| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| dspmqaut on client? |
« View previous topic :: View next topic » |
| Author |
Message
|
| saikat89 |
 Posted: Sun Jan 13, 2013 7:47 am Post subject: dspmqaut on client? |
 |
|
Novice
Joined: 06 Sep 2012
Posts: 15
|
Hi,
How can I check the authority of osuser on server-connection channel on clientside. Can I use dspmqaut?
I am unable to find the syntax for clientside server-connection channel authority checking
Please help.
Regards,
Saikat |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Sun Jan 13, 2013 8:05 am Post subject: Re: dspmqaut on client? |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| saikat89 wrote: |
How can I check the authority of osuser on server-connection channel on clientside.
|
There is no queue manager on the client-side; therefore, there is no SVRCONN channel on the client-side.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Sun Jan 13, 2013 9:36 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
|
| Back to top |
|
|
| Vitor |
| Posted: Sun Jan 13, 2013 11:11 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqjeff wrote: |
| http://www.redbooks.ibm.com/abstracts/sg248069.html |
Well worth a read, even if you think you know about security. 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mvic |
| Posted: Mon Jan 14, 2013 8:52 am Post subject: Re: dspmqaut on client? |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| saikat89 wrote: |
| How can I check the authority of osuser on server-connection channel on clientside. Can I use dspmqaut? |
dspmqaut is a server side program.
If you want to enquire about authority records from a client, you have to use PCF commands such as MQCMD_INQUIRE_AUTH_RECS. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Jan 14, 2013 8:58 am Post subject: Re: dspmqaut on client? |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| mvic wrote: |
| saikat89 wrote: |
| How can I check the authority of osuser on server-connection channel on clientside. Can I use dspmqaut? |
dspmqaut is a server side program.
If you want to enquire about authority records from a client, you have to use PCF commands such as MQCMD_INQUIRE_AUTH_RECS. |
In order to issue those commands, you have to be authorized to issue them in the first place. This is not usually available from an MQ client, nor should it routinely be available to an MQ client application performing business work.
The topic of managing the security of an MQ install, particularly involving MQ clients, is not as straight forward as the security of other kinds of things, like databases or mail clients or etc. where the notion of an authenticated id is part and parcel of the transport negotiation during connect.
Read the redbook. Read the info center. Don't assume that an MQ client has any authorizations of any kind. Don't assume that any ID associated with the MQ client install is the ID that is actually being used on the server to authenticate or authorize. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
