|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
JMS MQ Userid used for authorization |
« View previous topic :: View next topic » |
Author |
Message
|
iceage |
Posted: Thu Oct 05, 2006 1:19 pm Post subject: JMS MQ Userid used for authorization |
|
|
 Acolyte
Joined: 12 Apr 2006 Posts: 68
|
I have a JMS program connecting to MQ qmgr in client mode , i have set up the qcf & q definitions.
What i am getting confused is , JMS program is trying to authorize the userid that is running the application against MQ.
My understanding is that when you dont supply userid with in program , nor in MCAUSER id , MQ tries to authorize against the user who started the listener (which in my case is mqm) ..
Even i am not able to see in any manuals about the MQ receiving application user id when using JMS ..
so please help me , What is wrong here ? |
|
Back to top |
|
 |
jefflowrey |
Posted: Thu Oct 05, 2006 1:41 pm Post subject: Re: JMS MQ Userid used for authorization |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
iceage wrote: |
I My understanding is that when you dont supply userid with in program , nor in MCAUSER id , MQ tries to authorize against the user who started the listener (which in my case is mqm) .. |
Technically, this only happens when the connection is established and NULL is passed for the user id.
It could be that your QCF is specifying a username. It could be that your AppServer specifies a username, if you are running under an AppServer. It could be that the app code specifies a username.
And if you are using v6 and you are using a bindings connection, then the username will automatically be sent as well. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
fjb_saper |
Posted: Thu Oct 05, 2006 3:04 pm Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
In fact if you are running in bindings mode you are not allowed to supply a different user from the one that is running the process....  _________________ MQ & Broker admin |
|
Back to top |
|
 |
iceage |
Posted: Thu Oct 05, 2006 5:15 pm Post subject: |
|
|
 Acolyte
Joined: 12 Apr 2006 Posts: 68
|
Let me explain more ..
I used PTPSample01.java program that comes with install & using it.
I didnt set userid in QCF , but still i see my NT userid passed on to the UNIX system for authorisation.
BTW I am using V6 and doing client connection. No bindings. |
|
Back to top |
|
 |
fjb_saper |
Posted: Thu Oct 05, 2006 7:20 pm Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
V6 behaves differently from V5.3.
I believe if you do not set explicitly the userid to space or null when doing the call qcf.createConnection(userid, passwd) that the userid running the process will be passed.
For instance if you do the call without parameters, where in 5.3 you might have gotten away with it, in V6 you will not as you will be passing the userid running the process (JVM).
Enjoy  _________________ MQ & Broker admin |
|
Back to top |
|
 |
vgk |
Posted: Fri Nov 17, 2006 12:48 pm Post subject: |
|
|
Newbie
Joined: 17 Nov 2006 Posts: 1 Location: Toronto
|
fjb_saper wrote: |
V6 behaves differently from V5.3.
I believe if you do not set explicitly the userid to space or null when doing the call qcf.createConnection(userid, passwd) that the userid running the process will be passed.
For instance if you do the call without parameters, where in 5.3 you might have gotten away with it, in V6 you will not as you will be passing the userid running the process (JVM).
Enjoy  |
Can you point to the documentation describing the change in behavior between client versions? If that's the case and V6 Java client passes userid of its host process by default, do we have to set MCAUSER to 'userid' for SVRCONN channel on the server side to allow the connection?
Thanks,
Vlad |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|