| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| sspi to Linux GSS example |
« View previous topic :: View next topic » |
| Author |
Message
|
| bobbee |
 Posted: Tue Jul 06, 2010 12:22 pm Post subject: sspi to Linux GSS example |
 |
|
Knight
Joined: 20 Sep 2001
Posts: 545
Location: Tampa
|
| we have a Windows client talking to a Linux server. The amqsspin.c exit program on the linux side needs to be updated to implement the GSS API to KERBEROS. Has anyone done this. Would you care to share the code. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Jul 06, 2010 1:19 pm Post subject: Re: sspi to Linux GSS example |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| bobbee wrote: |
| we have a Windows client talking to a Linux server. The amqsspin.c exit program on the linux side needs to be updated to implement the GSS API to KERBEROS. Has anyone done this. Would you care to share the code. |
There is some legacy code out there for implementing Kerberos.
However I believe the industry has switched to private/public key SSL (think X509 certificates and not Kerberos). You might want thinking about doing the same? 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| bobbee |
| Posted: Wed Jul 07, 2010 5:26 am Post subject: |
|
|
Knight
Joined: 20 Sep 2001
Posts: 545
Location: Tampa
|
| That would be a good direction but it is not under my control. My client has a Kerberos model. They are huge, I do not think they will change now. I was looking for examples yesterday. I was looking for the specific sample. Wanted to really jump start the developer. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Jul 07, 2010 8:16 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| bobbee wrote: |
| That would be a good direction but it is not under my control. My client has a Kerberos model. They are huge, I do not think they will change now. I was looking for examples yesterday. I was looking for the specific sample. Wanted to really jump start the developer. |
Sorry you might have more chance googling SSL + Kerberos.
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Fri Jul 09, 2010 9:24 am Post subject: Re: sspi to Linux GSS example |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
Hi Bobbee,
| bobbee wrote: |
| we have a Windows client talking to a Linux server. The amqsspin.c exit program on the linux side needs to be updated to implement the GSS API to KERBEROS. Has anyone done this. |
You made me scratch my head, so I just checked both my Linux x86_64 with WMQ v6 and the other one with WMQ v7 and they do not have the amqsspin.c sample.
The reason it is not included is because it is a Windows only sample. By that I mean, it is meant to run on a Windows server running a queue manager which is authenticating incoming client channel connection requests from "other" platforms.
So basically you are out of luck. Although, for Linux, you can start from scratch and use OpenSSL:
http://www.sxw.org.uk/computing/patches/openssh.html
Also, I believe Quest Authentication Services (aka Vintela Authentication Services) supports GSS-API.
The real question is "what is your client's authentication target". i.e. What are they authenticating against? LDAP, MS Active Directory, etc...
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
