| Author |
Message
|
| dude1 |
 Posted: Thu Mar 08, 2007 6:35 am Post subject: Username Pwd authentication |
 |
|
Novice
Joined: 20 Feb 2007
Posts: 10
|
Hello guys...
I am trying to connect to a MQ on a different network.....
I have the Q manager name, channel name, IP address & port number...
all the necessary information....
I am given a user name and password which is set to the mqm group in the system where the Q's reside...
but when i try to access the Q i get 2035 error code... when run the same code on the system where the Q sits.. it works fine...
i guess the code is trying to get authenticated with my Windows user name and password ... (may be i dont know how to force a different username password..)
(I use MQ server 6.0 on windows.. and i am trying to connect using C++)
This is wat i do.... PrimaryChannel is a ImqChannel variable...
PrimaryChannel.setUserId("user");
PrimaryChannel.setPassword("pwd");
How am i supposed to specify the username and password explicitly to get authenticated...
Thanks in advance
Badri |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Thu Mar 08, 2007 6:39 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Have you considered searching here for "Username pwd"?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 08, 2007 6:41 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Or "client connection security" (or some similar combination of words)?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Thu Mar 08, 2007 6:45 am Post subject: |
|
|
Guest
|
| (Uh, oh. It looks like we're slipping back into sarcasm/irritation/annoyance style responses... Fight the urge.) |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Mar 08, 2007 6:49 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| bruce2359 wrote: |
| (Uh, oh. It looks like we're slipping back into sarcasm/irritation/annoyance style responses... Fight the urge.) |
It's essentially a double-post.
http://www.mqseries.net/phpBB2/viewtopic.php?t=35215
I repeat my earlier answer.
With C or C++ clients, and anything based on those clients, the only user that can ever be presented to the queue manager for authorization at the time of connection is the logged on user.
Unless there's a security exit involved.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 08, 2007 7:02 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| bruce2359 wrote: |
| (Uh, oh. It looks like we're slipping back into sarcasm/irritation/annoyance style responses... Fight the urge.) |
I claim extenuating circumstances in the form of a newbie PM asking for "urgent" help - reading a message destructively off a queue. Also not the best time in the day job; dev team have suceeded in enriching ignorance to produce weapons-grade stupidity... 
Consider my urges added to the list of things I'm fighting.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| dude1 |
| Posted: Thu Mar 08, 2007 7:03 am Post subject: |
|
|
Novice
Joined: 20 Feb 2007
Posts: 10
|
I know jeff...
I was the who posted that too... i wanted to continue on that thread... but thought of starting a new thread... because there some other problem discussed regarding code 2069 i guess. and i thouht people might get confused
How am I supposed to set MCAUser attribute through code... the only method i see for the ImqChannel regadring the user name and pwd was
setUserId and Password... which I tried to do... |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 08, 2007 7:05 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| dude1 wrote: |
| How am I supposed to set MCAUser attribute through code |
You're not - it's an administrative function. Speak to your friendly MQ administrator.
Or if you're on my site at the moment, your unfriendly sarcastic and growling slightly MQ administrator. 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| dude1 |
| Posted: Thu Mar 08, 2007 7:06 am Post subject: |
|
|
Novice
Joined: 20 Feb 2007
Posts: 10
|
"With C or C++ clients, and anything based on those clients, the only user that can ever be presented to the queue manager for authorization at the time of connection is the logged on user. "
sorry I dint c this
Hey but i know certain people do connect with user name and password ... they are in different network....but still they access the Q...
This fact just contradicts ur statement....
Thanks again |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Mar 08, 2007 7:09 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You can't change the MCAUser on the SVRCONN side from your client program.
I'll say it again. You can't do what you want to do with a C or C++ client without a security exit!
If you want to properly authorize your client applications, then you can either buy and implement a product, or you can implement a role-based security by using a combination of SSL and an MCAUser on the channel. You will ensure that only the right machines and right client applications can connect by being careful how you create and distribute certificates, and you will ensure that the users of a particular channel can only do certain things by setting a single, fixed MCAUser on the channel to a user that only has those needed rights.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| dude1 |
| Posted: Thu Mar 08, 2007 7:10 am Post subject: |
|
|
Novice
Joined: 20 Feb 2007
Posts: 10
|
Hey Victor i dint mean to hurt u dude...
I never meant to leave any scarcastic remarks... I am new to MQ devp... and i am trying to get my some knowledge from you guys... to make my code work..
Pls dont mistake me...
Thanks for all your help |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Mar 08, 2007 7:12 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| dude1 wrote: |
"With C or C++ clients, and anything based on those clients, the only user that can ever be presented to the queue manager for authorization at the time of connection is the logged on user. "
sorry I dint c this
Hey but i know certain people do connect with user name and password ... they are in different network....but still they access the Q...
This fact just contradicts ur statement.... |
Then go ask those people how they did it!
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 08, 2007 7:13 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| dude1 wrote: |
This fact just contradicts ur statement....
|
At the risk of putting words in the mouth of the Grand Poobah, no it doesn't.
You can't present anything other than the userid / password of the logged on user. You can provide different user ids using a variety of different methods (e.g. channel exits).
Why should a user on a different network have a problem accessing the queues? They can either be authorised in their own right or have an MCAUser assigned to their channel for starters..... 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 08, 2007 7:16 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| dude1 wrote: |
| I never meant to leave any scarcastic remarks |
Not you - me! I'm dumping sarcasm like toxic waste over the team here and it's leaking everywhere. I'm guessing you're not on my site or you'd know that (people are starting to avoid me - thank God!) so you should have more luck getting a MCAUser set up with your admin.
Consider yourself unmistaken. Except about the security thing, where I think you might be! 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Michael Dag |
| Posted: Thu Mar 08, 2007 7:21 am Post subject: |
|
|
Jedi Knight
Joined: 13 Jun 2002
Posts: 2607
Location: The Netherlands (Amsterdam)
|
| Vitor wrote: |
| me! I'm dumping sarcasm like toxic waste over the team here and it's leaking everywhere. I'm guessing you're not on my site or you'd know that (people are starting to avoid me - thank God!) |
sounds familiar... I guess there is a growing number of "Vitors" out there....
_________________
Michael
MQSystems Facebook page |
|
| Back to top |
|
|
|
|
