at the same time (meaning -- keeps open more than 1 connection handles, each to its own queue manager)? I need it on Solaris, Linux and possibly AIX.

Re: Connecting to more than one queue managers on solaris, linux

2004-08-31 Thread Pavel Tolkachev
Thanks David, Is there absolutely no way to do it in the Server app? What is so different between Windows and Unix that you can do it on one but not the other? Thanks, Pavel David C. PartridgeTo: [EMAIL PROTECTED]

Re: Connecting to more than one queue managers on solaris, linux

2004-08-31 Thread Pavel Tolkachev
to either use client connections or do sub- processes. -- Kelly F. Hickel Senior Software Architect MQSoftware, Inc 952.345.8677 [EMAIL PROTECTED] -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] On Behalf Of Pavel Tolkachev Sent: Tuesday, August 31, 2004 3:31 PM

Re: MQ CSD07 AIX

2004-08-26 Thread Pavel Tolkachev
installed. I would think I can install the CSD07 with the SSL support and it will add it?? Or do I have to go back and start with installing the origional base product? bobbee From: Pavel Tolkachev [EMAIL PROTECTED] Reply-To: MQSeries List [EMAIL PROTECTED] To: [EMAIL

Re: Invalid key database type was found V5.3 CSD05 SSL gsk6cmd failed for -type cms GSKit V6.0.5.43 Solaris 2.8

2004-08-26 Thread Pavel Tolkachev
with this much trouble and I would like to get a confidence level whether it is worth it at this time, or wait for it to stabilize a bit more -:) Raj Pavel Tolkachev [EMAIL PROTECTED] Sent by: MQSeries List [EMAIL PROTECTED] 08/19/2004 03:41 PM Please respond to MQSeries List

Re: Invalid key database type was found V5.3 CSD05 SSL gsk6cmd failed for -type cms GSKit V6.0.5.43 Solaris 2.8

2004-08-26 Thread Pavel Tolkachev
/var/mqm/qmgrs/QM_2/ssl/keys.kdb -target_pw passw0rd -target_type cms This is where I encounter the error. Raj Pavel Tolkachev [EMAIL PROTECTED] Sent by: MQSeries List [EMAIL PROTECTED] 08/26/2004 02:45 PM Please respond to MQSeries List To: [EMAIL PROTECTED] cc

Re: MQ CSD07 AIX

2004-08-25 Thread Pavel Tolkachev
Hello Bobbee, You can use smitty or you can use lslpp, like this: $ lslpp -l | grep gsk gskak.rte 6.0.5.41 COMMITTED AIX Certificate and SSL Base $ or $ lslpp -l | egrep mq|gsk gskak.rte 6.0.5.41 COMMITTED AIX Certificate and SSL Base mqm.Client.Bnd

Re: Windows VMware and multiple QMs

2004-08-23 Thread Pavel Tolkachev
Hello Peter, When planning the setup from scratch there are two reasons why I would think of putting each QM on its own machine: 1. I need (or may need in future) different QMs running on different versions of MQ 2. I want to *really isolate* one of another in terms of used resources CPU,

Re: CRTMQM on Solaris 8

2004-08-20 Thread Pavel Tolkachev
Anthony You may want to check your kernel parameters *and hard and soft limits for the number of opened file descriptors* once again... Hope this will help, Pavel Anthony G Allison [EMAIL PROTECTED]To: [EMAIL PROTECTED]

Re: CRTMQM on Solaris 8

2004-08-20 Thread Pavel Tolkachev
Yes, this looks like an insufficient # of file descriptors... Did you apply all required Solaris patches? There was one, mystically related to LDAP, after which the insufficient # of file descriptors mystically started to matter (before, MQ worked fine with only 256 descriptors despite Quick

Re: CRTMQM on Solaris 8

2004-08-20 Thread Pavel Tolkachev
in to get a fix since I don't have a version built at CSD07 at the moment. Best regards, Justin T. Fries WebSphere MQ Support Raleigh, North Carolina Pavel Tolkachev [EMAIL PROTECTED] Sent by: MQSeries List [EMAIL PROTECTED

