ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » Explain about MQMFTCredentials.xml and connect to coordinate

Post new topic  Reply to topic
 Explain about MQMFTCredentials.xml and connect to coordinate « View previous topic :: View next topic » 
Author Message
antongrizli
PostPosted: Wed Apr 13, 2016 11:31 pm    Post subject: Explain about MQMFTCredentials.xml and connect to coordinate Reply with quote

Novice

Joined: 03 Feb 2016
Posts: 10

Hi expert!
Please tell how to configurate connection to coordinate QM
through the MQMFTCredentials.xml.
I am create two MQ FTE server and want connect from slave server to master server. In master server I enabled CHLAUTH and CONNAUTH has setting as:
ALTER QMGR CONNAUTH(USE.PW)
DEFINE AUTHINFO(USE.PW) +
AUTHTYPE(IDPWOS) +
FAILDLAY(10) +
CHCKLOCL(OPTIONAL) +
CHCKCLNT(REQUIRED)

But when I try connect to coordinate QM from slave server in section Managed File Transfer, I have error which says about user svc_ft_slave don't have permission to connect to coordinate QM by the channel SYSTEM.DEF.SVRCONN

How do I give permission to connect to coordinate QM for user svc_ft_slave?
Back to top
View user's profile Send private message
smdavies99
PostPosted: Thu Apr 14, 2016 1:11 am    Post subject: Reply with quote

Jedi Council

Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.

You should NEVER use the 'SYSTEM.DEF.SVRCONN' Channel for anything.
Define your own channel and give that the requisite permissions to allow the connection.
If you have setup your MQ Security using the recommended rules then you can't use it for much anyway. Because it is a know channel on ALL Queue Managers, it could be considered to be an attack vector. So it makes sence to disable it completetly.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995

Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » Explain about MQMFTCredentials.xml and connect to coordinate
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.