| Author |
Message
|
| rajesh500 |
 Posted: Wed Jun 13, 2001 8:48 am Post subject: |
 |
|
Newbie
Joined: 12 Jun 2001
Posts: 3
|
| client is sending messages to the message server (MQ Series)using queue connection. I wanna make my message server secured so that only authenticated user can send messages. Any related material or sample code for security would be appreciated. |
|
| Back to top |
|
 |
| kolban |
| Posted: Wed Jun 13, 2001 8:54 am Post subject: |
|
|
Grand Master
Joined: 22 May 2001
Posts: 1072
Location: Fort Worth, TX, USA
|
I am assuming that you are using MQSeries client connections to a remote queue manager? What platform does the client execute in? What language is the client application implemented in? What platform does the queue manager execute on?
Suggest that the MQSeries Client manual (Part 3, Chapter 7) be reviewed on MQSeries client security ... the URL for this manual in HTML format follows. It is also available for download as a PDF ...
http://www-4.ibm.com/software/ts/mqseries/library/manualsa/csqzaf05/csqzaf05tfrm.htm
Neil |
|
| Back to top |
|
|
| Ward |
| Posted: Thu Jun 28, 2001 6:42 am Post subject: |
|
|
Voyager
Joined: 27 Jun 2001
Posts: 98
Location: Europe
|
|
| Back to top |
|
|
| rajesh500 |
| Posted: Tue Jul 24, 2001 8:49 am Post subject: |
|
|
Newbie
Joined: 12 Jun 2001
Posts: 3
|
| I am not using MQSeries Client to make connection to the remote queue manager. I am using JMS classes.Getting the MQ queue connection factory, create a connection using createQueueConnection() method. I found that there is an option to pass userid and password in createQueueConnection()method. Could you please tell me the use of this userid and pwd. Can i make my connection secured by passing above userid and pwd. |
|
| Back to top |
|
|
| kolban |
| Posted: Tue Jul 24, 2001 9:24 am Post subject: |
|
|
Grand Master
Joined: 22 May 2001
Posts: 1072
Location: Fort Worth, TX, USA
|
| JMS is a little fuzzy on the concepts of security. Although not 100% sure, I believe that IBM MQSeries JMS basically ignores the password supplied. The userid that is supplied becomes the effective userid used for MQSeries OAM access. Now this seems to imply that I can become anyone that I claim to be ... I think this may be true. I also believe that the password may be supplyable to a security exit associated with the queue manager which *could* perform a security validation on the request. |
|
| Back to top |
|
|
|
|