Re: Invalid key database type was found V5.3 CSD05 SSL gsk6cmdf ailed for -type cms GSKit V6.0.5.43 Solaris 2.8

2004-08-19 Thread Pavel Tolkachev
Raj, I would recommend upgrading to CSD06 or later. I think I had this problem with CSD05 on Solaris. That time, I ended up with doing gsk6cmd on AIX and distributing files from there as needed. Anyway, if I am not mistaken, you won't be able to use any KDB created with CSD05 or earlier

Re: Invalid key database type was found V5.3 CSD05 SSL gsk6cmdf ailed for -type cms GSKit V6.0.5.43 Solaris 2.8

2004-08-19 Thread Pavel Tolkachev
Yes, that's what I am saying: I built keystores on AIX and distributed to Solaris :-) Pavel Rajesh-IT Sharma rajesh-it.sharma+exterTo: [EMAIL PROTECTED] [EMAIL PROTECTED]cc:

Re: Invalid key database type was found V5.3 CSD05 SSL gsk6cmdf ailed for -type cms GSKit V6.0.5.43 Solaris 2.8

2004-08-19 Thread Pavel Tolkachev
Hello Raj, Yes, you got it. BTW, the latest CSD is CSD07 if I am not mistaken. Pavel Rajesh-IT Sharma rajesh-it.sharma+exterTo: [EMAIL PROTECTED] [EMAIL PROTECTED]cc:

stunnel older MQ

2004-08-17 Thread Pavel Tolkachev
Hello all, Does anyone have an experience or just thoughts about securing MQ TCP communication channels using stunnel? It is possible that for some more time many applications here will run on older versions of MQ (including 2.1), where SSL is not available. Are there any known snags? Part of

Re: MQ manuals

2004-08-13 Thread Pavel Tolkachev
Hello Chris, This is just kind of ISBNs. What scheme would you expect from those? I usually put each file in the separate directory with the appropriate name; I put the different versions of the same document into the same directory; usually it is easy to guess by the document name which one

Re: MaxChannels - How high can you go?

2004-08-10 Thread Pavel Tolkachev
You may want to think of the maximum number of TCP connections your box can handle (in particular, if you open too much from the same client to a server, you can get problems on the client site due to the exhausted ephemeral port numbers). On a server, you may not have exactly this problem, but

Continuous forwarding of priority queue to a non-priority queue

2004-08-06 Thread Pavel Tolkachev
Hello all, One of my clients has a requirement to my application, which by its design and specification cannot properly process the queue where prioritized messages can be put, to process messages in accordance with their priorities. I figured out that the most rational way to meet it would be

Re: Continuous forwarding of priority queue to a non-priority queue

2004-08-06 Thread Pavel Tolkachev
this already. -- T.Rob -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Pavel Tolkachev Sent: Thursday, August 05, 2004 12:16 PM To: [EMAIL PROTECTED] Subject: Continuous forwarding of priority queue to a non-priority queue Hello all, One of my clients has

Re: Qmgr Discovery

2004-08-04 Thread Pavel Tolkachev
Bobbee, Just hook up your script to Tivoli or other monitoring system that is approved by security in your company and your security issues are gone .. to someone else :-). Seriously, you probably do not want to write all this zoo of paging, mailing and escalating rules that your enterprise

Re: Message under cursor

2004-08-03 Thread Pavel Tolkachev
Hello T.Rob: I still believe you are missing my point here: So after getting a message with MQGMO_MSG_UNDER_CURSOR, the cursor does not move nor does it point to a retrievable message. I have never argued that, I just said it was not documented. IMHO, that the MQGETting with

Re: Message under cursor

2004-08-03 Thread Pavel Tolkachev
Hello Sid, The way I use in a similar application that is working in many environments for many years and is supposed to meet the guaranteed messaging contract (potentially with duplicates though so it is not exactly transactional)) is to browse to the next message first, get msgId and then

Re: Message under cursor

2004-08-03 Thread Pavel Tolkachev
Hello Michael, I feel I am missing a lot of messages as well although not as many as you. As for the syncpoint solution, my application needs to browse and remove from different threads. Syncpoints do not work well between thread because they are local to single-threaded MQHCONN handle -- but

Re: Message under cursor

2004-08-01 Thread Pavel Tolkachev
Hello Roger, The doc does not say what is supposed to happen to cursor after getting a messages with MQGMO_MSG_UNDER_CURSOR. It says, however, that If the browse cursor is not currently pointing to a retrievable message, an error is returned by the MQGET call. and it says approximately same

Re: Moving the list server ?

