Configuring the IBM IIB/ACE monitoring extension for authenticated queue manager connections


Note

In order to configure the extension to be able to open an authenticated connection to a queue manager, you must set extension preferences to values representing the user name and password which are to be used to connect. These preferences are stored in the EAA.XML file in the 

MainView Middleware Monitor

 Agent directory. You have the option of using obfuscation to conceal the password. Note however that this obfuscation is not cryptographic encryption. Care must be taken to ensure that the agent and extension files and directories have sufficient protection to prevent unauthorized individuals from accessing these parameters.

To set the connection mode, user name and password for a broker named WMQBROKER using a queue manager named MYQMGR with a clear text password, the agentpref command would be something like:

agentpref --set "com.bmc.mmpa.wmb.monitor" --pref_path "Default!ComMQSoftwareWebSphereMBBroker" "Default!WMQBROKER" WMQQmgrName <MYQMGR> WMQAuthType userpw WMQUserName <MyUserName> WMQPassword <MyPassword>

To use an obfuscated password, first use either the OBFPassword or mqsusertool utilities on the MainView Middleware Monitor server machine, then use the output from that utility as the password on agentpref command line.

Using OBFPassword
OBFPassword.bat MyPassword
OBF:1obr1ymj1p4j1rc41vn61vnw1ra21p571ylv1od3
agentpref --set "com.bmc.mmpa.wmb.monitor" --pref_path "Default!ComMQSoftwareWebSphereMBBroker" "Default!WMQBROKER" WMQQmgrName <MYQMGR> WMQAuthType userpw WMQUserName <MyUserName> WMQPassword "OBF:1obr1ymj1p4j1rc41vn61vnw1ra21p571ylv1od3"

 To use a base64 encoded password, first use the mqsusertool utilities on the TrueSight Middleware and Transaction Monitor server machine, then use the output from that utility as the password on the agentpref command line.

Example: Using mqsusertool
mqsusertool --encode –t ActiveDirectory MyPassword
B64:IgBiAG0AYwBzAG8AZgB0AHcAYQByAGUAIgA=
agentpref --set "com.bmc.mmpa.wmb.monitor" --pref_path "Default!ComMQSoftwareWebSphereMBBroker" "Default!WMQBROKER" WMQQmgrName <MYQGR> WMQAuthType userpw WMQUserName <MyUserName> WMQPassword "B64:IgBiAG0AYwBzAG8AZgB0AHcAYQByAGUAIgA="

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*