Author |
Message
|
shan123 |
Posted: Wed Jun 20, 2007 5:04 am Post subject: Kerberos Authentication with MQ v6.0 |
|
|
Novice
Joined: 19 Apr 2007 Posts: 11
|
Hi,
Does anybody know how to do KDC settings or Kerberos authentication with MQ version 6?
I’ll appreciate your help.
Thanks |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Jun 20, 2007 5:19 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
|
Back to top |
|
 |
shan123 |
Posted: Wed Jun 20, 2007 5:26 am Post subject: |
|
|
Novice
Joined: 19 Apr 2007 Posts: 11
|
jefflowrey wrote: |
http://www.mqseries.net/phpBB2/viewtopic.php?t=23993 |
Thanks for the reply .
I just gone through MQ Security manual for MQv6, pg 72 (PDF).
It is written there that
"Kerberos is supported on all Windows platforms that are supported by WebSphere MQ Version 6. "
I don't want to use DCE (distributed Computing Environment)
Can you pl confirm ?
Thanks |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Jun 20, 2007 5:49 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
The same page says "For more information about how the SSPI channel exit program works, and for instructions on how to implement it, see the WebSphere MQ Application Programming Guide." _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
shan123 |
Posted: Wed Jun 20, 2007 6:26 am Post subject: |
|
|
Novice
Joined: 19 Apr 2007 Posts: 11
|
jefflowrey wrote: |
The same page says "For more information about how the SSPI channel exit program works, and for instructions on how to implement it, see the WebSphere MQ Application Programming Guide." |
Do you think , I have to send kerberos token from client side and have to write SSPI Exit program on MQ side for getting user identity from Token .
Again I have to set permissions on Channel and Queues for giving access to specific users .
Pl help me , I'm not very expert on these things .
Thanks |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Jun 20, 2007 7:07 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
shan123 wrote: |
I'm not very expert on these things . |
Neither am I. I've never done anything with Kerberos. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
Vitor |
Posted: Wed Jun 20, 2007 8:01 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
shan123 wrote: |
Pl help me , I'm not very expert on these things .
|
Not used it myself..... _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
shan123 |
Posted: Fri Jun 22, 2007 2:53 am Post subject: |
|
|
Novice
Joined: 19 Apr 2007 Posts: 11
|
Does anyone know the difference between API exits and Security exits ?
Thanks |
|
Back to top |
|
 |
Vitor |
Posted: Fri Jun 22, 2007 3:01 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
shan123 wrote: |
Does anyone know the difference between API exits and Security exits ?
|
Function _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
|