2004-07-26 Thread Pavel Tolkachev
Also, supporting the list like this is a big commitment, often under-estimated, and the migration may be painful, especially for the infrequent users. Do we really have enough reasons to move off this one? Pavel Thomas, Don [EMAIL PROTECTED]

Re: MQSeries and Sun libc Patch

2004-07-08 Thread Pavel Tolkachev
Hello Brian, We have experienced similar problems recently although I cannot tell you what exactly patch was applied. The core reasons turned to be the soft limit of file descriptors per process which, according to the quick beginnings book, must be boosted to 1024 (I recommend 2048) but this

Re: Command Server Working Mechanisms

2004-06-30 Thread Pavel Tolkachev
driven by potential security exposures? Michael -Oorspronkelijk bericht- Van: MQSeries List [mailto:[EMAIL PROTECTED] Pavel Tolkachev Verzonden: Tuesday, June 29, 2004 11:25 PM Aan: [EMAIL PROTECTED] Onderwerp: Re: Command Server Working Mechanisms Thanks Tim, We (Monique and myself

Re: Command Server Working Mechanisms

2004-06-30 Thread Pavel Tolkachev
... why do you not want to run the command server and find something to replace it. Is it educational or are you driven by potential security exposures? Michael -Oorspronkelijk bericht- Van: MQSeries List [mailto:[EMAIL PROTECTED] Pavel Tolkachev Verzonden: Tuesday, June 29, 2004 11:25 PM

Re: Websphere MQ and MDB on Was 5.0 : relation between sessions and concurrent message consumption

2004-06-29 Thread Pavel Tolkachev
Hello Shanu, First, I am not a WAS person but I had a bit of exposure to other AS(es) and JMS. My guess is that the maximum number of messages is the direction to the AS to close a session and create a new session after this many messages has been pushed to the MDB by that session. Remeber

Re: Command Server Working Mechanisms

2004-06-29 Thread Pavel Tolkachev
Thanks Tim, We (Monique and myself are working together) are actually not after that book. The book says how to do things when the command server is running; our purpose is to understand if it is possible to write monitoring application that does not require command server to, for example,

Re: So long, and thanks for all the fish!

2004-06-28 Thread Pavel Tolkachev
Hello Bill, Have a nice retirement! You have a very right reminder at the footer of your e-mails -- just for the sake of seeing it I would appreciate your continuing mailing us from time to time :-). Have a blessed day, Pavel Beinert, William

Re: Not directly MQ - Time Syncing your servers

2004-06-23 Thread Pavel Tolkachev
Hello Peter, You may get something better than that on the local network but I doubt for the inter-network synchronization. Also, depending on the real-time clocks implementation, short periodic time error may be in tenths and of course hundredths -- unless you have bought some special

Re: Problems settting up SSL key database on Solaris using gsk6cmd

2004-06-08 Thread Pavel Tolkachev
Hello James, use gsk6cmd -cert -receive ... Also, while awaiting for your Verisign-signed certificate, you can practice in importing certificate by signing your request yourself using gsk6cmd -cert -sign ... and then importing them with -receive. Hope this will help, Pavel

Re: many svrconn instances, as many amqcrsta running

2004-06-08 Thread Pavel Tolkachev
Hello Benjamin, T.Rob is right in principle, of course. But I guess, the connections had to go down, anyway, with these tcp settings. Just in case, what was your tcp_keepcnt? And, did you check your new tcp parameters took effect immediately? Also, I am not sure if the change takes effect for

