ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » Clustering » Securing a clustered queue

Post new topic  Reply to topic
 Securing a clustered queue « View previous topic :: View next topic » 
Author Message
dixanms
PostPosted: Tue Oct 30, 2007 2:32 am    Post subject: Securing a clustered queue Reply with quote

Newbie

Joined: 03 Oct 2007
Posts: 6
Configuration
2 qmgr cluster v5.3, each qmgr running in a different box
QM1 : qmgr (FR), CQ1 : clustered queue locally defined in QM1
QM2 : qmgr

An app running in the box holding QM2 needs to PUT in CQ1

In this forum I've read about options to secure the clustered queue CQ1

1. To create a queue alias QA1, in this case in QM2, referring to CQ1 and then to give this queue alias the appropriate permissions.

2. Another possible but not recommended solution would be to give PUT permission on SYSTEM.CLUSTER.TRANSMIT.QUEUE instead of creating the queue alias.

The 1st solution gives more control, so, looks better from a security point of view, but the burden of creating the queue alias breaks in some way the administrative flexibility a cluster provide us. Is this the best option?
_________________
Dixan Martinez
Systems Administrator
Back to top
View user's profile Send private message
Michael Dag
PostPosted: Tue Oct 30, 2007 3:00 am    Post subject: Reply with quote

Jedi Knight

Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
option 1 is best from a security perspective... and yes it adds a burden...
_________________
Michael



MQSystems Facebook page
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » Clustering » Securing a clustered queue
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.