| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Accessing credentials from a securityt exit |
« View previous topic :: View next topic » |
| Author |
Message
|
| Kaushal |
 Posted: Tue Jan 18, 2005 9:46 am Post subject: Accessing credentials from a securityt exit |
 |
|
Newbie
Joined: 12 Jan 2005
Posts: 6
|
hi all,
i have written a security exit in C for WebSphere MQ5.3 and the platform is Windows XP. The username and password of the JMQ client (a simple java program) are passed in the createQueueConnectionFactory("username","pasword") function over the SYSTEM.DEF.SVRCONN channel.
can any one tell how can i verify this username/paswword with the ones in the "mqm" group to auhenticate the client ? or is there any other way to do it ?
Kaushal |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Jan 18, 2005 1:52 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
By default, in jms, the username if passed gets checked against the OS for group appartenance and permissions. If in a bindings connection it will have to match the username running the process to pass authentication.
The password is ignored in client mode.
Now if you put a security exit on the channel this would mean you want to authenticate the user and password. Whatever you write in the security exit will happen...
Enjoy  |
|
| Back to top |
|
|
| Kaushal |
| Posted: Tue Jan 18, 2005 6:01 pm Post subject: |
|
|
Newbie
Joined: 12 Jan 2005
Posts: 6
|
hi fjb_saper,
thanks for your reply. but my question was a little different. i will be a little more ellaborative.
I am working on Windows XP and WebSphere MQ5.3.
I have a security exit in C on channel SYSTEM.DEF.SVRCONN. i am passing the user credentials on this channel from the MQ client (which is a simple java program). i copy the username and password using the following C statements:
strcpy(UserID, pChannelDefinition->RemoteUserIdentifier);
strcpy(Password, pChannelDefinition->RemotePassword);
Now, i want to verify this UserID and Password with that from the windows local groups (admins, user, mqm) for authenticating the MQ client.
I know that in Z/OS you do it using RACF. But for windows.....do you have any idea ?
========== One more question=========
the security exit is not getting called by the MQ i don't know why. i have written a simple C program and made the .dll file from it using the Visual C++. i have place the .dll file in the exits directory.
I alter the channel (SYSTEM.DEF.SVRCONN) using
alter channel(system.def.svrconn) chltype(svrconn) scyexit('myDLL(CHANNELEXIT)') the following command. Restarted the MQ server and ran the MQ client but still the exit is not getting called. any clue ?
Kaushal |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Jan 18, 2005 7:57 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
1) You'll have to access the OS authentication functions. Should be documented for c somewhere in the windows API ...
2) Did you define the exit with its entrypoint to MQ ? Should be somewhere on the qmgr tab.... (in Unix in the qm.ini file) |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
