| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MCAUSER |
« View previous topic :: View next topic » |
| Author |
Message
|
| KIDINMQ |
 Posted: Mon May 26, 2014 9:25 am Post subject: MCAUSER |
 |
|
Novice
Joined: 12 Nov 2013
Posts: 15
|
| If the channel parameter set to MCAUSER(mqm), will it be accessible to all the applications anonymously ? MCAUSER(mqm) not required for SYSTEM channels right ? |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Mon May 26, 2014 9:47 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
If your security is set up correctly everyone should be getting RC 2035.
Do not give applications mqm authority. This is just bad practice. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| PaulClarke |
| Posted: Mon May 26, 2014 11:22 pm Post subject: |
|
|
Grand Master
Joined: 17 Nov 2005
Posts: 1002
Location: New Zealand
|
The exact behaviour depends on which channel you are talking about. But effectively setting MCAUSER to 'mqm' gives the channel the power to put to any queue and therefore it removes security. For a demonstration or test system this might be ok but in general it is not recommended. You should try and ensure that all channels run with the right security profile rather than just making everything run with 'God' level.
As for the SYSTEM channels, 'no', they do no automatically get 'mqm' authority. They are treated the same as all the other channels. However, in general it is perhaps best not to use SYSTEM channels. Disabling the SYSTEM channels and defining your own channels is more secure. After all, if you were trying to hack in to an MQ system you may well try to connect in on SYSTEM.DEF.SVRCONN. If this channel is knobbled in some way then you need not worry. SYSTEM channels are also used as 'templates' for definitions so it may be awkward if they were also used 'as-is'.
Cheers,
Paul.
_________________
Paul Clarke
MQGem Software
www.mqgem.com |
|
| Back to top |
|
|
| KIDINMQ |
| Posted: Tue Jun 03, 2014 8:33 am Post subject: |
|
|
Novice
Joined: 12 Nov 2013
Posts: 15
|
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
