MQSeries.net :: View topic - MQ Authenticate User Security Exit for z/OS

RogerLacroix

The MQ Authenticate User Security Exit for z/OS is a new solution that allows a company to fully authenticate a user who is accessing a z/OS WebSphere MQ resource. It verifies the User's UserID and Password against the server's native z/OS system.

The security exit will operate with WebSphere MQ v5.3.1 and v6.0 in z/OS v1.4 or higher environments. It works with the Server Connection Channels and / or Client Connection Channels of WebSphere MQ queue manager.

The MQ Authenticate User Security Exit for z/OS solution is comprised of 2 components: client-side security exit and server-side security exit.

Client-Side Security Exit Summary

The client-side security exit is available in 3 forms:
- Windows DLL
- Java JAR
- Non-GUI shared library for AIX, HP-UX, Linux x86, Linux x86_64, Linux on POWER, Linux on zSeries, Solaris SPARC and Solaris x86_64.

The client-side security exit has been tested against the following MQ client programs:
- IBM's MQ Explorer
- SupportPac MO71 (MQMon)
- IBM's WBIMB Eclipse Tool Kit
- Mercury's SiteScope
- Capitalware's MQ Visual Edit
- Capitalware's MQ Visual Browse
- Capitalware's MQ Batch Toolkit
- Any program that uses Client Channel Tables (i.e. SupportPac MS03, WatchQ, etc.)

Server-Side Security Exit Summary

The server-side security exit is available as:
- z/OS load-module

The server-side security exit major features are:
- Authenticate a user against the server's native z/OS or using File Based Authentication
- Support for Proxy UserIDs
- Allow or restrict the incoming IP address against a regular expression pattern
- Limit the number of incoming channel connections on a SVRCONN channel.
- Allow or restrict the use of 'mqm', 'MUSER_MQADMIN' or 'QMQM' UserIDs
- Ability to turn off server-side authentication
- Allow or restrict the incoming UserID against a regular expression pattern when authentication is off
- Provides logging capability for all connecting client applications regardless if they were successful or not.
- Provides logging capability via Write To Operator (WTO) facility.

Pricing
- The client-side security exits are included for FREE and can be distributed to an unlimited number of remote servers or PCs with MQ client applications (the user only pays for the server-side licenses).
- The server-side security exit is provided in the format of a native z/OS load-module and is currently available for z/OS v1.4 or higher. The pricing of Capitalware's MQ Authenticate User Security Exit for z/OS solution is on a 'per queue manager' basis.

MQ Authenticate User Security Exit for z/OS will sell for $3990.00 USD for a single queue manager license plus 15% yearly maintenance and support fee. Volume pricing will be as follows: