| Author |
Message
|
| rieta |
 Posted: Sun Jul 28, 2002 7:29 pm Post subject: MQSeries Security !! Urgent |
 |
|
Novice
Joined: 22 Dec 2001
Posts: 20
Location: Mybubble
|
Can anybody please tell me what kind of security infrastructure does MQSeries implementations in Enterprises usually have.? Do they necessarily have security exits ? Are security exits required at both the client side and server application side?
Please help!!! |
|
| Back to top |
|
 |
| kolban |
| Posted: Sun Jul 28, 2002 7:45 pm Post subject: |
|
|
Grand Master
Joined: 22 May 2001
Posts: 1072
Location: Fort Worth, TX, USA
|
I have a short white paper and code available at
http://www.kolban.com/mq/security.htm
Bottom line, you need to decide the impacts of security or lack thereof in your own environment. If you run any form of MQ client connection then if you don't have a pair of security exits, you are exposed to the possibility that someone could connect to your queue manager and perform any action. An MQ Client can request that it be connected as anyone it desires. Only security exits can provide authentication to request and prove that the requestor is who they claim to be. |
|
| Back to top |
|
|
| rieta |
| Posted: Wed Jul 31, 2002 7:37 pm Post subject: |
|
|
Novice
Joined: 22 Dec 2001
Posts: 20
Location: Mybubble
|
Thanks a lot, Kolban. Is it possible for you to provide me with the source of the exit dlls that you have provided? If yes, can you please do so. It would be of immense help .
Regards
Rieta
Last edited by rieta on Wed Jul 31, 2002 7:39 pm; edited 2 times in total |
|
| Back to top |
|
|
| bduncan |
| Posted: Thu Aug 01, 2002 10:04 am Post subject: |
|
|
Padawan
Joined: 11 Apr 2001
Posts: 1554
Location: Silicon Valley
|
Use the search tool on this site and look for "redbooks". It should provide the link to an IBM redbook that described how write these exits, as well as source code for one in C and Cobol...
_________________
Brandon Duncan
IBM Certified MQSeries Specialist
MQSeries.net forum moderator |
|
| Back to top |
|
|
| rieta |
| Posted: Fri Aug 02, 2002 7:12 pm Post subject: |
|
|
Novice
Joined: 22 Dec 2001
Posts: 20
Location: Mybubble
|
Hi,
I am still confused. PLease bear with me. See, I have client application written in JMS which connects to MQSeries. JMS requires you to implement the class MQSecurityExit for using security exits. Do I also need a dll at the client side? Or should I implement this class MQSecurityExit which sends whatever info the security exit installed at the Queue Manager requires?
Please help..
Rieta |
|
| Back to top |
|
|
| kolban |
| Posted: Sat Aug 03, 2002 1:26 am Post subject: |
|
|
Grand Master
Joined: 22 May 2001
Posts: 1072
Location: Fort Worth, TX, USA
|
You need to implement both. Security exits for clients usually involve a pair of exits, one at the client and one at the server. The server side exit must be written in C to create a DLL (Windows) or a shared library (Unix).
At the client, if the app is written in Java, a Java class implmenenting the exit must be created. |
|
| Back to top |
|
|
| rieta |
| Posted: Sat Aug 03, 2002 2:19 am Post subject: |
|
|
Novice
Joined: 22 Dec 2001
Posts: 20
Location: Mybubble
|
Is there any sample code avaliable for a class implemeting security exit in Java/JMS? The one given in Information Centre is very sketchy.
Regards,
Rieta |
|
| Back to top |
|
|
|
|
