|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
|
|
FMC schema |
« View previous topic :: View next topic » |
Author |
Message
|
mqyuan |
Posted: Tue Mar 10, 2009 2:17 pm Post subject: FMC schema |
|
|
Newbie
Joined: 10 Mar 2009 Posts: 2
|
hi,
I am trying to understand the Workflow environment in my workplace.
There is an MQ workflow installed within a WAS that communicates to an Oracle database DB1. The credential is stored within the WAS.
There is also a Workflow server out of the WAS which writes to the FMC schema in DB1. The credential to authenticate to this FMC schema is stored within the Workflow server in clear text.
I'd like to understand the following:
1. What is the function of this FMC schema?
2. Why are there two different communications to DB1; from WAS and from the Workflow server itself?
3. If the FMC schema is compromised, what would be the impact?
4. Is there a way to encrypt the credential within the Workflow server?
Thanks |
|
Back to top |
|
|
Vitor |
Posted: Tue Mar 10, 2009 3:21 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
Moved to correct section _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
|
hos |
Posted: Wed Mar 11, 2009 1:21 am Post subject: |
|
|
Chevalier
Joined: 03 Feb 2002 Posts: 470
|
Hi,
although the description of your setup is unclear to me here some basic answers:
1. What is the function of this FMC schema?
These are the tables managed by MQWF
2. Why are there two different communications to DB1; from WAS and from the Workflow server itself?
MQWF does not communicate to the DB within WAS. The only part of MQWF that runs in WAS is the MQWF web client which communicates with the MQWF server and not with the DB.
If you are having a DB connection to DB1 in WAS, it is because your application or modified web client does some DB handling. But this is in your responsibility - MQWF does not use this connection. Therefore the ecryption is in your responsibility, too.
3. If the FMC schema is compromised, what would be the impact?
If you mean the DB content stored with schema FMC, the impact would be severe: MQWF would be unable to run and hopefully you have a backup copy.
4. Is there a way to encrypt the credential within the Workflow server?
Not sure what you mean by credential. qm.ini? There are ways to avoid exposure of userID / password in clear text in this file. You need to protect this file via OS or you can use MQ administration to allow fmc user access without userID / password. |
|
Back to top |
|
|
mqyuan |
Posted: Wed Mar 11, 2009 2:44 am Post subject: |
|
|
Newbie
Joined: 10 Mar 2009 Posts: 2
|
Hi hos,
Thanks very much for your response.
In relation to 1 & 4;
1 - I am still not clear about the FMC schema. How does it differ to the other tables used by MQWF in DB1? What type of information would be stored within the FMC schema?
2- Yes, that would be the credentials in qm.ini. How do I use the MQ administration to allow access for just the FMC user? Is there no way to have it encrypted by the MQWF server?
Thanks |
|
Back to top |
|
|
|
|
|
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|