| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| WMQ 6 \ file OS access to key repository & channel table |
« View previous topic :: View next topic » |
| Author |
Message
|
| hopsala |
 Posted: Sat Nov 01, 2008 1:52 am Post subject: WMQ 6 \ file OS access to key repository & channel table |
 |
|
Guardian
Joined: 24 Sep 2004
Posts: 960
|
Hi, yet another security-oriented question:
In order for an MQ Client to work with SSL using a channel table, does the user running the client have to have OS access (file access permissions) to the channel table and to the key repository? If so, which permissions?
My question bears upon Unix and Windows, but will be glad to hear about other OSs. Thanks! |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Sat Nov 01, 2008 5:18 am Post subject: Re: WMQ 6 \ file OS access to key repository & channel t |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| hopsala wrote: |
Hi, yet another security-oriented question:
In order for an MQ Client to work with SSL using a channel table, does the user running the client have to have OS access (file access permissions) to the channel table and to the key repository? If so, which permissions?
My question bears upon Unix and Windows, but will be glad to hear about other OSs. Thanks! |
In order to be able to run SSL any process (client or server) needs to have at least read access to the key repositories and the crypto suite. Additionally if you want to do client access over a channel table (non java or .NET managed client I suppose) you will of course need read access to that channel table.
Note that read access to the key repositories includes read access to their stashed password files... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| hopsala |
| Posted: Wed Nov 05, 2008 5:12 am Post subject: |
|
|
Guardian
Joined: 24 Sep 2004
Posts: 960
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
