| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Problems with user id using TLS and CNF |
« View previous topic :: View next topic » |
| Author |
Message
|
| Ulrik |
 Posted: Fri Dec 15, 2017 6:20 am Post subject: Problems with user id using TLS and CNF |
 |
|
Novice
Joined: 13 Dec 2017
Posts: 12
|
Hello
First a warning : I’m new to MQ 
We are trying to setup a channel with SSL/TLS , that we intend multiple user to use.
From a windows/.net server to the mainframe. (later also from java)
What we are trying to achieve is that users have a personal signed certificate that is mapped to a user in RACF using CNF. The user is then assigned to the channel instance as MCA user.
However right now it is the user id of the windows server that is used as MCA user.
I have searched Knowledge Center and this website, but didn’t find help/ examples of this.
I feel like we are a simple statement or definition from making this work properly.
We use MQ version on both Windows and z/os.
I’m a mainframe systems programmer.
Any help is appreciated |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Fri Dec 15, 2017 7:49 am Post subject: Re: Problems with user id using TLS and CNF |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| Ulrik wrote: |
Hello
First a warning : I’m new to MQ
We are trying to setup a channel with SSL/TLS , that we intend multiple user to use.
From a windows/.net server to the mainframe. (later also from java)
What we are trying to achieve is that users have a personal signed certificate that is mapped to a user in RACF using CNF. The user is then assigned to the channel instance as MCA user.
However right now it is the user id of the windows server that is used as MCA user.
I have searched Knowledge Center and this website, but didn’t find help/ examples of this.
I feel like we are a simple statement or definition from making this work properly.
We use MQ version on both Windows and z/os.
I’m a mainframe systems programmer.
Any help is appreciated |
MQ Version ... which version would that be?
You need to check the QM.ini file or equivalent on the MF to view if you're allowed to change the assignment on the channels MCAUser (minimum level MQ V 9.0.0.1 ), otherwise the adoptctx(yes) policy of the connauth will prevent you from changing the authenticated user.
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Ulrik |
| Posted: Fri Dec 15, 2017 11:44 am Post subject: |
|
|
Novice
Joined: 13 Dec 2017
Posts: 12
|
Sorry , it should say :
| Quote: |
| We use MQ version 8 on both Windows and z/os. |
We are doomed then ? (untill upgrade) |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