Re: many svrconn instances, as many amqcrsta running

2004-06-08 Thread Pavel Tolkachev
research. There seem to be no tcp_keepcnt on AIX, a command no -otcp_keepcnt returned my the following 0821-057 no: The ioctl SIOCGNETOPT system call failed.. again, many thanks. Maybe see you in Las Vegas? Ben Pavel Tolkachev pavel.tolkachev

Re: SSL, MQClients and Symmetric keys

2004-06-03 Thread Pavel Tolkachev
to gold than on how to use openssl. Same goes for makecert. I ordered the O'Reilly book on openssl today, hopefully the fact that it is 2 years old wont matter. Geez, this SSL stuff has put me in my place. -Original Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent

Re: SSL, MQClients and Symmetric keys

2004-06-03 Thread Pavel Tolkachev
SVRCONN channel name and what CipherSpec to specify) Is the second MQQueueManager key pair even necessary? -Original Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: Thursday, June 03, 2004 3:54 PM To: [EMAIL PROTECTED] Subject: Re: SSL, MQClients and Symmetric keys Hello Peter

Re: SSL, MQClients and Symmetric keys

2004-06-02 Thread Pavel Tolkachev
Hello Peter, Even if you are only interested in securing SVRCONN channels, you will still need a secret on every server (a server is always authenticated in SSL). For clients -- yes, you can use the same private key if distributing it is not a problem in your setup. But remember that both

Re: Changing MQXQH on the fly

2004-05-28 Thread Pavel Tolkachev
Quoting Pavel Tolkachev [EMAIL PROTECTED]: Hello all, We recently had a situation when some messages got stuck on the transmission queue due to the wrong sequence of actions for changing the destination queue manager. We had to delete messages, there were no harm as this was development. I

Re: Problem with clearing a queue

2004-05-28 Thread Pavel Tolkachev
if you don't know about it. Cheers Bill Anderson SITA Atlanta, GA Standard Messaging Engineering WebSphere MQ Service Owner 770-303-3503 (office) 404-915-3190 (cell) [EMAIL PROTECTED] http://www.mconnect.aero/ Pavel Tolkachev pavel.tolkachev

Re: Changing MQXQH on the fly

2004-05-28 Thread Pavel Tolkachev
05/27/2004 12:18 PM Please respond to MQSeries List Pavel, We do this type of work in a message exit... Pavel Tolkachev pavel.tolkachev@To: [EMAIL PROTECTED

Re: Problem with clearing a queue

2004-05-28 Thread Pavel Tolkachev
Thanks Paul, I did not realise that. I was not sure how to specify a channel in -xc, readme is not exactly clear and I assumed I would have to use something like the value MQSERVER env. var. Will try that. Pavel Paul Clarke [EMAIL PROTECTED]

Re: Changing MQXQH on the fly

2004-05-28 Thread Pavel Tolkachev
Thanks Paul, In this case, my plan for this situation would probably be to have ready DLQ handler rules to forward the messages to the other queue / queue manager and allow DLQ for the period of crisis (it is usually not present or put-inhibited in our configurations, as some people on the

Re: Changing MQXQH on the fly

2004-05-28 Thread Pavel Tolkachev
Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: Thursday, May 27, 2004 9:55 AM To: [EMAIL PROTECTED] Subject: Changing MQXQH on the fly Hello all, We recently had a situation when some messages got stuck on the transmission queue due to the wrong sequence of actions

Changing MQXQH on the fly

2004-05-27 Thread Pavel Tolkachev
Hello all, We recently had a situation when some messages got stuck on the transmission queue due to the wrong sequence of actions for changing the destination queue manager. We had to delete messages, there were no harm as this was development. I wonder if there is any way or tool to change

Re: iKeyman GUI and Java

2004-05-26 Thread Pavel Tolkachev
Hello Bill, 2 suggestions: 1. Use the JRE that comes with gsk package (I am not sure if it is there on Linux, but on AIX and Solaris it is). It is 1.3.something but it has whatever keyman needs. Set your PATH and JAVA_HOME to that one. 2. Try gsk6cmd instead of GUI. Hope this will help,

