| Author | 
		  Message
		 | 
		
		  | garonne | 
		  
		    
			  
				 Posted: Thu May 04, 2006 10:47 pm    Post subject: use JNDI repertory security authentification | 
				     | 
			   
			 
		   | 
		
		
		   Acolyte
 
 Joined: 26 Jan 2006 Posts: 59
  
  | 
		  
		    
			  
				Can someone please tell me how can I set up security authentification for a QueueManager used as a JNDI Repertory. I would like to administer JMS object from a distant machine with  JMS Admin (version graphic interface).
 
The context factory I use is : com.ibm.mq.jms.context.WMQInitialContextFactory
 
The QueueManager URL is some thing like this: QueueManagerHost:1414/SYS.DEF.SRVCONN
 
 
Thanks. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | fjb_saper | 
		  
		    
			  
				 Posted: Fri May 05, 2006 2:11 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Grand High Poobah
 
 Joined: 18 Nov 2003 Posts: 20768 Location: LI,NY 
  | 
		  
		    
			  
				Have you looked into JAAS ?
 
 
You need to pass the credentials to the initial context. 
 
Or if in WAS specify container authentication through JAAS.
 
 
Enjoy    _________________ MQ & Broker admin | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | garonne | 
		  
		    
			  
				 Posted: Fri May 05, 2006 4:51 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Acolyte
 
 Joined: 26 Jan 2006 Posts: 59
  
  | 
		  
		    
			  
				Sorry, my question wasnot clear.
 
 
Cause everytime I connect to my QueueManager (as a JNDI Repertory) with JMSAdmin from another machine, never it ask me for authentification (username , password)
 
 
So I would like to know how can I set up this QueueManager in order that it ask me for authentification each time I connect. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | vennela | 
		  
		    
			  
				 Posted: Fri May 05, 2006 8:31 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 11 Aug 2002 Posts: 4055 Location: Hyderabad, India 
  | 
		  
		    
			  
				| You should secure the SVRCONN channel | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | RogerLacroix | 
		  
		    
			  
				 Posted: Fri May 05, 2006 9:41 pm    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 15 May 2001 Posts: 3265 Location: London, ON  Canada 
  | 
		  
		    
			  
				
   
	| garonne wrote: | 
   
  
	Cause everytime I connect to my QueueManager (as a JNDI Repertory) with JMSAdmin from another machine, never it ask me for authentification (username , password)
 
 
So I would like to know how can I set up this QueueManager in order that it ask me for authentification each time I connect. | 
   
 
 
Hi garonne,
 
 
Capitalware has a MQ Security Solution called: MQ Authenticate User Security Exit.  
 
 
MQAUSX solves the problem you are having.  For more information about MQAUSX go to:
 
http://www.capitalware.biz/mqausx_overview.html
 
 
Regards,
 
Roger Lacroix
 
Capitalware Inc. _________________ Capitalware: Transforming tomorrow into today.
 
Connected to MQ!
 
Twitter | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | garonne | 
		  
		    
			  
				 Posted: Wed May 10, 2006 12:00 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Acolyte
 
 Joined: 26 Jan 2006 Posts: 59
  
  | 
		  
		    
			  
				
   
	| vennela wrote: | 
   
  
	| You should secure the SVRCONN channel | 
   
 
 
 
And after that, if I want to connect to WebSphere MQ JNDI repertory by that SVRCONN channel, I have to provide SECURITY_PRINCIPAL and SECURITY_CREDENTIALS ? | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | 
		    
		   |