| Author |
Message
|
| paustin_ours |
 Posted: Thu Nov 21, 2013 11:56 am Post subject: channel authentication record |
 |
|
Yatiri
Joined: 19 May 2004
Posts: 667
Location: columbus,oh
|
I have the default rules
Now i have svrconn chl(TEST.SVRCONN) mca user is blank
i set the rule
SET CHLAUTH('TEST.SVRCONN') TYPE(USERMAP) CLNTUSER('mytest.12345') USERSRC(MAP) MCAUSER('mqm') ADDRESS('*') ACTION(ADD)
when i connect i was expecting the mytest.12345 to get replaced by mqm
and the connection gets mqm access on the qmgr.
i get the below error
AMQ5653: The user 'mytest.12345' is not defined.
ofcourse that ID wont be there, its a client id.
then i added the
SET CHLAUTH('*') TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(NOACCESS) DESCR('Temporary Catch-all rule') ACTION(ADD) which i got from the forum to check whats coming in
i see CLNTUSER(mytest.123456789) as the incoming client ID.
Even if i take that my rule is not getting matched because the incoming client ID is longer in length. I can only specify a 12 character long client user ID when i create the rule.
any suggestions pls? |
|
| Back to top |
|
 |
| paustin_ours |
| Posted: Fri Nov 22, 2013 10:18 am Post subject: |
|
|
Yatiri
Joined: 19 May 2004
Posts: 667
Location: columbus,oh
|
went through the infocenter and the forum and other links online. Just cant seem to get this to work. Not sure what i am missing.
I should be able to replace a incoming client ID with a different ID say'mqm'
if i want the client to have mqm access right? |
|
| Back to top |
|
|
| exerk |
| Posted: Fri Nov 22, 2013 10:55 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
The 'Default rule to disallow privileged users' will prevent you from mapping to any user within the mqm group...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| paustin_ours |
| Posted: Fri Nov 22, 2013 11:04 am Post subject: |
|
|
Yatiri
Joined: 19 May 2004
Posts: 667
Location: columbus,oh
|
| It doesn't allow me to do that even when I delete that default rule to block *MQADMIN privileged users. That i don't understand how or why. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Fri Nov 22, 2013 1:14 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
|
| Back to top |
|
|
|
|
