MQSeries.net :: View topic

kevinf2349 · Posted: Thu Jul 24, 2008 9:39 am Post subject:

With the current drive for SOX compliance we are having to revisit the IMS OTMA bridge security solution we have in place.

At the moment we drop message onto the IMS bridge queue from many windows and unix hub servers. The application uses a generic batch id (ACF2 defined) and hardcode a password in the IIH authenticator field.

I am looking at ensuring that the persons own userid is used but that leads to a problem in that their password would be in clear text in the IMS header of the message.

So I was wondering:

a) how other sites authenticate IMS bridge transactions.
b) If other sites use PassTickets...if so...how?
c) If this is the best solution at all!

Any help would be greatly appreciated.