| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ Userid or username |
« View previous topic :: View next topic » |
| Author |
Message
|
| garasan |
 Posted: Tue Feb 23, 2010 2:32 am Post subject: MQ Userid or username |
 |
|
Apprentice
Joined: 22 Jul 2008
Posts: 42
Location: Antwerp, Belgium
|
Hi,
I got a good question that I actualy don't know have a clear answer on.
First some info to scetch the general picture:
- 2 Domains: 1 & 2
- userA is defined in domain 1 with username tst and userid 1025 and is part of the mqm group.
- userB is defined in domain 2 with username testuser and userid 1025
- Both servers can connect to eachother
qmgr server: Websphere MQ 6.x.x
1qmgr: qmgrtest1
OS qmgr server: Sles10sp2
MQ Server is part of domain 1
App server: IBM WebSphere Application server 6.x
OS App server: Windows2003 or Linux
MQ client present
App Server is part of domain 2
Will the app server which uses UserB to connect to the qmgr have access to qmgrtest1 or not based on the equal userid?
Basicly the question is: is MQ using the userid, the username or both of a user in defined group that has access to a qmgr to allow/deny access.
If more info is required I will be happy to provide it.
_________________
Regards |
|
| Back to top |
|
 |
| garasan |
| Posted: Tue Feb 23, 2010 2:50 am Post subject: |
|
|
Apprentice
Joined: 22 Jul 2008
Posts: 42
Location: Antwerp, Belgium
|
Or is MQ going to look at the group ID defined for the user as MQ on linux is group based and not user based?
_________________
Regards |
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Feb 23, 2010 5:24 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Uh.... none of the above?
WAS is not necessarily going to flow the service id through to the queue manager in the first place.
Set an MCAUSER, configure SSL, set a value for SSLPEER and stop worrying. |
|
| Back to top |
|
|
| garasan |
| Posted: Tue Feb 23, 2010 6:24 am Post subject: |
|
|
Apprentice
Joined: 22 Jul 2008
Posts: 42
Location: Antwerp, Belgium
|
Hi,
thanks for the reply.
Rather than using a workarround I would like to know the answer, even if only to answer my curiousity.
_________________
Regards |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Feb 23, 2010 7:10 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| garasan wrote: |
| Rather than using a workarround I would like to know the answer, even if only to answer my curiousity. |
That was the answer. The whole answer.
WAS isn't going to flow the service id through to the queue manager.
Any MDB can flow any userid through to the queue manager. That user id will be checked by the queue manager in accordance with the rules.
Hence to properly control this and simply administration, set an MCAUser. To be certain about the interity of the process use SSL.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
