Author |
Message
|
rieta |
Posted: Mon Dec 24, 2001 7:49 am Post subject: |
|
|
Novice
Joined: 22 Dec 2001 Posts: 20 Location: Mybubble
|
We have installed MQSeries Server V5.2 on Win2000. We have a client written using JMS. we try to connect to the server using
"createQueueConnection" supplying username and password, the password is ignored. The user is given access even if we do not supply the password. Can anyone please tell , how can we anuthenticate the user ?
Is there some other way to authenticate ?
Rieta |
|
Back to top |
|
 |
kolban |
Posted: Tue Dec 25, 2001 12:32 pm Post subject: |
|
|
 Grand Master
Joined: 22 May 2001 Posts: 1072 Location: Fort Worth, TX, USA
|
The userid/password can be authenticated by a custom exit associated with the SVRCONN channel definition. |
|
Back to top |
|
 |
rieta |
Posted: Tue Dec 25, 2001 9:59 pm Post subject: |
|
|
Novice
Joined: 22 Dec 2001 Posts: 20 Location: Mybubble
|
Thank you kolban for your reply.
I was wondering whether on the JMS client application side, I just need to set the security exit via the setSecurityExit(String) method of the ConnectionFactory class. This method needs the name of the class implementing the security exit as the parameter. This class needs to be implemented at the JMS Client side.
What exactly do you specify at the MQSeries server side through MQSeries Explorer???
I have gone through the
"http://www.redbooks.ibm.com/redbooks/SG245306.html" but I did not get much. I have downloaded the code from the code repository also and I am going through it.
I am a newbie so please bear with me. Could you please clear my doubts.....
Thanks in advance.
Regards
Rieta |
|
Back to top |
|
 |
middlewareonline |
Posted: Wed Dec 26, 2001 1:15 pm Post subject: |
|
|
Acolyte
Joined: 09 Jul 2001 Posts: 73
|
You can set a shared lib (.so or .a) that contains your exit to one of the exit attribute of the SVRCONN channel definition (SENDEXIT, RECVEXIT, SCY*)
MiddlewareOnline.COM
_________________ ---------------------------------------------
IBM & SUN (J2EE) Certified Consultants,
http://www.MiddlewareOnline.com
A "SARVAM" Online Portal
http://www.SARVAM.com
--------------------------------------------- |
|
Back to top |
|
 |
PeterPotkay |
Posted: Thu Dec 27, 2001 6:47 am Post subject: |
|
|
 Poobah
Joined: 15 May 2001 Posts: 7722
|
_________________ Peter Potkay
Keep Calm and MQ On |
|
Back to top |
|
 |
PeterPotkay |
Posted: Thu Dec 27, 2001 6:55 am Post subject: |
|
|
 Poobah
Joined: 15 May 2001 Posts: 7722
|
Rieta,
It sounds like you have the MCAUserIdentifier field filled in on the SVRCONN channel on the Server with a valid value. If this is the case, this value is used to authenticate, not anything the Client may be trying to send.
Look for the thread titled "MQClient on WIN2000" in the Instalation and Configuration Forum posted by TIA. In it, I give some more details on this subject.
_________________ Peter Potkay
Keep Calm and MQ On |
|
Back to top |
|
 |
rieta |
Posted: Fri Dec 28, 2001 12:24 am Post subject: |
|
|
Novice
Joined: 22 Dec 2001 Posts: 20 Location: Mybubble
|
Thankyou for replying . I checked the server connection channel. But there is no MCAUserIdentifier set. The problem is that, MQSeries seems to ignore the password field. If a user is in the MQM group he is given access irrespective of the password supplied. I want password based authentication. Do I need to write a security exit? I wrote one. But i dont know if this is the correct way to write one. What should i return from the "securityExit" function? I tried sending the password. What do I need to at the server side? I compiled and created the MQExit.dll as specified in IBM redbook "http://www.redbooks.ibm.com/redbooks/SG245306.html" . I got the code from the software repository. But, unfortunalely, i could not figure out what to do next. How do I use it or if at all I need it? Please help me.
The following is my security exit code.
// code
import com.ibm.mq.*;
public class MyBubbleSecurityExit implements MQSecurityExit{
public byte[] securityExit( MQChannelExit channelExitParms, MQChannelDefinition channelDefinition, byte[] agentBuffer){
// exit code goes here...
String exitData = "mybubble";
return exitData.getBytes();
}
public MyBubbleSecurityExit(String initData){
}
[ This Message was edited by: rieta on 2001-12-28 00:41 ] |
|
Back to top |
|
 |
|