| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
| MO71 problem |
« View previous topic :: View next topic » |
| Author |
Message
|
| Twilight |
 Posted: Wed Aug 31, 2005 9:18 am Post subject: |
 |
|
Apprentice
Joined: 04 Aug 2004
Posts: 49
|
Roger,
After more research, I'll make Client user exit that get a user entered MF userid/pswd and encrypted, pass to MF RACF to verify it before connected.
MF exit will set MCAuser with client entered userid that is verified by RACF to process a request.
Also, we have MQ security setup to preventing acess MQ commands already.
Thanks.
_________________
WMQ/WMQI/WBI Consultant
Toronto, Canada |
|
| Back to top |
|
 |
| RogerLacroix |
| Posted: Wed Aug 31, 2005 7:52 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hi,
| Quote: |
I'll make Client user exit that get a user entered MF userid/pswd and encrypted, pass to MF RACF to verify it before connected.
MF exit will set MCAuser with client entered userid that is verified by RACF to process a request. |
Well, that is the politically correct answer, if some from your company is watching but that is not what you were asking.
That 'dummy' exit I pointed you to will cause the client-side MQ libraries to not set the UserID. This will cause you to have full access to the remote queue manager on z/OS. Read my posting here a few times and you will understand why:
http://www.mqseries.net/phpBB2/viewtopic.php?t=17842
Now that you have read it, you will understand why this statement cannot possibly be true:
| Quote: |
| Also, we have MQ security setup to preventing acess MQ commands already. |
If you don't believe me download MQ Visual Edit and connect to your z/OS queue manager (leave the UserID blank). If the 'List' button on the Open Queue panel works then you have MQ Admin rights.
Now if you still want to create a z/OS MQ security exit and a Windows client-side security exit AND learn about the good, bad & ugly of cryptology, be my guess, but make sure your boss knows what you are up to. Because you will be spending hundreds if not thousands of hours on this project. I know this from first hand experience.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
