| Author |
Message |
 Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
 Forum: IBM MQ Security Posted: Mon Aug 01, 2011 10:15 am Subject: MQ Explorer and RACF password validation |
| This was my own personal strategy to decide how I will secure WMQ. Whether I allow users to use MQ Explorer purely for read only purposes by specifying an MCAUSER that has the relevant access then all ... |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 6:44 am Subject: MQ Explorer and RACF password validation |
| I will have a think about what strategy to take. Thank you to both of you for your help. |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 6:34 am Subject: MQ Explorer and RACF password validation |
| I performed some tests with the MCAUSER field. When I left it blank it did not inherit the started task userid for the CHIN address space, for some reason it used my name which failed as there is no u ... |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 6:19 am Subject: MQ Explorer and RACF password validation |
| Okay, I'll look into this then. One small thing... any ideas why MQ Explorer has the option to enter the password when you enter a userid in the connection details? |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 6:15 am Subject: MQ Explorer and RACF password validation |
| Okay thank you. Would using SSL help me to secure MQ explorer to the level I require? |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 5:57 am Subject: MQ Explorer and RACF password validation |
If I remove the RACF user from MQ Explorer the user that WMQ attempts to authenticate is not a valid user and as I have protected all resources in WMQ I am unable to do anything.
If you remove the ... |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 5:31 am Subject: MQ Explorer and RACF password validation |
| Thank you for the reply. I'm very surprised at this, surely this is a huge security exposure as any MQ Explorer user can enter someone else's RACF id in the connection details and gain access to resou ... |
| Topic: MQ Explorer and RACF password validation |
rojaan
Replies: 31
Views: 23833
|
Forum: IBM MQ Security Posted: Mon Aug 01, 2011 4:47 am Subject: MQ Explorer and RACF password validation |
| I have setup MQ under z/OS and implemented RACF on the MQ subsystem. I have a problem with MQ Explorer. I have removed the MCA user ID from the SVRCONN channel that we specify on the Queue Manager def ... |
