MQSeries.net :: View topic

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » MQ Security

MQ Security

« View previous topic :: View next topic »

Author

Message

Mitra

Posted: Mon May 09, 2011 7:36 am Post subject: MQ Security

Voyager

Joined: 21 Mar 2011
Posts: 78

HI ,

We have the clients connecting to MQ Servers in QA and Prod envi with same ID and pwd using System.Servconn.
so the client kept the messages into Prod and get the messages from QA. so is there anyway to restrict the usage of the client to particular environment only.
Is this because of having same Id and Pwd for both environments or using the same Svrconn channel?

Vitor

Posted: Mon May 09, 2011 8:07 am Post subject: Re: MQ Security

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

Mitra wrote:

We have the clients connecting to MQ Servers in QA and Prod envi with same ID and pwd using System.Servconn.

Applications should not use SYSTEM objects.

Mitra wrote:

so the client kept the messages into Prod and get the messages from QA. so is there anyway to restrict the usage of the client to particular environment only.

Yes. One possible method is to have the application connect to a generic queue manager "FRED" and have 2 different CCDT tables in the 2 environments that resolve to the different actual queue managers.

Other methods are possible and may suit your situation better.

Mitra wrote:

Is this because of having same Id and Pwd for both environments or using the same Svrconn channel?

Well having the same user id & password for production & test is never a good idea if for no other reason it's a gift to the unscrupulous and the sort of thing auditors frown on. But yes, if the test user didn't exist in prod obvious there wouldn't be a problem. Note also that WMQ doesn't use passwords (it doesn't authentic users); there have been any number of disucssions in here on how to prove whoever's connecting to your queue manager is who they say they are.
_________________
Honesty is the best policy.
Insanity is the best defence.

mqjeff

Posted: Mon May 09, 2011 8:39 am Post subject:

Grand Master

Joined: 25 Jun 2008
Posts: 17447

Try this:

http://www.ibm.com/developerworks/websphere/techjournal/0901_mismes/0901_mismes.html

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » MQ Security

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP