IBM Software Group

®

WebSphere® Support Technical Exchange

Using WebSphere Message Broker Configurable Services

Michael Patton (mspatton@us.ibm.com)WebSphere Message Broker L2 Support Team Lead22 September 2010

IBM Software Group

WebSphere® Support Technical Exchange 2 of 29

Agenda

What is a Configurable ServiceBasic SecurityExamples

IBM Software Group

WebSphere® Support Technical Exchange 3 of 29

What is a Configurable Service?

IBM Software Group

WebSphere® Support Technical Exchange 4 of 29

What is a Configurable Service

IBM Software Group

WebSphere® Support Technical Exchange 5 of 29

What is a Configurable Service Pros

Straightforward to configure

Visible in Admin tooling Cons

Require additional initial effort

Broker specific

IBM Software Group

WebSphere® Support Technical Exchange 6 of 29

What is a Configurable Service mqsicreateconfigurableservice mqsideleteconfigurableservice mqsireportproperties mqsichangeproperties

-c to identify the configurable service type. -o to identify the name of the configurable service object. -n to identify the properties of the service. -v to identify the values of the properties specified.

mqsireportproperties brokerName -c AllTypes -o AllReportableEntityNames -r

IBM Software Group

WebSphere® Support Technical Exchange 7 of 29

Basic Security Security ID

SSHIdentity File and passphrase

IBM Software Group

WebSphere® Support Technical Exchange 8 of 29

Setting a security file - mqsisetdbparms Use the mqsisetdbparms command to associate a specific user ID

and password (or SSH identity file) with one or more resources that are accessed by the broker

-n resource name (below) -u userid -p password dsn:: - omit this prefix when using

cics:: - CICS Connection

jdbc:: - Java™ Database Connection

jms:: - Java Messaging Service

jndi:: - Java Naming and Directory Interface

ldap:: - Lightweight Directory and Access Protocol

eis:: - external adapters, ie., SAP

ftp:: - File Transfer Protocol

sftp:: - Secure File Transfer Protocol

sfm:: - Service Federation Management

IBM Software Group

WebSphere® Support Technical Exchange 9 of 29

Setting a security profile – ftp example mqsisetdbparms v70broker -n ftp::ftpSecId -u

username -p password mqsisetdbparms v70broker -n sftp::sftpSecId -u

username -p password mqsisetdbparms v70broker -n sftp::sftpSecId -u

username -r SSHIdentityFile -r passphrase

SSHIdentityFile : Many UNIX® systems now provide an SSH implementation as part of their default distribution

IBM Software Group

WebSphere® Support Technical Exchange 10 of 29

Aggregation Configurable Service Node Property

Timeout Admin Property

queuePrefix

Five Queues for Aggregation•SYSTEM.BROKER.AGGR.QueuePrefix.CONTROL •SYSTEM.BROKER.AGGR.QueuePrefix.REPLY •SYSTEM.BROKER.AGGR.QueuePrefix.REQUEST •SYSTEM.BROKER.AGGR.QueuePrefix.UNKNOWN •SYSTEM.BROKER.AGGR.QueuePrefix.TIMEOUT

mqsicreateconfigurableservice v70broker –c Aggregation –o myAggCfgSvc–n queuePrefix,timeoutSeconds –v myPrefixname,60

Class -c Aggregation

IBM Software Group

WebSphere® Support Technical Exchange 11 of 29

Collection Configurable Service

Node PropertycollectionExpirySeconds

Admin PropertyqueuePrefix

• SYSTEM.BROKER.EDA.QueuePrefix.EVENTS

• SYSTEM.BROKER.EDA.QueuePrefix.COLLECTIONS

Class -c Collector

IBM Software Group

WebSphere® Support Technical Exchange 12 of 29

EIS Configurable Service

Node Property (none) Admin Property

jarsURL

nativeLibs

mqsichangeproperties v70broker –c EISProviders –o EIS_type –n jarsURL,nativeLibs –v c:\sapjco\jars,c:\sapjco\bin

Class -c EISProviders

EIS_typesPeoplesoft SiebelSAP Twineball

IBM Software Group

WebSphere® Support Technical Exchange 13 of 29

SAPConnection Configurable Service

applicationServerHost assuredOnceDelivery connectionidleTimeout gatewayHost gatewayService loadBalanacing logonGroup MessageServerHost numberOfListeners retryConnectionOnStartup

Class -c SAPConnection

retryInterval retryLimit RCFTraceLevel RFCTracePath RFCTraceOn rfcProgramID SAPSystemID sharedTidStoreClientDefinitionFile sharedTidStoreQmgr systemNumber

IBM Software Group

WebSphere® Support Technical Exchange 14 of 29

FTP Configurable service

IBM Software Group

WebSphere® Support Technical Exchange 15 of 29

IMS Configurable Service

Node PropertyHostname

PortNumber

DataStoreName

SocketTimeoutSeconds

ExecutionTimeoutSec mqsisetdbparms

Class -c IMSConnect

mqsicreateconfigurableservice v70broker -c IMSConnect -o myIMSCfgSvc -n Hostname,PortNumber,DataStoreName -v test.ims.ibm.com,9999,IMSA

IBM Software Group

WebSphere® Support Technical Exchange 16 of 29

Java Class Loader Configurable Service

Node Properties (none) Admin Properties

includedDeployedJars

sharedJarPath

-o configurable service name

Requires EG restart/reload for a changed class to be loaded.

