ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » How to use usersrc(map) and usersrc(channel)

Post new topic  Reply to topic
 How to use usersrc(map) and usersrc(channel) « View previous topic :: View next topic » 
Author Message
pintrader
PostPosted: Sun Aug 24, 2014 9:31 pm    Post subject: How to use usersrc(map) and usersrc(channel) Reply with quote

Disciple

Joined: 22 Jan 2014
Posts: 164

hi
would like to get an understanding on how to use usersrc(map) and usersrc(channel).
In the doc for usersrc(channel):
Inbound connections that match this mapping use the flowed user ID or any user defined on the channel object in the MCAUSER field

what does it mean by flowed User ID?

I wanted to do this

Code:
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user1')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user2')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user3')


But it says authentication records already exists. I think usersrc(map) can only define for one mcauser.

then I did this:
SET CHLAUTH(CHL.SPFMQCLD) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(CHANNEL) MCAUSER('user2')

it says parameter not allowed. if i remove the MCAUSER('user2') parameter, it works. eg
SET CHLAUTH(CHL.SPFMQCLD) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(CHANNEL)

I am a bit confused about the two. hope someone can explain better. thanks
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Mon Aug 25, 2014 3:10 am    Post subject: Re: How to use usersrc(map) and usersrc(channel) Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

pintrader wrote:
hi
would like to get an understanding on how to use usersrc(map) and usersrc(channel).
In the doc for usersrc(channel):
Inbound connections that match this mapping use the flowed user ID or any user defined on the channel object in the MCAUSER field

what does it mean by flowed User ID?


Its is the User ID sent by the MQClient to the MQServer over the CLNTCONN/SVRCONN connection.


pintrader wrote:

I wanted to do this

Code:
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user1')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user2')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user3')


But it says authentication records already exists. I think usersrc(map) can only define for one mcauser.


All 3 of those rules have the same variables or criteria. How is MQ soupposed to know in which cases you want the channel to run as user1 and which as user 2 if you gave the same exact criteria for MQ to decide?

This makes more sense
Code:
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('111.111.111.*') USERSRC(MAP) MCAUSER('user1')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('222.222.222.*') USERSRC(MAP) MCAUSER('user2')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('333.333.333.*') USERSRC(MAP) MCAUSER('user3')


Obviously the IP addresses are made up, but they are different between the 3 rules.


usersrc(map) means use the CHLAUTH rule to change, or map, the ID you may have coded in the MCAUSER of the channel defintion instead to the ID in the CHLAUTH rule, if the connection details match that CHLAUTH rule.

usersrc(channel) means use the ID you have coded in the MCAUSER of the channel definition, or if you left that blank, use the flowed user ID.
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
pintrader
PostPosted: Mon Aug 25, 2014 5:34 am    Post subject: Re: How to use usersrc(map) and usersrc(channel) Reply with quote

Disciple

Joined: 22 Jan 2014
Posts: 164

PeterPotkay wrote:
pintrader wrote:
hi
would like to get an understanding on how to use usersrc(map) and usersrc(channel).
In the doc for usersrc(channel):
Inbound connections that match this mapping use the flowed user ID or any user defined on the channel object in the MCAUSER field

what does it mean by flowed User ID?


Its is the User ID sent by the MQClient to the MQServer over the CLNTCONN/SVRCONN connection.


pintrader wrote:

I wanted to do this

Code:
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user1')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user2')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('*') USERSRC(MAP) MCAUSER('user3')


But it says authentication records already exists. I think usersrc(map) can only define for one mcauser.


All 3 of those rules have the same variables or criteria. How is MQ soupposed to know in which cases you want the channel to run as user1 and which as user 2 if you gave the same exact criteria for MQ to decide?

This makes more sense
Code:
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('111.111.111.*') USERSRC(MAP) MCAUSER('user1')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('222.222.222.*') USERSRC(MAP) MCAUSER('user2')
SET CHLAUTH(CHL.TO.SOMEWHERE) TYPE(ADDRESSMAP) ADDRESS('333.333.333.*') USERSRC(MAP) MCAUSER('user3')


Obviously the IP addresses are made up, but they are different between the 3 rules.


usersrc(map) means use the CHLAUTH rule to change, or map, the ID you may have coded in the MCAUSER of the channel defintion instead to the ID in the CHLAUTH rule, if the connection details match that CHLAUTH rule.

usersrc(channel) means use the ID you have coded in the MCAUSER of the channel definition, or if you left that blank, use the flowed user ID.



thanks for the reply. appreciate
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » How to use usersrc(map) and usersrc(channel)
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.