| Author |
Message
|
| jstefano |
 Posted: Thu Jul 27, 2006 2:19 pm Post subject: MQseries security exits |
 |
|
Apprentice
Joined: 13 Apr 2006
Posts: 48
|
Dear MQ Gurus!
can somebody of you, gurus out there help a newbie with a question?
Here is the story:
I am using MQ Explorer running on my PC to manage our QMs on UNIX boxes. I added my Windows ID to /etc/passwd on the UNIX boxes
and I added my Windows ID to mqm group under /etc/group
Everything work great; I can manage from my Windows PC as many MQ sitting on UNIX boxes I want.
Now some of our developers requested the have access to some of the MQ via MQ Explorer. I can't add theirs Windows ID into /etc/passwd
so I would like to use "MQ security Exits" options. However, I can't find
a place from where I can dnload precompiled packages *.dll for UNIX
Does anybody know where the get these files? And does anybody know how to setup MQseries security exits?
Your help will be appreciated a lot!!!
Thanks a million in advance!
Jan |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Thu Jul 27, 2006 2:26 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Check out the capital ware forum(on this site); mq admin manual; and do a search on blockIP2
Enjoy 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Jul 27, 2006 2:41 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
But when it comes to trusting the security of your qmgrs to a solution, I personally would rather know that there's someone on the other end who might be able to be held responsible.
So I'd tend to steer away from a "free" solution like BlockIP2.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| PaperHouse |
| Posted: Fri Jul 28, 2006 12:38 am Post subject: |
|
|
Newbie
Joined: 18 Jul 2006
Posts: 8
Location: London
|
Hi
You need to go back to the developers and ask them why they want access to the Queue Managers. MQ Explorer is a powerful admin tool and should only be used by MQ Admins.
My guess is that they will just want to Browse some queues, in which case RFHUTIL used in conjunction with MQ Client would be plenty for their requirement, or you could write a simple web app showing queue depths on a manager.
Security Exits are used to limit access to certain PC's on the network, it sounds like you need to use authorities on the queues rather than an Exit so you need to read up on the setmqaut, dspmqaut and amqoamd commands and make sure these developers have appropriate access to the Queue Manager. |
|
| Back to top |
|
|
| jstefano |
| Posted: Fri Jul 28, 2006 7:10 am Post subject: |
|
|
Apprentice
Joined: 13 Apr 2006
Posts: 48
|
| PaperHouse wrote: |
Hi
You need to go back to the developers and ask them why they want access to the Queue Managers. MQ Explorer is a powerful admin tool and should only be used by MQ Admins.
My guess is that they will just want to Browse some queues, in which case RFHUTIL used in conjunction with MQ Client would be plenty for their requirement, or you could write a simple web app showing queue depths on a manager.
Security Exits are used to limit access to certain PC's on the network, it sounds like you need to use authorities on the queues rather than an Exit so you need to read up on the setmqaut, dspmqaut and amqoamd commands and make sure these developers have appropriate access to the Queue Manager. |
Thank you very much, looks like I have to do some reading now!
Appreciated your help very much!
Have a great weekend!
Jan |
|
| Back to top |
|
|
| jstefano |
| Posted: Fri Jul 28, 2006 7:12 am Post subject: |
|
|
Apprentice
Joined: 13 Apr 2006
Posts: 48
|
| jefflowrey wrote: |
But when it comes to trusting the security of your qmgrs to a solution, I personally would rather know that there's someone on the other end who might be able to be held responsible.
So I'd tend to steer away from a "free" solution like BlockIP2. |
Hi Jeff!
Agree with you 100%; looks like I have to do some reading now!
Thanks a million for your help;
Have a great weekend!
Jan |
|
| Back to top |
|
|
| jstefano |
| Posted: Fri Jul 28, 2006 7:14 am Post subject: |
|
|
Apprentice
Joined: 13 Apr 2006
Posts: 48
|
| fjb_saper wrote: |
Check out the capital ware forum(on this site); mq admin manual; and do a search on blockIP2
Enjoy |
Good morning!
Thank you very much, Going to check blockIP2, looks like I have to do some reading now!
Have a great weekend!
Jan |
|
| Back to top |
|
|
|
|
