runmqsfb (run IBM MQ Bridge to Salesforce)
Configure and run the IBM® MQ Bridge to Salesforce.
Note: The IBM MQ Bridge to Salesforce is deprecated across all releases from November 22 2022 (see US Announcement letter 222-341).
Syntax
The diagram shows the syntax for the runmqsfb command usage as described in note 1.Usage notes
- You can run the runmqsfb command to start the IBM MQ Bridge to Salesforce and connect to Salesforce and IBM MQ.
When the connections are made, the bridge receives Salesforce generated events and publishes them to an IBM MQ
network, or create event messages for Salesforce platform
events.
When you use the command for runtime processing, the required parameters are -f, with the name of the previously created configuration file, and -r with the name of the log file. When the other command parameters are also given on the command line, they override the values in the configuration file. The option allows a core default configuration to be created and provides a simple way to handle minor variations such as the queue manager name.runmqsfb -f configFile -r logFile -m QMgrName -t TopicString -e EventName -p PushtopicName -d debugLevel -i interval -w WaitTime -k killFile
- You can also use the runmqsfb command to generate a
configuration file that is used to define the parameters that are needed to connect to Salesforce and IBM MQ.
When you are creating the configuration file, the -f and -b parameters are optional, the input configuration file is included in the samples directory for the IBM MQ Bridge to Salesforce, /opt/mqm/mqsf/samp.
When you run the command in this way, you are prompted to enter values for each of the configuration parameters. To keep an existing value press Enter. To remove an existing value press Space, then Enter. For more information, see Configuration parameters.runmqsfb [-b][-f inputConfigFile] -o outputConfigFile
- From IBM MQ 9.2.0, the usage of the enhanced protection parameters is as follows:
- Configuration mode
- Newly entered passwords are written to the output configuration file protected with the new key. Note that preexisting passwords are not changed in format.
- Runtime mode
- When a password is decrypted, warning messages are issued if the password is found to be in the
old format, and the name of the parameter causing the warning is given in the message to encourage
you to migrate. However, the bridge continues processing commands.Note: The warning message is not issued if you have specified the -sp 0 parameter on the command line, as you explicitly wanted to use old formats.
Command line parameters
- -m QMgrName or ConnFactoryName
- Queue manager or Connection Factory name.
- -r logFile
- Required. Location and name of the log file for trace information. You can specify the log file path and name in the configuration file or on the command line.
- -t TopicString
- IBM MQ topic root.
- -e EventName
- Salesforce platform event name (can repeat). You can
specify multiple -e entries on the command line, one for each event type that
the bridge listens for. You must provide the base part of the event name. The bridge automatically
adds "
/event
" or "/topic
" prefixes when it connects to Salesforce. Multiple -e parameters can be comma-separated. - -p PushtopicName
- Salesforce push topic name (can repeat). You can specify
multiple -p entries on the command line, one for each topic type that the
bridge listens for. You must provide the base part of the topic name. The bridge automatically adds
"
/event
" or "/topic
" prefixes when it connects to Salesforce. Multiple -p parameters can be comma-separated. - -i interval
- Monitor interval. Enter 0 to disable monitoring.
- -f inputConfigFile
- Configuration file. The -f parameter is required when you are running the runmqsfb command to start the IBM MQ Bridge to Salesforce, as described in usage note 1. You can optionally use the -f parameter to reuse some of the values from an existing inputConfigFile, as described in usage note 2, and also enter some of the new values. If you do not specify the -f parameter when you are creating the configuration file, all the values for the parameters you are prompted for are empty.
- -n ApplicationInstanceName
- If you have multiple instances of the bridge on the same queue manager,this option gives you a way to distinguish each instance in the monitoring. This identifier is added to the $SYS topic as part of the application name, so that monitors like amqsrua can get separate metadata trees.
- -q ReplyStatusQueueName
- The default value is SYSTEM.SALESFORCE.SYNCQ.
- -o outputConfigFile
- New configuration file. When you run the command with the -o parameter, runmqsfb command loads existing configuration values from the -f file and prompts for new values for each configuration parameter.
- -k killFile
- A file to cause the bridge to exit. When you run the command with the -k parameter and specify a file, if the file exists, it causes the bridge program to exit. Using this file is an alternative way to stop the program when you don't want to use Ctrl+C or kill command. The file is deleted by the bridge on startup in case it exists. If the deletion fails, the bridge abends but monitors for the recreation of the file.
- -d debugLevel
- Debug level, 1, or 2.
- 1
- Terse debug information is displayed.
- 2
- Verbose debug information is displayed.
- -w WaitTime
- Wait before fully starting.
- -b
- Use environment variables to drive the configuration, instead of interactive prompts. This allows the configuration to be set programatically.
- -sf file
- File containing password protection key.
- -sp mode
- Password protection mode. The values can be:
- 2
- Use the latest password protection mode. This is the default value from IBM MQ 9.2.2.
- 1
- Use the IBM MQ 9.2 password protection mode for compatibility with versions earlier than IBM MQ 9.2.2. This is the default value in versions earlier than IBM MQ 9.2.2.
- 0
- Use the deprecated password protection mode that is compatible with versions earlier than IBM MQ 9.2.
Configuration parameters
When you run the runmqsfb command to create the configuration file, the
parameters are stepped through in four groups. Passwords are obfuscated and are not displayed as you
type. The generated configuration file is in JSON format. You must use the
runmqsfb command to create the configuration file. You cannot edit the passwords
and security certificate information directly in the JSON file.
- Connection to queue manager
- Parameters relating to the IBM MQ queue manager.
- IBM MQ Queue manager or JNDI CF
- Required.
- IBM MQ Base Topic
- Required. All events are published by using the topic root as the prefix to the Salesforce event name.
- IBM MQ Channel
- Blank channel implies local bindings.
- IBM MQ Conname
- Uses standard connection name format of "host(port), host(port)" to enable multiple destinations such as for multi-instance queue managers. Blank conname implies local bindings.
- IBM MQ Publication Error Queue
- Required for creating platform event messages. IBM MQ error queue for processing bad input messages. The default queue SYSTEM.SALESFORCE.ERRORQ is created when you run the mqsfbSyncQ.mqsc script command that also creates the required synchronization queue on the queue manager.
- IBM MQ CCDT URL
- If a TLS connection is required to the queue manager, you must use a JNDI or CCDT definition.
- JNDI implementation class name
- The class name of your JNDI provider. The "queue manager name" parameter refers to the connection factory name when you are using JNDI.
- JNDI provider URL
- The endpoint of your JNDI service.
- IBM MQ UserId
- IBM MQ Password
- Connection to Salesforce
- Parameters relating to Salesforce.
- Salesforce Userid (required)
- Required. Log in email for your Salesforce account.
- Salesforce password (required)
- Required. Password for your Salesforce account.
- Salesforce security token (required)
- Required. Security token that you can generate from the Security controls section of the Administer menu of your Salesforce Force.com Home page.
- Login Endpoint
- Salesforce login endpoint URL, https://login.salesforce.com.
- Consumer key
- The consumer key that you generate when you add the IBM MQ Bridge to Salesforce as a connected application in your Salesforce account. For more information, see Step 5 in Configuring the IBM MQ Bridge to Salesforce
- Consumer secret
- The consumer secret that is generated along with the consumer key.
OAuth consumer key and secret values are optional but must be considered for production systems.
- Certificate stores for TLS connections
- Parameters relating to certificate stores for TLS connections.
- Personal keystore for TLS certificates
- Required. The keystore that you create in your Salesforce account. For more information, see Step 3 in Configuring the IBM MQ Bridge to Salesforce.
- Keystore password
- Required. The password that you create when you are exporting the keystore from your Salesforce account.
- Trusted store for signer certificates
- Required. If you do not add the trusted store, the personal keystore for TLS certificates is used.
- Trusted store password
- Required. If the personal keystore for TLS certificates is used, this is the password for the keystore for TLS certificates.
- Use TLS for MQ connection
- If you are using TLS for your IBM MQ connectivity, you can use the same keystore that you used to connect to Salesforce.
For the Salesforce connection, a truststore must be available and contain at least the signer certificates to validate the Salesforce system. Only TLS 1.1 and TLS 1.2 protocols are supported for connection to Salesforce. A user certificate is not required. If you don't provide a truststore parameter, the keystore is used for both roles. The stores can be the same as the one configured for the IBM MQ connection in the CCDT or JNDI.
- Behavior of bridge program
- Parameters relating to the behavior of the IBM MQ Bridge to Salesforce.
- Push topic names
- You can provide one push topic name at a time and then move on to the next parameter by pressing enter.
- Platform event names
- You can provide one platform event name at a time and then move on to the next parameter by pressing enter.
- Monitoring frequency
- IBM MQ Monitoring frequency.
- At least once delivery
- Quality of service. At-least-once or at-most-once delivery.
- Subscribe to IBM MQ publications for platform events
- Required. The default option is N. You must enter Y to enable the bridge feature for creating event messages for Salesforce platform events.
- Publish control data with the payload
- On republish, send full message not only subject.
- Delay before starting to process events
- Delay before the bridge starts to process events.
- Runtime logfile for copy of stdout/stderr
- Path to and name of the log file for the tracing information.
- Bridge unique identifier
- The default value is no Bridge unique identifier specified.
- Treat unknown Salesforce topic as warning
- The default option is N.
- Continue to retry after maximum reconnection attempts
- The default option is N.
- At-least-once delivery for IBM MQ publications?
- The value can be Y or N, and the default value is not set. The value is inherited from another quality of service attribute.
- MQ Replay Status Queue
- The default value is SYSTEM.SALESFORCE.SYNCQ.
- Number of logfiles
- The default value is
3
. - Maximum size of each logfile
- The default value is 2097152 bytes (2 MB) .
The configuration is only read on startup of the bridge process. Changes to the configuration require a restart, such as through the IBM MQ Service definitions.
Examples
The -f parameter is optional when you use the
runmqsfb to create the configuration file as described in the usage note 2.
runmqsfb -f inputConfigFile -o outputConfigFile
In this example, the
outputConfigFile is
created:runmqsfb -o outputConfigFile
The -f parameter is required when you use the
runmqsfb command to run the IBM MQ Bridge to Salesforce,
as described in the usage note 1.
runmqsfb -f inputConfigFile -r logFile