| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ Explorer & z/OS RACF / ACF2 / Top Secret IDs |
« View previous topic :: View next topic » |
| Author |
Message
|
| cehughesiii |
 Posted: Tue Nov 13, 2007 3:50 pm Post subject: MQ Explorer & z/OS RACF / ACF2 / Top Secret IDs |
 |
|
Newbie
Joined: 25 Oct 2007
Posts: 3
|
Any "best practices", or at least common practices, out there for using MQ Explorer and z/OS QMgrs?
I've scraped by for about a year by having an ACF2 LID that matches my network/Windows ID. My contact in Information Security moved on, and the new one doesn't like that set-up. He's pressing me to get Explorer to ask for, & pass, my existing ACF2 LID & password when I connect to z/OS. We've gone rounds, and have even included IBM, but haven't satisfied him yet.
Can this be done? Is it a normal request? Does anyone know if IBM's planning to make Explorer work better with z/OS in future releases?
Thanks much. |
|
| Back to top |
|
 |
| RogerLacroix |
| Posted: Tue Nov 13, 2007 8:09 pm Post subject: Re: MQ Explorer & z/OS RACF / ACF2 / Top Secret IDs |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| cehughesiii wrote: |
Any "best practices", or at least common practices, out there for using MQ Explorer and z/OS QMgrs?
I've scraped by for about a year by having an ACF2 LID that matches my network/Windows ID. My contact in Information Security moved on, and the new one doesn't like that set-up. He's pressing me to get Explorer to ask for, & pass, my existing ACF2 LID & password when I connect to z/OS. We've gone rounds, and have even included IBM, but haven't satisfied him yet.
Can this be done? Is it a normal request? Does anyone know if IBM's planning to make Explorer work better with z/OS in future releases? |
Proper security - you don't need no stinkin security!  
Seriously. What you have described is: MQ Authenticate User Security Exit for z/OS (z/MQAUSX)
See chapter 3.2 of the MQAUSX Client-side Configuration manual for a description of MQ Explorer v6 setup.
http://www.capitalware.biz/mqausx_zos_manuals.html
We offer free trials for z/MQAUSX. (no strings attached)
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| cehughesiii |
| Posted: Fri Nov 16, 2007 2:06 pm Post subject: |
|
|
Newbie
Joined: 25 Oct 2007
Posts: 3
|
Not Bad, Roger. I'll look a little further into this, and pass the "Business Case" document on to our Info Sec department.
THANKS!
Trey |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