Re: Problem with clearing a queue

2004-05-26 Thread Pavel Tolkachev
Hello Gina, I had this problem just today -- looks like it is contagious :-) Stop channels, enable 'get' on the queue and remove all messages. Then restart channels (I also had to reset sender although I am not sure if I had to use ALTER QLOCAL(xmit.queue.name) GET(enabled) FORCE. And you

Re: Problem with clearing a queue

2004-05-26 Thread Pavel Tolkachev
/ Pavel Tolkachev pavel.tolkachev@To: [EMAIL PROTECTED] DB.COM cc: Sent by: MQSeriesSubject: Re: Problem with clearing a queue List [EMAIL

Re: SSL Ciphersuites supported by WMQ

2004-05-25 Thread Pavel Tolkachev
Hello Lee, Your 3rd choice should be the most secure and your 1st choice will be the fastest (I would expect CPU load lower in 3 times or more -- but please don't hold me on this) and supposedly less secure (due to the suspected vulnerabilities with RC4 (there were no successful attack known

Re: SSL channels and Self Signed certificates

2004-05-21 Thread Pavel Tolkachev
Hello Neil, I am not sure I remember whether or not you have to restart queue manager, however, it sounds to like your procedure of adding an additional queue manager was not supposed to work (unless you omitted something in your description). Namely, you did not mention you added the

Re: Problems building MQSeries Perl module on W2K

2004-05-19 Thread Pavel Tolkachev
Hello Tony, One of the problems seems to be related to the unfortunate MQ installation path (in the directory whose name contains spaces, Program Files). Try to go via scripts and check where it comes from (it may also come from registry in which case it may become trickier -- but try to use

Re: How to ensure an order in messages.

2004-05-17 Thread Pavel Tolkachev
Hello Nguyen, You can, if all of the following is true in addition to the messages being of same priority; 1. Both messages are put using same connection handle. 2. MQPUT calls completed successfully 3. There is no dead letter queue on any queue manager on the way of the message if the queue

Re: Java Clients and Security Hole???

2004-05-16 Thread Pavel Tolkachev
Hello Kumar, Client applications ask channel agents to do their job on their behalf. Channel agent's MCAUSER attribute is what matters for the authorization in this case; for more information, see System Administration Guide, Clients and Intercommunication books; to authenticate your client

Re: Connection error

2004-05-10 Thread Pavel Tolkachev
Hello Bobbee, I believe this means that the client machine closes the socket (I guess, preliminary, from the application protocol (MQI over TCP) point of view). Hope this will help, Pavel Robert Broderick [EMAIL PROTECTED]To: [EMAIL

Re: Application seeing 2009 (MQRC_CONNECTION_BROKEN) errors...

2004-05-07 Thread Pavel Tolkachev
Hello My understanding was, neither Miroslav nor Tony are using any channels. Also, wouldn't it be an FDC if this were the case? Pavel Emile Kearns [EMAIL PROTECTED]To: [EMAIL PROTECTED] TEMS.CO.ZA

Re: Backout of failed a C++ Application

2004-05-01 Thread Pavel Tolkachev
to 60 seconds, by default, before assuming there has been a communications failure. I found out the above just this week in Morag's and Paul's doc on channels: http://www-1.ibm.com/support/docview.wss?rs=203uid=swg24006699loc=en_UScs =utf-8lang=en -Original Message- From: Pavel Tolkachev

Re: Backout of failed a C++ Application

2004-04-30 Thread Pavel Tolkachev
Hello Neil, If this is a TCP client, this is possible (that connection on a server outlives the client app). Try to play with keepalive (I am not sure what is the default timeout on Windows though; on Solaris, it is set machine-wide and the default is sometimes 2 hours). You can try to set

Extended Transactional Client WLS

2004-04-29 Thread Pavel Tolkachev
Hello, Has anyone gotten these two working together? I am interested in sending a message from some session or other EJB to MQ queue, under the XA transaction, managed by Weblogic (8.1 SP2). I did not start trying yet; before going into it, I am trying to get encouraged by hearing that this is

