Posted: Fri Oct 12, 2012 8:33 am Post subject: Securing WMQ connections from a web server
Acolyte
Joined: 24 Jun 2001 Posts: 65
Greetings!
We are looking into building an application on our web server that will use WebSphere MQ to send messages to our back end systems. Our security team has questions on best practices on how to ensure that no one will be able to write to a queue from the web server without being properly authenticated first. Any suggestions would be appreciated. Thanks!
Usually you have the webserver authenticate the person making the http requests, and then authorize them to specific functions in the application and then authorize the application to specific objects on the queue manager.
Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA
If you are using IBM WAS, you can also use IBM Tivoli Identity Manager (TIM) and Tivoli Access Manager (TAM) to provide Role-based Access Control (RBAC).
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum