| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MCAUSERID in iSeries channel |
« View previous topic :: View next topic » |
| Author |
Message
|
| raju_400 |
 Posted: Wed Mar 28, 2007 7:22 am Post subject: MCAUSERID in iSeries channel |
 |
|
Newbie
Joined: 25 Mar 2004
Posts: 4
Location: Bangalore - India
|
I have a setup of two qmgrs with sdr-rcvr channel and a remote q-local q.
Side A: SDR-channel, Remote Q
Side B: RCVR-channel, Local Q
I have mentioned MCAUSERID as *NONE also I am using a user profile in side A, USR1 with authority to *CONNECT to the qmgr and *PUT to the Remote Q. When I log in using USR1 and put messages to RQ it is going to side B local Q and user identifier is showing as USR1 even though there is no USR1 on side B. The behaviour is same if I put USR1 as MCAUSERID. Isn't this is a problem? |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Wed Mar 28, 2007 7:27 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
It's working as designed. Authorization checks are performed only on the queue manager you connect to.
This is one reason qremotes and qaliases are useful, and one reason you should be very very careful to whom you give write access to XMITQs.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| raju_400 |
| Posted: Wed Mar 28, 2007 7:48 am Post subject: |
|
|
Newbie
Joined: 25 Mar 2004
Posts: 4
Location: Bangalore - India
|
Thanks for the update, but just to clarify my doubts:
The infocenter reads about MCAUSERID: Specifies the message channel agent user identifier which is to be used by the message channel agent for authorization to access MQ resources, including (if PUTAUT is *DFT) authorization to put the message to the destination queue for receiver or requester channels.
1. what is the function of MCAUSERID then? How we can use it to prevent access? or it is for some other purpose.
2. Does this means if I know the Remote Q and remote qmgr name I can put messages to the remote side even if I don't have access to that machine?
3. Generally, to access iSeries using any GUI, tools, we need to have a valid id on the machine and authorites are evaluated based upon that.
Thanking you once again |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
