|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
allowing application user to connect to Topic |
« View previous topic :: View next topic » |
Author |
Message
|
dextermbmq |
Posted: Fri Jun 11, 2021 12:09 pm Post subject: allowing application user to connect to Topic |
|
|
Voyager
Joined: 26 Jul 2014 Posts: 77
|
Hi All,
I have a remote application trying to connect to a queue manager and publish a message to topic via an alias queue (alias queue has targtype as Topic)
For giving the privilege to the remote application to publish the messages, do we need to create a user on server hosting Queue Manager with the same name under which the application is running and use setmqaut to give the privileges ? This is different from the scenario where an application puts the messages to a queue via SVRCONN channel because in this case and we can decide username on our own free will, create that user on server hosting MQ , update this on the MCAUSER attribute of the SVRCONN channel and give the privileges' using setmqaut i.e. the user being updated in the MCAUSER can bear a different name from the user under which application itself runs. |
|
Back to top |
|
 |
fjb_saper |
Posted: Sat Jun 12, 2021 12:26 pm Post subject: Re: allowing application user to connect to Topic |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
dextermbmq wrote: |
Hi All,
I have a remote application trying to connect to a queue manager and publish a message to topic via an alias queue (alias queue has targtype as Topic)
For giving the privilege to the remote application to publish the messages, do we need to create a user on server hosting Queue Manager with the same name under which the application is running and use setmqaut to give the privileges ? This is different from the scenario where an application puts the messages to a queue via SVRCONN channel because in this case and we can decide username on our own free will, create that user on server hosting MQ , update this on the MCAUSER attribute of the SVRCONN channel and give the privileges' using setmqaut i.e. the user being updated in the MCAUSER can bear a different name from the user under which application itself runs. |
The same logic applies, only that the user you put into the MCAUser field also needs to have publish privileges on the topic... Grant those as usual with setmqaut... _________________ MQ & Broker admin |
|
Back to top |
|
 |
exerk |
Posted: Sat Jun 12, 2021 12:26 pm Post subject: Re: allowing application user to connect to Topic |
|
|
 Jedi Council
Joined: 02 Nov 2006 Posts: 6339
|
dextermbmq wrote: |
...For giving the privilege to the remote application to publish the messages, do we need to create a user on server hosting Queue Manager with the same name under which the application is running and use setmqaut to give the privileges ?... |
No, not necessary. You can create a userid that meets your site standard and use CHLAUTH to map the incoming user to that userid, or as you state, use the created userid as an MCAUSER value directly. _________________ It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|