ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » MQXR_INIT_SEC on SVRCONN security exit

Post new topic  Reply to topic
 MQXR_INIT_SEC on SVRCONN security exit « View previous topic :: View next topic » 
Author Message
WBI_user
PostPosted: Tue Jun 20, 2006 8:58 pm    Post subject: MQXR_INIT_SEC on SVRCONN security exit Reply with quote

Partisan

Joined: 07 Aug 2001
Posts: 386

I was given a security exit to implement between MQ on WIndows clients (V6) and MQ on Linux Server (V53 CSD12).
The logic of the exit is very simple. The client will pass the userid and password to the sever using the sec_msg. The server will open or close the channel depending on if the userid and password is good. It will also reject the connection request if the client does not have a security exit.

My observation during testing of the exit was
1. The channel will terminate by the exit if the client connection channel does not have an exit. This is work as design. The flow Exit on the Server was
MQXR_INIT , MQXR_INIT_SEC, MQXR_TERM.

2. If the client (clntconn channel) has a security exit, the channel will open regardless if the userId passed is correct or not. The flow on the server side was only
MQXR_INIT, MQXR_TERM.
For some reason, the exit was not invoke with MQXR_INIT_SEC which will retreive the security message containing the Userid and password.

I do not have the source code of the exit on the client side. But I think it is the MCA on the server side that invoke the server exit with the reason. Any idea why MQXR_INIT_SEC is not happenning ? I was told that the client side exit works with other MQ servers. This server side exit is new because it is our first MQ Server on LInux.
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Tue Jun 20, 2006 10:19 pm    Post subject: Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

Hi,

Why did you create another posting for the same problem?
http://www.mqseries.net/phpBB2/viewtopic.php?t=30178

Did you read the WMQ Intercommunication manual? There is a whole section dedicated to the message flows of security exits.

Also, did you read the following posting??
http://www.mqseries.net/phpBB2/viewtopic.php?t=20523

MQ security exits, multi-threading, password encryption, etc... are advanced-level programming skills. It is not something that can be quickly explained on a message-board.


Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
WBI_user
PostPosted: Wed Jun 21, 2006 5:22 am    Post subject: Reply with quote

Partisan

Joined: 07 Aug 2001
Posts: 386

Sorry Roger, th eother posting was for not being able to write logs to console from the exit. I have resolved that problem with the help of you and a few good fellows. I am now trying to debug the exit. So I started another thread. Just to avoid making one thread too confusing.

As I mentoned in the other posting that I am the administrator and was given the exit by the developer who went on vacation. I am just trying to see if I can help instead of waiting for 2 weeks. I understand that coding exit is an advance topic. But I am not doing any coding.

I have read both your post and the Intercomm manual. But the manual is not clear how the EXIT is called with what reason. I just did not put what I read here. Anyway the book says
1. The receiver and sender are each invoked with MQXR_INIT, but these
invocations are not correlated and can therefore occur at the same time or at different times.
2. The receiver is next invoked with MQXR_INIT_SEC, but returns MQXCC_OK which requires no complementary event at the sender exit.
3. The sender is next invoked with MQXR_INIT_SEC. This is not correlated with the invocation of the receiver with MQXR_INIT_SEC. The sender returns MQXCC_SEND_SEC_MSG, which causes a complementary event at the receiver exit.
:
According to points 2 & 3, either the receiver or the sender should get invoked with MQXR_INIT_SEC.

But this is not happening in my case.
Back to top
View user's profile Send private message
WBI_user
PostPosted: Wed Jun 21, 2006 5:25 am    Post subject: Reply with quote

Partisan

Joined: 07 Aug 2001
Posts: 386

BTW, can some one clarify if the SVRCONN channel on the server side the "receiver" or the "sender" ? I don't understnd why IBM does not use terms that are consistant with the product.
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Wed Jun 21, 2006 2:23 pm    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

The SVRCONN is the server side of the SVRCONN/CLNTCONN channel pair.

The name makes sense if you think of it as a "Connection" channel - then you have the "Server" half of the Connection channel and the "Client" half of the Connection channel.
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » MQXR_INIT_SEC on SVRCONN security exit
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.