ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » MQIPT Proxy Authentication

Post new topic  Reply to topic
 MQIPT Proxy Authentication « View previous topic :: View next topic » 
Author Message
kartal10
PostPosted: Wed Aug 15, 2007 8:55 am    Post subject: MQIPT Proxy Authentication Reply with quote

Newbie

Joined: 26 Jun 2007
Posts: 4

Hello All,

I would like to know if proxy authentication is supported in MQIPT.

Thanks for any answers...
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Wed Aug 15, 2007 9:26 am    Post subject: Re: MQIPT Proxy Authentication Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

kartal10 wrote:
Hello All,

I would like to know if proxy authentication is supported in MQIPT.

Thanks for any answers...

I know that proxies are supported. Don't remember about proxy authentication. What does the manual say about it?

Would you put the proxy authentication into the Key(X509)?

Enjoy
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
kartal10
PostPosted: Thu Aug 16, 2007 2:40 am    Post subject: Reply with quote

Newbie

Joined: 26 Jun 2007
Posts: 4

Thanks for the reply.

I read posts on the internet from few years back (2004) saying that proxy authentication is not supported yet but that IBM were working on it. The manual says nothing about proxy authentication.

Would you put the proxy authentication into the Key(X509)?

I want to put the proxy authentication into the MQIPT conf files.

The current set-up is:

MQ client (SSL) --> MQIPT ----> Proxy Server ----> MQIPT ----> MQ Server (SSL).

Thanks...
Back to top
View user's profile Send private message
PhilBlake
PostPosted: Thu Aug 16, 2007 6:49 am    Post subject: Reply with quote

Acolyte

Joined: 25 Oct 2005
Posts: 64

If you mean authentication using the Proxy-Authorization/Proxy-Authenticate HTTP headers, then unfortunately not.

Have you raised this through the normal WMQ requirements process ?

Send me an email if you'd like to discuss.

HTH
Phil
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Thu Aug 16, 2007 7:40 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

kartal10 wrote:
Thanks for the reply.

I read posts on the internet from few years back (2004) saying that proxy authentication is not supported yet but that IBM were working on it. The manual says nothing about proxy authentication.

Would you put the proxy authentication into the Key(X509)?

I want to put the proxy authentication into the MQIPT conf files.

The current set-up is:

MQ client (SSL) --> MQIPT ----> Proxy Server ----> MQIPT ----> MQ Server (SSL).

Thanks...
You have an unusual setup.
Usually you would find:
MQClient --> MQIPT(SSL)-->Proxy Server --> proxy server -->MQIPT(SSL) --> MQServer.

MQIPT is usually used to achieve SSL where your channels don't support it and you don't want to create channels with SSL.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
kartal10
PostPosted: Fri Aug 17, 2007 2:31 am    Post subject: Reply with quote

Newbie

Joined: 26 Jun 2007
Posts: 4

I had a chat with IBM, and they havent developed this requirement.

Sorry actually my set is as what you said fjb_saper:

MQClient --> MQIPT(SSL)-->Proxy Server --> proxy server -->MQIPT(SSL) --> MQServer.

I have now gone past the proxy authentication stage, I had to change the settings on the proxy server.

The problem how is, I tried the above set up without ssl and it works but when i try it with SSL, i get the following error:

MQCPI014 Eyecatcher protocol ({0}) not recognized.

Thanks...
Back to top
View user's profile Send private message
PhilBlake
PostPosted: Fri Aug 17, 2007 5:45 am    Post subject: Reply with quote

Acolyte

Joined: 25 Oct 2005
Posts: 64

Which server is showing that error - MQIPT#2 nearest the queue manager ?

What route properties have you defined for MQIPT#2 ?

Send me an email if you'd rather not post the mqipt.conf details here.

Phil
WebSphere MQIPT Developer
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Fri Aug 17, 2007 9:12 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Please remember as well that the certificates and MQIPT SSL settings differ on the client and server sides of the connection.

We used self signed certificates. The domain name (host.mydomain.com) on the certificate must match the domain of the MQIPT server holding the certificate. We do not use a proxy server in between but use direct connection (TCP) between the 2 MQIPT servers. (Firewalls had to be opened on the right ports).

Enjoy
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » MQIPT Proxy Authentication
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.