Posted: Fri Mar 03, 2006 8:14 am Post subject: SVRCONN Channels
Acolyte
Joined: 20 Jan 2003 Posts: 60
I need help with a SVRCONN issue.
This is running on AIX 5.2 , MQ V5.3 CSD11
I have a SVRCONN defined with the MCAUSER set to "aaadvl"
The client is connecting to this Qmgr with this SVRCONN and they are running as "aaaprd" and they are able to connect and put messages.
When I looked a some of the messages on Queue they had the ID set to "aaadvl" (the aaadvl and aaaprd are also the group ids).
What am I missing? I thought that the only user that could connect to the Qmgr with that SVRCONN would be a user running as part of the "aaadvl" group?
What the MCAUSER does is it causes any connection to act AS that user.
So anyone who connects to that SVRCONN will BECOME the 'aaadvl' user.
If you want to authenticate users on SVRCONNs, then you can use SSL or a security add-on to MQ (like what comes with the WebSphere MQ Enhanced Security Edition or whatever it's called) _________________ I am *not* the model of the modern major general.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum