| Author |
Message
|
| msiegert |
 Posted: Mon Nov 05, 2001 3:23 am Post subject: |
 |
|
Apprentice
Joined: 05 Aug 2001
Posts: 29
|
Hi!
I'd like to secure my SYSTEM.ADMIN.SVRCONN channel on all the Qmgrs administered by one NT-Qmgr via the MQ Explorer by setting up extits.
But what is the concerning "CLNTCONN" on this one administration Qmgr?
Thanks for help.
Marc
|
|
| Back to top |
|
 |
| kolban |
| Posted: Mon Nov 05, 2001 8:17 am Post subject: |
|
|
Grand Master
Joined: 22 May 2001
Posts: 1072
Location: Fort Worth, TX, USA
|
Marc,
I think the last sentence is confusing. Can you clarify the nature of the question? |
|
| Back to top |
|
|
| msiegert |
| Posted: Tue Nov 06, 2001 12:38 am Post subject: |
|
|
Apprentice
Joined: 05 Aug 2001
Posts: 29
|
The MQSeries Explorer connects to remote queue managers as an MQI client application. This means that each remote queue manager must have a definition of a server connection channel and a suitable TCP/IP listener.
The best way to secure the connection between the MQ Explorer machine and the remote machine is available by installing a security exit on the server connection channel SYSTEM.ADMIN.SVRCONN on each queue manager which is to remotely administered.
A matching security exit can be installed on the machine on which the MQSeries Explorer is being used. This allows complete flexibility in the authentication processing performed when a client connection is established to give consistency with your enterprise's MQSeries security policy.
My question is: what channel on the machine where I use the MQ Explorer is the matching channel to the SYSTEM.ADMIN.SVRCONN?
regards Marc
|
|
| Back to top |
|
|
| meekings |
| Posted: Wed Mar 19, 2003 11:10 am Post subject: |
|
|
Voyager
Joined: 28 Jun 2001
Posts: 86
Location: UK, South West
|
| From MQ Explorer, right-click on "IBM MQSeries" and select "Properties". From the panel that comes up you can set Channel Exit Name and Data, in just the same way as you do for the SVRCONN at the destination. |
|
| Back to top |
|
|
| sree |
| Posted: Fri Mar 21, 2003 9:01 pm Post subject: |
|
|
Novice
Joined: 12 Mar 2003
Posts: 19
|
If you want to use security exits, you must use the SVRCONN and CLTCONN pair with the same name on Server and Client boxes. You have proposed to use SYSTEM.ADMIN.SVRCONN on the server box, you must use the same name for your CLTCONN on the client box (NT).
_________________
Thank you.
sree |
|
| Back to top |
|
|
|
|
