|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
![Reply to topic](templates/DAJ_Glass/images/lang_english/reply.gif) |
|
Security Exit at MQIPT |
« View previous topic :: View next topic » |
Author |
Message
|
rajindrap |
Posted: Tue Aug 15, 2017 6:17 am Post subject: Security Exit at MQIPT |
|
|
Newbie
Joined: 25 Oct 2015 Posts: 3
|
I need to read and verify the mcauser id at MQIPT before the connection is forwaded. I went throught the documentation for MQIPT and its java classes for security exit does only provide some handful of parameters like channel name, QM name, client IP etc. referred: https://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm.mq.ipt.doc/ipt2350_.htm
Is it possible to get userid/password details in user defined secuirty exit at MQIPT?
I have never written exit programs for MQ. Please guide if it is at all possible to achive. |
|
Back to top |
|
![](templates/DAJ_Glass/images/spacer.gif) |
RogerLacroix |
Posted: Tue Aug 15, 2017 3:46 pm Post subject: Re: Security Exit at MQIPT |
|
|
![](images/avatars/136281076646ca0b3d89dee.gif) Jedi Knight
Joined: 15 May 2001 Posts: 3254 Location: London, ON Canada
|
MQIPT is a pass-through application and not the end application.
Firstly, the password should/would never be exposed to the MQIPT because it is potentially a security risk.
Did you read this:
The channel name and queue manager name will not be available if the SSLProxyMode property has been enabled, as this feature is only used to tunnel SSL/TLS data and therefore the data usually obtained from the initial data flow will be unreadable.
Third, why not let the security exit at the queue manager handle authentication of the incoming UserId and Password. See MQAUSX for more info.
rajindrap wrote: |
I have never written exit programs for MQ. |
Well then, you should purchasing a solution or use CONNAUTH in MQ v8 or higher.
Regards,
Roger Lacroix
Capitalware Inc. _________________ Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
Back to top |
|
![](templates/DAJ_Glass/images/spacer.gif) |
|
|
![Reply to topic](templates/DAJ_Glass/images/lang_english/reply.gif) |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|