| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Avoid Trusted Application |
« View previous topic :: View next topic » |
| Author |
Message
|
| lwl |
 Posted: Mon Dec 20, 2004 7:07 pm Post subject: Avoid Trusted Application |
 |
|
Apprentice
Joined: 30 Mar 2004
Posts: 41
|
From the manual, trusted application can be turned on by
1. set the MQ_CONNECT_TYPE to FASTPATH and
2. specify MQCNO_FASTPATH_BINDING in MQCONNX call.
But poor-written trusted application may be harmful to the QM. How can I avoid application to connect to the QM in FASTPATH mode?
Also, can trusted application connect to QM using MQ client?
Thank you |
|
| Back to top |
|
 |
| Nigelg |
| Posted: Tue Dec 21, 2004 5:37 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
You do not need to do anything to avoid connecting in FASTPATH; the default is to connect using IPC bindings.
Trusted apps cannot connect to the qmgr as clients. You can cause channels to connect FASTPATH using MQIBindType, described in the Intercomms manual. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Tue Dec 21, 2004 3:32 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
The default maybe not to connect in FASTPATH for local apps, but how do you prevent a local app from choosing to connect in FASTPATH mode is the question.
Short of an MQ API exit, I don't there is any way to prevent an app from chossing this option. 
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| Nigelg |
| Posted: Tue Dec 21, 2004 10:10 pm Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
An app connected as FASTPATH has to be run under a userID in the mqm group, so restricting access to such users, a good idea anyway from a security POV, will also stop apps connecting as FASTPATH.
Or, you could exercise more control over the app teams such that they do not code apps to connect FASTPATH. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
