ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexWebSphere Message Broker SupportIIB - Java user-defined input Node with security identity

Post new topicReply to topic
IIB - Java user-defined input Node with security identity View previous topic :: View next topic
Author Message
cxzchen
PostPosted: Thu Apr 13, 2017 9:06 am Post subject: IIB - Java user-defined input Node with security identity Reply with quote

Newbie

Joined: 13 Apr 2017
Posts: 3

Hi, I would like to develop a Java user-defined node to query AD(Active Directory), not for authentication. The LDAP API of java needs credential (user name and password) to set up a connection or session with AD server. I know I can set up user name and password as node properties but this is not preferred way. How can I do it like other input nodes like MQInputNode to have a security identity as property. thank you
Back to top
View user's profile Send private message
Vitor
PostPosted: Thu Apr 13, 2017 9:11 am Post subject: Re: IIB - Java user-defined input Node with security identit Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 24328
Location: Ohio, USA

cxzchen wrote:
Hi, I would like to develop a Java user-defined node to query AD(Active Directory), not for authentication.


Then why? What attributes are you after?

I wonder if there's an easier way to achieve your requirement - a user-defined node should be the last recourse (and not to say that's not where you'll end up eventually). Why not (spit-balling here) use a REST API to interrogate AD?

I leave my more Java literate associates to comment on your actual question.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
cxzchen
PostPosted: Thu Apr 13, 2017 9:49 am Post subject: Re: IIB - Java user-defined input Node with security identit Reply with quote

Newbie

Joined: 13 Apr 2017
Posts: 3

Vitor wrote:
cxzchen wrote:
Hi, I would like to develop a Java user-defined node to query AD(Active Directory), not for authentication.


Then why? What attributes are you after?

I wonder if there's an easier way to achieve your requirement - a user-defined node should be the last recourse (and not to say that's not where you'll end up eventually). Why not (spit-balling here) use a REST API to interrogate AD?

I leave my more Java literate associates to comment on your actual question.


Thank for the quick reply. For sure I will use user-defined node in Java. The property/attribute is "Security Identity". The problem here is how the node implementation look up the user name and password given the security identity. The security identity is set up by running mqsidbparams ... thanks again
Back to top
View user's profile Send private message
Vitor
PostPosted: Thu Apr 13, 2017 10:05 am Post subject: Re: IIB - Java user-defined input Node with security identit Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 24328
Location: Ohio, USA

cxzchen wrote:
The property/attribute is "Security Identity".


Which I feel certain is available through the AD API.

cxzchen wrote:
The problem here is how the node implementation look up the user name and password given the security identity.


Like I said, outside my area of knowledge. Someone more helpful will undoubtedly be along in a moment.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Thu Apr 13, 2017 10:15 am Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17258

What are you trying to get from AD?

Why are you trying to get it inside IIB?

Why are you trying to use Java code to get it?

Are there any methods in the Java user defined API for accessing security profiles?
_________________
Read, Think, Try, Repeat
Back to top
View user's profile Send private message
cxzchen
PostPosted: Fri Apr 14, 2017 1:02 pm Post subject: Reply with quote

Newbie

Joined: 13 Apr 2017
Posts: 3

mqjeff wrote:
What are you trying to get from AD?

Why are you trying to get it inside IIB?

Why are you trying to use Java code to get it?

Are there any methods in the Java user defined API for accessing security profiles?


some attributes like email address etc.

I want to use user-defined node in Java. no current build-in nodes support this

That is the question I want to ask you if there is any API to get the credentail given the security identity
Back to top
View user's profile Send private message
joebuckeye
PostPosted: Mon Apr 17, 2017 4:49 am Post subject: Reply with quote

Partisan

Joined: 24 Aug 2007
Posts: 302
Location: Columbus, OH

Doesn't it make it less secure if there is an API to access the security profile credentials (mainly password)?

I know you can use mqsireportdbparms to get the id used in a security profile but not the password.

I wish there was a way I could access security profiles via ESQL when building a non-SOAP request that needed username/password. It only works for protocols that have well defined places where username and passwords are needed.
Back to top
View user's profile Send private message
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexWebSphere Message Broker SupportIIB - Java user-defined input Node with security identity
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.