Class -c JavaClassLoader

IBM Software Group

WebSphere® Support Technical Exchange 17 of 29

JDBC Configurable Service

Similar to IMS Configurable service, you must change an existing provider for security

1. mqsisetdbparms

mqsisetdbparms broker_name -n security_identity –u userID -p password

2. mqsichangeproperties

mqsichangeproperties broker_name -c JDBCProviders -o service_name -n securityIdentity -v security_identity

Service name is the IBM® preconfigured name

Class -c JDBCProviders

IBM Software Group

WebSphere® Support Technical Exchange 18 of 29

JDBC Configurable Service 2 ConnectionUrlFormat ConnectionUrlFormatAttr1 2 3 4 5 databaseName databaseType (ie DB2) databaseVersion (ie 9.1) environmentParms jarsURL portNumber securityIdentity ServerName type4DatasourceClassName type4DriverClassName maxConnectionPoolSize

IBM Software Group

WebSphere® Support Technical Exchange 19 of 29

JMS Configurable Service

Similar to IMS Configurable service, you must change an existing provider for security

Supplied configurables that have been suppliedActiveMQ BEA_WeblogicFioranoMQ Generic_FileGeneric_LDAP JBossJOnAS JoramOpenJMS Oracle_OEMSSeeBeyond SonicMQ SwiftMQ Tibco_EMSWebSphere_MQ WebSphere_WAS_Client

Class -c JMSProviders

IBM Software Group

WebSphere® Support Technical Exchange 20 of 29

JMS Configurable Service 2 initialContextFactory jarsURL jndiBindingsLocation jndiEnvironmentParms nativeLibs proprietaryAPIHandler proprietaryAPIAttr1 2 3 4 5

Use mqsichangeproperties to alter a preconfigured servicemqsichangeproperties v70broker -c JMSProviders -o

Websphere_MQ –n initialContextFactory –v com.sun.jndi.fscontext.RefFSContextFactory

IBM Software Group

WebSphere® Support Technical Exchange 21 of 29

Monitoring Configurable Service

Node Properties (none) Admin Properties (profileProperties)

1.Create a monitoring profile XML file2.Create a configurable service for the monitoring profile

mqsicreateconfigurableservice v70broker -c MonitoringProfiles -o myMonitoringProfile

3.Alter the profile to pair it with the configurable servicemqsichangeproperties v70broker -c MonitoringProfiles -o

myMonitoringProfile -n profileProperties -p myMonitoringProfile.xml

Class -c MonitoringProfiles

IBM Software Group

WebSphere® Support Technical Exchange 22 of 29

Security Profile Configurable Service

configurable service is indicated at the flow level in the bar file

Class -c SecurityProfiles

Properties•Authentication•authenticationConfig•Authorization•AuthorizationConfig•Mapping•mappingConfig•passwordValue•propagation

IBM Software Group

WebSphere® Support Technical Exchange 23 of 29

Service Registry Configurable ServiceIBM provides a predefined DefaultWSRR service

connectionFactoryName connectionTimeout enableCacheNotification endpointAddress initialContextFactory locationJNDIBinding needCache predefinedCacheQueries refreshQueriesAfterNotification subscriptionTopic timeout

Class -c ServiceRegistries

Use mqsichangeproperties !

IBM Software Group

WebSphere® Support Technical Exchange 24 of 29

SMTP Configurable ServiceUsed with the mail node serverName securityIdentity

1.mqsicreateconfigurableservice v70broker –c SMTP –o SMTP_MyAlias

2.mqsichangeproperties v70broker –c SMTP –o SMTP_MyAlias –n serverName –v smtp.mqsi.ibm.com:25

3.mqsichangeproperties MY_BROKER –c SMTP –o SMTP_MyAlias –n securityIdentity –v mySecurityIdentitymqsisetdbparms

Class -c SMTP

IBM Software Group

WebSphere® Support Technical Exchange 25 of 29

Timer Configurable Service

Node Property timeoutIntervalSeconds

Admin PropertyqueuePrefix

• SYSTEM.BROKER.TIMEOUT.QueuePrefix.QUEUE

Class -c Timer

IBM Software Group

WebSphere® Support Technical Exchange 26 of 29

Summary

What is a Configurable Service Basic Security Examples

A complete list configurable service properties http://publib.boulder.ibm.com/infocenter/wmbhelp/v7r0m0/topic/

com.ibm.etools.mft.doc/an60170_.htm

IBM Software Group

WebSphere® Support Technical Exchange 27 of 29

Additional WebSphere Product Resources Learn about upcoming WebSphere Support Technical Exchange webcasts, and access

previously recorded presentations at:http://www.ibm.com/software/websphere/support/supp_tech.html

Discover the latest trends in WebSphere Technology and implementation, participate in technically-focused briefings, webcasts and podcasts at:http://www.ibm.com/developerworks/websphere/community/

Join the Global WebSphere Community: http://www.websphereusergroup.org

Access key product show-me demos and tutorials by visiting IBM Education Assistant:http://www.ibm.com/software/info/education/assistant

View a webcast replay with step-by-step instructions for using the Service Request (SR) tool for submitting problems electronically:http://www.ibm.com/software/websphere/support/d2w.html

Sign up to receive weekly technical My Notifications emails:http://www.ibm.com/software/support/einfo.html

IBM Software Group

WebSphere® Support Technical Exchange 28 of 29

We Want to Hear From You!

Tell us about what you want to learn

Suggestions for future topicsImprovements and comments about our webcasts

We want to hear everything you have to say!

Please send your suggestions and comments to: wsehelp@us.ibm.com

IBM Software Group

WebSphere® Support Technical Exchange 29 of 29

Questions and Answers