MQSeries.net :: View topic

frank.belfie · Posted: Mon Apr 09, 2007 9:23 am Post subject:

Hello all;

I have been our MQ admin for a couple years, and in the past had no real requirement for securing queues, but that has now changed. The first project that I have been asked to lock down is 2 applications (system X and Y) that interface with 1 common application (system Z)

What I would like to do, is to only permit system X and Y to preform put's on a queue, and system Z to perform gets from that same queue. Also I would like to have X and Y perform gets on a queue that Z can only put to.

System X and Z are Windows, system Y is Linux. The QM (version 6) runs on Windows currently.

I have read about using OAM, but I am unsure how to pass userid (I am not a developer) in the messages. Currently I have a user configured in the mqm group as the MCA userid on the server connection channel. Do I need to provide a separate channel for each application?

Can someone point me to a cut and dry securing queues/object doc? I read what IBM has out there, but I am not getting it.... If possible, I'd like to lock down who can access the queues by IP address as well..

Thanks to all in advance for your assistance!

--FB