| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ Security |
« View previous topic :: View next topic » |
| Author |
Message
|
| solomon_13000 |
 Posted: Sun Jul 20, 2008 6:33 am Post subject: MQ Security |
 |
|
Master
Joined: 13 Jun 2008
Posts: 284
|
| In regards to security in MQ, SSL is being used. From my understanding SSL does encryption. The other alternative that I was told is MCA userid which was first used before SSL was introduced. Now how effective is the use of MCA userid in MQ. What does it do?. Does it function like SSL or it merely authenticates the partner before messages can flow?. |
|
| Back to top |
|
 |
| vinbud117 |
| Posted: Sun Jul 20, 2008 8:44 am Post subject: |
|
|
Acolyte
Joined: 22 Jul 2005
Posts: 61
|
SSL and MCAUSER id have nothing in common in terms of their functionality.
SSL - security for messages when transmitted over the channel.
MCAUSER id & OAM - security for the MQ Objects. (setmqaut)
Please read more in the manuals |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Jul 20, 2008 3:02 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
And ideally to secure access you will need both SSL AND mcauser 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| solomon_13000 |
| Posted: Sun Jul 20, 2008 3:20 pm Post subject: |
|
|
Master
Joined: 13 Jun 2008
Posts: 284
|
| So with the use of setmqaut I can grant or revoke authority to MQ objects. Just like a directory, I can specify read, write and execute permission. If a directory has no write permission, then I can't write to a file or database under that directory. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sun Jul 20, 2008 4:48 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
With setmqaut you can grant and remove authority to access mq objects (like queues, processes, namelists, etc.), and to use the WMQ control commands (like crtmqm, strmqm, runmqsc, etc.).
Setmqaut has nothing to do with read-write-execute bits on filesystems.
Take a look at the WMQ Security manual for security concepts. Take a look at the WMQ System Administration Guide for setmqaut command.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
