| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| How to protect DB user and password in XA openstream? |
« View previous topic :: View next topic » |
| Author |
Message
|
| tiangl |
 Posted: Wed Jan 03, 2007 5:45 pm Post subject: How to protect DB user and password in XA openstream? |
 |
|
Apprentice
Joined: 19 Nov 2004
Posts: 48
|
As we know,we set oracle db user and password in XA openstream, but it seems not security enough, cause this information is clear text for each OS user who can access qm.ini. is there any way to protect this ?
thanks!
XAResourceManager:
Name=OracleDB
SwitchFile=jdbcora
XAOpenString=+Acc=P/testuser/secret+SesTm=35+DB=testdb+threads=true
ThreadOfControl=THREAD |
|
| Back to top |
|
 |
| mvic |
| Posted: Wed Jan 03, 2007 6:30 pm Post subject: Re: How to protect DB user and password in XA openstream? |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| tiangl wrote: |
| is there any way to protect this ? |
Yes, but it would involve writing some C code for a special "switch load file". You would have to write a vector function for xa_open and introduce some other method for inserting your desired xa_info string into the xa_open call. Your other security parameters (eg. who can run apps, who can login to your machine, what control do these users have over what they run) will be relevant here. Bear in mind that every app that calls MQBEGIN, and potentially several queue manager processes running as uid:mqm gid:mqm will need to be able to read qm.ini and the switch load file at run time.
The safest option, when using XA, is to have the machine highly restrictive re. interactive logins, and other general user privileges. |
|
| Back to top |
|
|
| tiangl |
| Posted: Thu Jan 04, 2007 1:35 am Post subject: |
|
|
Apprentice
Joined: 19 Nov 2004
Posts: 48
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