Re: Message Tracking

2004-04-29 Thread Pavel Tolkachev
Hello Roger, As I wrote earlier this week, users mostly care about their data, not our CorrelIDs etc. and so I would log CRC32 or some other hash of data (Date, Time, queue name and MsgID would be useful to preserve, of course). In particular, one problem will be to convince users to log

Re: WebSphere MQ client recovery

2004-04-27 Thread Pavel Tolkachev
Hello Paul, Usha: I disagree with everyone :-). Or rather, I more like agree to Brian, but I would like to try to answer Usha's questions again, from the beginning: 2. For verifying the data are same, make some CRC32 (or, if the client is really crazy, SHA1) hash of the data and store them on

Re: SSL and certificate expiry

2004-04-23 Thread Pavel Tolkachev
For the first question, I usually designate 10 years. Pavel Lawrence Coombs [EMAIL PROTECTED]To: [EMAIL PROTECTED] M cc: Sent by: MQSeriesSubject: Re: SSL and

Re: Reading messages by JMSCorrelationID

2004-04-16 Thread Pavel Tolkachev
Hello Dennis, You may want to look into JMS selectors. E.g., see http://java.sun.com/j2ee/1.4/docs/api/javax/jms/Session.html#createConsumer(javax.jms.Destination,%20java.lang.String) Hope this will help, Pavel Dennis Bryngelson [EMAIL PROTECTED]

Re: Reading messages by JMSCorrelationID

2004-04-16 Thread Pavel Tolkachev
to read by correlation ID, if so can you give me some pointers on how to get this to work. Thanks much, Steve Lashinski Middleware Hartford Life Woodbury: (651)738-4307 Plymouth: (763)765-4002 |-+ | | Pavel Tolkachev

Re: MQ Security data in SYSTEM.AUTH.DATA.QUEUE

2004-04-05 Thread Pavel Tolkachev
Hello T.Rob, I do not believe it is possible unless you are root. The way for the process to change its group id is to change the memory in the process header belonging to the kernel (there is no Unix system call for that -- at least I am not aware; setgid() issued by a non-root user will only

Re: AW: Boot problem on Solaris: solved but HOW?

2004-04-02 Thread Pavel Tolkachev
as mentioned in the FAQ, it only affects Solaris and some Linux. Cheers, Ian -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Pavel Tolkachev Sent: Friday, 2 April 2004 9:26 AM To: [EMAIL PROTECTED] Subject: Boot problem on Solaris: solved but HOW? Hello, We

Re: VAX Security...

2004-04-01 Thread Pavel Tolkachev
herein do not necessarily reflect those of J.P. Morgan Chase Co., its subsidiaries and affiliates. The following file(s) have been deleted by: Pavel Tolkachev on 4/1/2004 5:38:51 PM InterScan_Disclaimer.txt -- This e-mail may contain confidential and/or privileged information. If you

Re: SSL

2004-03-18 Thread Pavel Tolkachev
Hello Morag, The first link (Learn more about SSL) seems to be broken on the page... Have a nice day, Pavel Morag Hughson [EMAIL PROTECTED]To: [EMAIL PROTECTED] OM cc:

Re: WS-Reliable Messaging

2004-03-17 Thread Pavel Tolkachev
Hello Paul, Thanks for the link -- it is definitely of interest of mine. The specification seems to define not an API but the data model for guaranteed message exchange (disregard the word reliable whose meaning has been long back eroded by many vendors, including some of the authors) and one

Re: Locking down MQ files/registry on Windows

2004-03-16 Thread Pavel Tolkachev
Well, I have to disagree here. There is nothing in Windows architecture that would prevent people from doing their jobs without being admins, especially if you scrutinize a set of applications installed on production NT server as well as you do for Unix. I lean to the Rao's point of view: such

Re: Locking down MQ files/registry on Windows

2004-03-16 Thread Pavel Tolkachev
BTW, something that may work (but only against really stupid administrators :-) ): REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools=dword:0001 Pavel Adiraju, Rao [EMAIL PROTECTED]

