ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » User Exits » Security Exit at MQIPT

Post new topic  Reply to topic
 Security Exit at MQIPT « View previous topic :: View next topic » 
Author Message
rajindrap
PostPosted: Tue Aug 15, 2017 6:17 am    Post subject: Security Exit at MQIPT Reply with quote

Newbie

Joined: 25 Oct 2015
Posts: 3

I need to read and verify the mcauser id at MQIPT before the connection is forwaded. I went throught the documentation for MQIPT and its java classes for security exit does only provide some handful of parameters like channel name, QM name, client IP etc. referred: https://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm.mq.ipt.doc/ipt2350_.htm

Is it possible to get userid/password details in user defined secuirty exit at MQIPT?

I have never written exit programs for MQ. Please guide if it is at all possible to achive.
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Tue Aug 15, 2017 3:46 pm    Post subject: Re: Security Exit at MQIPT Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3252
Location: London, ON Canada

MQIPT is a pass-through application and not the end application.

Firstly, the password should/would never be exposed to the MQIPT because it is potentially a security risk.

Did you read this:

The channel name and queue manager name will not be available if the SSLProxyMode property has been enabled, as this feature is only used to tunnel SSL/TLS data and therefore the data usually obtained from the initial data flow will be unreadable.

Third, why not let the security exit at the queue manager handle authentication of the incoming UserId and Password. See MQAUSX for more info.

rajindrap wrote:
I have never written exit programs for MQ.

Well then, you should purchasing a solution or use CONNAUTH in MQ v8 or higher.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » User Exits » Security Exit at MQIPT
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.