| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQXR_INIT_SEC on SVRCONN security exit |
« View previous topic :: View next topic » |
| Author |
Message
|
| WBI_user |
 Posted: Tue Jun 20, 2006 8:58 pm Post subject: MQXR_INIT_SEC on SVRCONN security exit |
 |
|
Partisan
Joined: 07 Aug 2001
Posts: 386
|
I was given a security exit to implement between MQ on WIndows clients (V6) and MQ on Linux Server (V53 CSD12).
The logic of the exit is very simple. The client will pass the userid and password to the sever using the sec_msg. The server will open or close the channel depending on if the userid and password is good. It will also reject the connection request if the client does not have a security exit.
My observation during testing of the exit was
1. The channel will terminate by the exit if the client connection channel does not have an exit. This is work as design. The flow Exit on the Server was
MQXR_INIT , MQXR_INIT_SEC, MQXR_TERM.
2. If the client (clntconn channel) has a security exit, the channel will open regardless if the userId passed is correct or not. The flow on the server side was only
MQXR_INIT, MQXR_TERM.
For some reason, the exit was not invoke with MQXR_INIT_SEC which will retreive the security message containing the Userid and password.
I do not have the source code of the exit on the client side. But I think it is the MCA on the server side that invoke the server exit with the reason. Any idea why MQXR_INIT_SEC is not happenning ? I was told that the client side exit works with other MQ servers. This server side exit is new because it is our first MQ Server on LInux. |
|
| Back to top |
|
 |
| RogerLacroix |
| Posted: Tue Jun 20, 2006 10:19 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
|
| Back to top |
|
|
| WBI_user |
| Posted: Wed Jun 21, 2006 5:22 am Post subject: |
|
|
Partisan
Joined: 07 Aug 2001
Posts: 386
|
Sorry Roger, th eother posting was for not being able to write logs to console from the exit. I have resolved that problem with the help of you and a few good fellows. I am now trying to debug the exit. So I started another thread. Just to avoid making one thread too confusing.
As I mentoned in the other posting that I am the administrator and was given the exit by the developer who went on vacation. I am just trying to see if I can help instead of waiting for 2 weeks. I understand that coding exit is an advance topic. But I am not doing any coding.
I have read both your post and the Intercomm manual. But the manual is not clear how the EXIT is called with what reason. I just did not put what I read here. Anyway the book says
1. The receiver and sender are each invoked with MQXR_INIT, but these
invocations are not correlated and can therefore occur at the same time or at different times.
2. The receiver is next invoked with MQXR_INIT_SEC, but returns MQXCC_OK which requires no complementary event at the sender exit.
3. The sender is next invoked with MQXR_INIT_SEC. This is not correlated with the invocation of the receiver with MQXR_INIT_SEC. The sender returns MQXCC_SEND_SEC_MSG, which causes a complementary event at the receiver exit.
:
According to points 2 & 3, either the receiver or the sender should get invoked with MQXR_INIT_SEC.
But this is not happening in my case. |
|
| Back to top |
|
|
| WBI_user |
| Posted: Wed Jun 21, 2006 5:25 am Post subject: |
|
|
Partisan
Joined: 07 Aug 2001
Posts: 386
|
| BTW, can some one clarify if the SVRCONN channel on the server side the "receiver" or the "sender" ? I don't understnd why IBM does not use terms that are consistant with the product. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Jun 21, 2006 2:23 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
The SVRCONN is the server side of the SVRCONN/CLNTCONN channel pair.
The name makes sense if you think of it as a "Connection" channel - then you have the "Server" half of the Connection channel and the "Client" half of the Connection channel.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
