| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MCA Setting for 2 Different Environment |
« View previous topic :: View next topic » |
| Author |
Message
|
| silvestrelsl |
 Posted: Mon Oct 06, 2008 6:53 pm Post subject: MCA Setting for 2 Different Environment |
 |
|
Novice
Joined: 29 Sep 2008
Posts: 10
|
Scenario:
1. I have MQ client installed in a Windows server with IIS.
2. I have MQ server runs in z/OS environment.
3. As I know, if I put a message into a queue by using MQ client, the message user identifier is my NT account name.
Question:
1. Since Windows authentication use Active Directory while z/OS use its own user authentication method, what MCA user should I configure in my server connection channel in my z/OS MQ?
2. When my web users put a message, the message user identifier is shown as "NETWORK SERV". Is that mean, I need to configure MCA user in z/OS as "NETWORK SERV"?
Please advice. Thanks in advance.
PS: I know if I leave the MCA user configuration blank may solve the problem, but I have to have this to be configured due to security concern. |
|
| Back to top |
|
 |
| atheek |
| Posted: Mon Oct 06, 2008 9:39 pm Post subject: |
|
|
Partisan
Joined: 01 Jun 2006
Posts: 327
Location: Sydney
|
| silvestrelsl wrote: |
Scenario:
1. I have MQ client installed in a Windows server with IIS.
2. I have MQ server runs in z/OS environment. |
Note that you need to have an extra piece of software called Client Attachment Facility ( CAF) running on Z/OS if you want to connect to it in client mode. This requires extra licensing.
| silvestrelsl wrote: |
Question:
1. Since Windows authentication use Active Directory while z/OS use its own user authentication method, what MCA user should I configure in my server connection channel in my z/OS MQ? |
Your mcauser should be configured with a valid Z/OS user that has the ( and only has) the privelages which applications that connect using it should have.
| silvestrelsl wrote: |
2. When my web users put a message, the message user identifier is shown as "NETWORK SERV". Is that mean, I need to configure MCA user in z/OS as "NETWORK SERV"? |
Not required. Whatever set as MCAUSER ( should be a valid Z/OS user in your case) overrides everything else.
| silvestrelsl wrote: |
| ]PS: I know if I leave the MCA user configuration blank may solve the problem, but I have to have this to be configured due to security concern. |
True |
|
| Back to top |
|
|
| silvestrelsl |
| Posted: Tue Oct 07, 2008 1:58 am Post subject: |
|
|
Novice
Joined: 29 Sep 2008
Posts: 10
|
| Wow, you know a lot. Thanks for helping me again. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
