MQ Internet Pass Thru (MQIPT) - Unkown Host error
Dan deVries
----------
I have set up MQ Series and MQ Internet Pass-Thru (MQIPT) on 2 AIX
boxes on the same subnet to test a secure messaging configuration. (As
shown below)
---------------------- ----------------------
| ServerA | | ServerB |
| MQSeries => MQIPT -----------> MQIPT => MQSeries |
---------------------- ----------------------
Having successfully tested direct MQSeries => MQseries communication
between Servers A & B (in both directions) I started MQIPT and
configured all services as in diagram above.
PROBLEM
-------
Logs with full tracing indicate that MQSeries => MQIPT comms on
ServerA is successful. However, the connection from ServerA_MQIPT =>
ServerB_MQIPT is failing with errors logged as follows:
--- mqipt.log ---
Fri Apr 12 19:31:17 BST 2002 (53) MQCPI013 Connection from ServerA to
host ServerB closed
--- iptroute1427.trc ---
Time: 2002.04.12 19:31:17.952
Class: com.ibm.mq.ipt.ConnectionThread
Method: run
Thread ID: ConnThd for Route 1427-3
Logger: TraceLogger 1427
ServerB is an unknown host
Time: 2002.04.12 19:31:17.952
Class: com.ibm.mq.ipt.ConnectionThread
Method: run
Thread ID: ConnThd for Route 1427-3
Logger: TraceLogger 1427
IOException in run() : , p1=java.io.IOException: Unknown Host
ServerB
-> com.ibm.mq.ipt.ConnectionThread.closeAllConnections (ConnThd for
Route 1427-3) 2002.04.12 19:31:17.952
-----------------------------------
It is the "Unknown Host" that is bothering me as both hosts have been
correctly defined in /etc/hosts, exist on our DNS server, have been
verified with telnet and worked fine when we tested direct MQSeries =>
MQSeries messaging.
I have included the mqipt.conf files for both servers at the bottom of
this post. To assist troubleshooting we have disabled SSL.
SOLUTION
--------
????? Any help would be greatly appreciated.
Regards,
Dan de Vries
---------- Server A mpipt.conf ----------
[global]
CommandPort=1881
RemoteShutDown=true
MinConnectionThreads=5
MaxConnectionThreads=100
IdleTimeout=20
ClientAccess=true
QMgrAccess=true
HTTP=false
HTTPChunking=false
Trace=5
ConnectionLog=true
MaxLogFileSize=50
AccessPW=MQIPT
[route]
Name=ServerB_IPT to ServerA_MQSeries
Active=true
ListenerPort=1428
Destination=ServerA
DestinationPort=1429
SSLServer=false
SSLServerCipherSuites=SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSLServerKeyRing=/usr/opt/mqipt/sslSample.pfx
SSLServerKeyRingPW=/usr/opt/mqipt/sslSample.pwd
SSLServerDN_O=IBM
SSLServerDN_CN=*Blake
SSLServerAskClientAuth=false
[route]
Name=ServerA_MQSeries to MQServerB_IPT
Active=true
ListenerPort=1427
Destination=ServerB
DestinationPort=1428
SSLClient=false
SSLClientCipherSuites=SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSLClientKeyRing=/usr/opt/mqipt/sslSample.pfx
SSLClientKeyRingPW=/usr/opt/mqipt/sslSample.pwd
SSLClientDN_O=IBM
---------- Server B mpipt.conf ----------
[global]
CommandPort=1881
RemoteShutDown=true
MinConnectionThreads=5
MaxConnectionThreads=100
IdleTimeout=20
ClientAccess=true
QMgrAccess=true
HTTP=false
HTTPChunking=false
Trace=5
ConnectionLog=true
MaxLogFileSize=50
AccessPW=MQIPT
[route]
Name=ServerA_IPT to ServerB_MQSeries
Active=true
ListenerPort=1427
Destination=ServerB
DestinationPort=1428
SSLServer=false
SSLServerCipherSuites=SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSLServerKeyRing=/usr/opt/mqipt/sslCAdefault.pfx
SSLServerKeyRingPW=/usr/opt/mqipt/sslCAdefault.pwd
SSLServerDN_O=IBM
SSLServerDN_CN=*Blake
SSLServerAskClientAuth=false
[route]
Name=ServerB_MQSeries to ServerA_IPT
Active=true
ListenerPort=1430
Destination=ServerA
DestinationPort=1428
SSLClient=false
SSLClientCipherSuites=SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSLClientKeyRing=/usr/opt/mqipt/sslSample.pfx
SSLClientKeyRingPW=/usr/opt/mqipt/sslSample.pwd
SSLClientDN_O=IBM
Dan deVries
SOLUTION
----------------------------
We were incorrectly running mqipt with the "x" option as follows
> mqipt . x
This we assumed meant that SOCKS was disabled, when in fact this
option enabled SOCKS. We removed the "x" option and the "Host not
found" problem disappeared.
Thanks,
Dan