Re: Strange problem when compiling C on HP-UX

2004-03-15 Thread Pavel Tolkachev
Hello Rick, To be precise, # must be the first character in line to be recognized as a starting character of a pre-processor directive :-) Hope this will help, Pavel Roger Lacroix [EMAIL PROTECTED]To: [EMAIL PROTECTED]

Re: Running trigger monitor under non-mqm account

2004-03-01 Thread Pavel Tolkachev
in their environment as well as it now works in mine. Have a nice day, Pavel - Forwarded by Pavel Tolkachev/NewYork/DBNA/DeuBa on 03/01/2004 02:11 PM - Pavel Tolkachev To: MQSeries List [EMAIL PROTECTED

Re: Running trigger monitor under non-mqm account

2004-02-27 Thread Pavel Tolkachev
that.. * Chris Kline IBM Global Services IBM Certified Websphere MQ Specialist Strategic Middleware Services (56SD) - MQ Series/Vitria Phone: (303) 924-1767 T/L 347-1767 Email: [EMAIL PROTECTED] (Embedded image moved to file: pic05249.gif)Pavel Tolkachev pavel. [EMAIL PROTECTED

Re: Running trigger monitor under non-mqm account

2004-02-26 Thread Pavel Tolkachev
image moved to file: pic27446.gif)Pavel Tolkachev [EMAIL PROTECTED] Pavel Tolkachev [EMAIL PROTECTED] Sent by: MQSeries List [EMAIL PROTECTED

Re: Running trigger monitor under non-mqm account

2004-02-26 Thread Pavel Tolkachev
Kline IBM Global Services IBM Certified Websphere MQ Specialist Strategic Middleware Services (56SD) - MQ Series/Vitria Phone: (303) 924-1767 T/L 347-1767 Email: [EMAIL PROTECTED] (Embedded image moved to file: pic05249.gif)Pavel Tolkachev [EMAIL PROTECTED] Pavel

Running trigger monitor under non-mqm account

2004-02-26 Thread Pavel Tolkachev
Hello, Have anyone managed to run trigger monitor on behalf of non-mqm user? On AIX platform, we copied the binary without set-id bits and try to run it # path/to/runmqtrm -q INIT.QUEUE.NAME -m QM.NAME 5724-B41 (C) Copyright IBM Corp. 1994, 2002. ALL RIGHTS RESERVED. WebSphere MQ trigger

Re: AW: Re: Performance observations and questions

2004-02-18 Thread Pavel Tolkachev
(wrapped API) that I have to use? Any hint on this would be extremely helpful. Thanks, Enrico -Ursprüngliche Nachricht- Von: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Gesendet: Dienstag, 17. Februar 2004 01:54 An: [EMAIL PROTECTED] Betreff: Re: Performance observations and questions Enrico

Re: Performance observations and questions

2004-02-16 Thread Pavel Tolkachev
Enrico, Make sure your application does not check the size of the transmission queue each time before putting the message; otherwise, it may affect the performance, especially if you are interested in highest possible one. An alternative approach (I am not aware of *the* right one) would be

Re: MQ wrapper to new Java App Server World?

2004-02-10 Thread Pavel Tolkachev
Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: 09 February 2004 18:20 To: [EMAIL PROTECTED] Subject: Re: MQ wrapper to new Java App Server World? Hello Neil, To me it sounds as you will have to make your API wrapper your own JMS provider. You will most probably have to implement

Re: MQ wrapper to new Java App Server World?

2004-02-09 Thread Pavel Tolkachev
Hello Neil, I have never tried it with MQ JMS provider, but looking in the doucmentation, it does include its own implementation of ConnectionConsumer (which is exactly the facility intended for an application server to push messages into its MessageListeners, which MDBs are). So I would

Re: MQ wrapper to new Java App Server World?

2004-02-09 Thread Pavel Tolkachev
-Original Message- From: Pavel Tolkachev [mailto:[EMAIL PROTECTED] Sent: 09 February 2004 15:32 To: [EMAIL PROTECTED] Subject: Re: MQ wrapper to new Java App Server World? Hello Neil, I have never tried it with MQ JMS provider, but looking in the doucmentation, it does include its own

  1   2   3   >