Author |
Message
|
sai kumar adduri |
Posted: Tue Aug 27, 2013 5:41 am Post subject: security for soap input node |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
Hi ,
How do we provide userid and password authentication in soap input node without using any authentication servers |
|
Back to top |
|
 |
lancelotlinc |
Posted: Tue Aug 27, 2013 5:52 am Post subject: Re: security for soap input node |
|
|
 Jedi Knight
Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA
|
sai kumar adduri wrote: |
Hi ,
How do we provide userid and password authentication in soap input node without using any authentication servers |
Did you try searching the InfoCentre ? _________________ http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
Back to top |
|
 |
sai kumar adduri |
Posted: Tue Aug 27, 2013 6:08 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
yes and I am trying to implement security pep node |
|
Back to top |
|
 |
lancelotlinc |
Posted: Tue Aug 27, 2013 6:13 am Post subject: |
|
|
 Jedi Knight
Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA
|
sai kumar adduri wrote: |
yes and I am trying to implement security pep node |
And what did you learn reading the InfoCentre? When you tried the working example sample, what happened ? Did it work? _________________ http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
Back to top |
|
 |
sai kumar adduri |
Posted: Tue Aug 27, 2013 6:16 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
I have seen that this node should use a security profile , how to configure it |
|
Back to top |
|
 |
lancelotlinc |
Posted: Tue Aug 27, 2013 6:19 am Post subject: |
|
|
 Jedi Knight
Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA
|
sai kumar adduri wrote: |
I have seen that this node should use a security profile , how to configure it |
The working example sample has step-by-step instructions. What happened when you followed them? _________________ http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
Back to top |
|
 |
Vitor |
Posted: Tue Aug 27, 2013 6:23 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
sai kumar adduri wrote: |
I have seen that this node should use a security profile , how to configure it |
Like this? First hit I got typing "configure a security profile" into the InfoCenter.
Question: why use a Security PEP node rather than apply the profile to the SOAP Input node you already use?
Also I'm interested by this:
sai kumar adduri wrote: |
How do we provide userid and password authentication in soap input node without using any authentication servers |
If you're not using any authentication servers, what are you authenticating the user id and password against? I suspect this is the root of your question about configuring the security profile, as that points to an external security server. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
sai kumar adduri |
Posted: Tue Aug 27, 2013 6:43 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
sorry for this , i want to whether we have any possibility to authenticate with out any servers |
|
Back to top |
|
 |
lancelotlinc |
Posted: Tue Aug 27, 2013 6:47 am Post subject: |
|
|
 Jedi Knight
Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA
|
sai kumar adduri wrote: |
sorry for this , i want to whether we have any possibility to authenticate with out any servers |
So, lets say you get a uid and pwd in from the SOAPInput node. You say you want to authenticate without any servers. Does that mean you will lookup the user in a database and see if the password is correct ? _________________ http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
Back to top |
|
 |
Vitor |
Posted: Tue Aug 27, 2013 6:52 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
sai kumar adduri wrote: |
sorry for this , i want to whether we have any possibility to authenticate with out any servers |
Of course there is. If you're not planning to use any external authentication service then determine what you will use to authenticate the supplied credentials, then determine how best to connect to that process / appliance / store.
For example, you can authenticate the supplied user id and password against 2 values hard coded into some ESQL. I don't think anyone, yourself included, would consider that a valid solution but it's technically possible. So determine what you're doing, then deisgn the best technical solution to implement it. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
mqjeff |
Posted: Tue Aug 27, 2013 6:58 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
Are you sure you mean "authenticate"?
Maybe you mean "authorize"?
Maybe you mean "identify"?
Are you sure the requirement is "no external servers"? Maybe that means "only the local security repository"? Maybe "the local security repository" is actually "an external server"? What will you do then? |
|
Back to top |
|
 |
sai kumar adduri |
Posted: Tue Aug 27, 2013 6:59 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
yup that's great I have worked on it , got it.
The next thing is I want to do the same with the security profile as well , and now i came to know that it requires any external server , for authentication.
Summery we either need to hit the db or need an external server for authentication.
My last question is |
|
Back to top |
|
 |
sai kumar adduri |
Posted: Tue Aug 27, 2013 7:03 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
can u just brief me how does it work when an external server is used |
|
Back to top |
|
 |
lancelotlinc |
Posted: Tue Aug 27, 2013 7:06 am Post subject: |
|
|
 Jedi Knight
Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA
|
sai kumar adduri wrote: |
can u just brief me how does it work when an external server is used |
Did you try searching the InfoCentre ? _________________ http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
Back to top |
|
 |
sai kumar adduri |
Posted: Tue Aug 27, 2013 7:09 am Post subject: |
|
|
Acolyte
Joined: 04 Apr 2013 Posts: 73
|
yes , what I understood is , a security profile is created with the details of external server , from where it actually gets the details to check with .
Question:are the external servers similar to the data base (the way they store the details) |
|
Back to top |
|
 |
|