ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexIBM MQ SecurityMQ explore V 7.5 ignore text after the @ sign in Userid

Post new topicReply to topic
MQ explore V 7.5 ignore text after the @ sign in Userid View previous topic :: View next topic
Author Message
TBS
PostPosted: Fri Aug 02, 2013 3:20 am Post subject: MQ explore V 7.5 ignore text after the @ sign in Userid Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

Hi !

If I start MQ explore in domain A and connect to a mq manager in domain B ( Add remote mqmanager) and specify a user in connection detail.( “User@xxxx” ) The MQ manager ignore the text after the @ sign.
If I chose another mq manager in a diffent domin ( C ) the sign @ is acceptet and following text is acceptet and validated.

Can you please help me ?

Windows 2003
No security exit
All MQ manager on 7.0.1. 9
Back to top
View user's profile Send private message
hughson
PostPosted: Fri Aug 02, 2013 6:14 am Post subject: Re: MQ explore V 7.5 ignore text after the @ sign in Userid Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

TBS wrote:
If I start MQ explore in domain A and connect to a mq manager in domain B ( Add remote mqmanager) and specify a user in connection detail.( “User@xxxx” ) The MQ manager ignore the text after the @ sign.
If I chose another mq manager in a diffent domin ( C ) the sign @ is acceptet and following text is acceptet and validated.

What is the difference between the queue manager in domain B and the queue manager in domain C?

Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
TBS
PostPosted: Sun Aug 04, 2013 10:59 pm Post subject: Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

There is no major difference between the two MQ managers. only that they are each in their own domain. It is not only in MQ Explore v 7 0.5 but also in V 7.0.
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 05, 2013 1:06 am Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

What is the relationship between Domain A (where Explorer runs) and Doman C (which has it's fully qualified user ID accepted)? This relationship is clearly not there between Domain A and Domain B.
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
TBS
PostPosted: Mon Aug 05, 2013 1:18 am Post subject: Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

Yes it was also what I thought .. but who ignore everything after the @ .. ?
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 05, 2013 1:50 am Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

So you didn't actually answer the question though? What is the difference between those domains and their relationships with each other?
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
TBS
PostPosted: Mon Aug 05, 2013 1:55 am Post subject: Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

Yes you are right ..

There is full trust between A and B and there is partial trust between A and C
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 05, 2013 2:42 am Post subject: Re: MQ explore V 7.5 ignore text after the @ sign in Userid Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

TBS wrote:
If I start MQ explore in domain A and connect to a mq manager in domain B ( Add remote mqmanager) and specify a user in connection detail.( “User@xxxx” ) The MQ manager ignore the text after the @ sign.

So back to your original problem statement then. Is the text after the @ sign being ignored, or is it working correctly because of the trust relationship between the domains here?

Or to ask another way, is the user you end up running under the correct one or not?
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
TBS
PostPosted: Mon Aug 05, 2013 3:35 am Post subject: Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

The text after @ is ignorred. and the username before the @ i used .
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 05, 2013 4:49 am Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

TBS wrote:
The text after @ is ignorred. and the username before the @ i used .

MQ on Windows operates with SIDs. What is the relationship between User@DomainA and User@DomainB (or just User in your example)? Will they be located as the same SID when the OS is interrogated?
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
TBS
PostPosted: Mon Aug 05, 2013 5:40 am Post subject: Reply with quote

Centurion

Joined: 29 Jan 2007
Posts: 143
Location: Hillerød / Denmark

I'm not quite sure what you're asking for.

All user are defind in the same AD.
Back to top
View user's profile Send private message
hughson
PostPosted: Mon Aug 05, 2013 6:58 am Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

TBS wrote:
I'm not quite sure what you're asking for.


You mentioned before that you tried to use User@DomainA from the Explorer and in the case where it didn't adopt that user and "ignored the text after the @", it ended up running as the user User, without the @ sign, thus I assumed it was running effectively as User@DomainB.

I was just wondering the relationship between the user you presented in Explorer and the user you ended up running as.
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexIBM MQ SecurityMQ explore V 7.5 ignore text after the @ sign in Userid
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.