| Author |
Message
|
| kiruthigeshwar |
 Posted: Thu Apr 04, 2013 3:59 am Post subject: SEUCRITY PEP NODE ERROR |
 |
|
Acolyte
Joined: 31 Oct 2012
Posts: 50
|
Hi All,
I am using Microsoft ADS as external security provider for authenticating using PEP node. The token type I am using is username + password. So I have specified only token and password and not IssuedBy. But the error I am getting is
| Quote: |
ExceptionList
RecoverableException
File:CHARACTER:F:\build\S700_P\src\DataFlowEngine\PEPNode\ImbPEPNode.cpp
Line:INTEGER:534
Function:CHARACTER:ImbPEPNode::evaluate
Type:CHARACTER:SecurityPEPNodeReportFlow#FCMComposite_1_4
Name:CHARACTER:SecurityPEPNodeReportFlow#FCMComposite_1_4
Label:CHARACTER:SecurityPEPNodeReportFlow.Security PEP
Catalog:CHARACTER:BIPmsgs
Severity:INTEGER:3
Number:INTEGER:2733
SecurityException
File:CHARACTER:F:\build\S700_P\src\DataFlowEngine\ImbIdentity.cpp
Line:INTEGER:428
Function:CHARACTER:ImbIdentity::isAuthenticated
Type:CHARACTER:
Name:CHARACTER:
Label:CHARACTER:
Catalog:CHARACTER:BIPmsgs
Severity:INTEGER:2
Number:INTEGER:2702
Text:CHARACTER:Cache has identity authentication invalid
Insert
Type:INTEGER:5
Text:CHARACTER:usernameAndPassword
Insert
Type:INTEGER:5
Text:CHARACTER:mbuser1
Insert
Type:INTEGER:5
Text:CHARACTER:
Insert
Type:INTEGER:5
Text:CHARACTER:Cached
|
My Input message is
<EAI_MESSAGE>
<Username>mbuser1</Username>
<Password>ibm</Password>
<EAI_HEADER>
<ServiceName>ATM</ServiceName>
</EAI_HEADER>
<EAI_BODY></EAI_BODY>
</EAI_MESSAGE>
Please help me with this.
Thanks & Regards,
Kiruthigeshwar.N |
|
| Back to top |
|
 |
| lancelotlinc |
| Posted: Thu Apr 04, 2013 4:07 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
The following security providers are supported: LDAP, WS-Trust V1.3 STS, or TFIM V6.1. Is Microsoft ADS emulating either of these?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| kiruthigeshwar |
| Posted: Thu Apr 04, 2013 4:34 am Post subject: |
|
|
Acolyte
Joined: 31 Oct 2012
Posts: 50
|
| lancelotlinc wrote: |
| The following security providers are supported: LDAP, WS-Trust V1.3 STS, or TFIM V6.1. Is Microsoft ADS emulating either of these? |
Yes it does. LDAP Version 3-compatible server required :
IBM Tivoli Directory Server
Microsoft® Active Directory®
OpenLDAP
Reference http://www-01.ibm.com/support/docview.wss?uid=swg27015336&aid=1 |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Thu Apr 04, 2013 4:37 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
What version of WMB are you using? V6.1 is no longer supported. Are you operating ADS in LDAP emulation mode? (ie. have you configured the Microsoft ADS server to support LDAP authentication, as it is not enabled by default).
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| kiruthigeshwar |
| Posted: Thu Apr 04, 2013 4:53 am Post subject: |
|
|
Acolyte
Joined: 31 Oct 2012
Posts: 50
|
| lancelotlinc wrote: |
| What version of WMB are you using? V6.1 is no longer supported. Are you operating ADS in LDAP emulation mode? (ie. have you configured the Microsoft ADS server to support LDAP authentication, as it is not enabled by default). |
I am using WMB7.5. I will check whether the LDAP authentication is enabled. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Thu Apr 04, 2013 4:57 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
|
| Back to top |
|
|
| kiruthigeshwar |
| Posted: Thu Apr 04, 2013 9:37 pm Post subject: |
|
|
Acolyte
Joined: 31 Oct 2012
Posts: 50
|
I am able to connect to the ADS using LDAP tool from my system. |
|
| Back to top |
|
|
| kiruthigeshwar |
| Posted: Thu Apr 04, 2013 9:41 pm Post subject: |
|
|
Acolyte
Joined: 31 Oct 2012
Posts: 50
|
Should I have to perform setdbparms for ldap. If so is the following is correct.
mqsisetdbparms <broker> -n ldap::LDAP -u <username> -p <password>
where username and password are the login user id to the ADS system |
|
| Back to top |
|
|
| rekarm01 |
| Posted: Fri Apr 05, 2013 2:32 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 1415
|
| lancelotlinc wrote: |
| What version of WMB are you using? V6.1 is no longer supported. |
WMB v6.1 is still supported. |
|
| Back to top |
|
|
| smdavies99 |
| Posted: Fri Apr 05, 2013 2:55 am Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
| rekarm01 wrote: |
| lancelotlinc wrote: |
| What version of WMB are you using? V6.1 is no longer supported. |
WMB v6.1 is still supported. |
But that simple fact won't stop 'lancelotlinc' from telling everyone that it isn't.
Perhaps he should read up on the meaning of 'Pravda' and how the manipulation of that word came to haunt a lot of people.
OR
If you say the same thing enough times eventually you will get enough people to believe that the bunkum you are speaking is the 'Truth, the whole truth and nothing but the truth'. I wonder if he is a fire breathing preacher in his spare time?
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Fri Apr 05, 2013 3:59 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| rekarm01 wrote: |
| lancelotlinc wrote: |
| What version of WMB are you using? V6.1 is no longer supported. |
WMB v6.1 is still supported. |
Ok, you are correct. I should say end-of-life coming soon.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
|
|
