MQSeries.net :: View topic - MQ from CICS to IMS Bridge, Password protection?

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » MQ from CICS to IMS Bridge, Password protection?

MQ from CICS to IMS Bridge, Password protection?

« View previous topic :: View next topic »

Author

Message

Christy Kestler

Posted: Wed Feb 12, 2003 10:04 am Post subject: MQ from CICS to IMS Bridge, Password protection?

Newbie

Joined: 12 Feb 2003
Posts: 4

Would appreciate options to resolve authentication issue when sending MQ messages from CICS application to IMS Bridge for purpose of triggering IMS transaction. Messages have IIH header.

RACF requires userid and password. How can password in the IIH header be protected so it cannot be seen by human eyes in the message?

Environment: z/os mainframe, RACF, WebSphere MQ 5.3.

bob_buxton

Posted: Thu Feb 13, 2003 1:37 am Post subject:

Master

Joined: 23 Aug 2001
Posts: 266
Location: England

Instead of a password you can also suply a PassTicket in the IIH.Authenticator field. The passticket has a 10 minute lifetime.

See the RACF and CICS books for information on how to generate a passticket for a user.
_________________
Bob Buxton
Ex-Websphere MQ Development

Christy Kestler

Posted: Thu Feb 13, 2003 5:30 am Post subject:

Newbie

Joined: 12 Feb 2003
Posts: 4

Thank you. I should have mentioned that Passtickets have been considered but systems personnel are concerned with performance when high volume of transactions go first to check password, fail, then check passticket. It may yet be our only option to encrypt.

bob_buxton

Posted: Thu Feb 13, 2003 6:07 am Post subject:

Master

Joined: 23 Aug 2001
Posts: 266
Location: England

I know nothing about how RACF implements PassTicket generation/ validation but I wouldn't imagine that it adds that much to the overall cost of your transaction since it shouldn't involve addtional IO activity.

I don't know of any other secure way of passing passwords that doesn't expose the password for some period of time.
_________________
Bob Buxton
Ex-Websphere MQ Development

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » MQ from CICS to IMS Bridge, Password protection?

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP