| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| CHLAuth Address & Addresslist |
« View previous topic :: View next topic » |
| Author |
Message
|
| taruns2000 |
 Posted: Tue Mar 31, 2015 4:54 am Post subject: CHLAuth Address & Addresslist |
 |
|
Newbie
Joined: 31 Mar 2015
Posts: 2
|
Hi,
Trying to go from Blockip security exit to chlauth.
OS - unix
MQ version - 7.1
Current config- Block ip- for a single SVRCONN channel multiple ipaddress of different range are used.
While reading the IBM documentation for chlauth - Address and Addresslist parameters, I understand that Address and addresslist parameters take either single ip or range of ips.
Query- Can't these params [Address and addresslist] have multiple specific ips with some delimiter say comma or semicolon
e.g Address(ipaddress1, ipddress2,...)
If above is the case then need to specify a very large ip range and my requirement is to allow only those specific ips only.
Please suggest! |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Tue Mar 31, 2015 5:12 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Mar 31, 2015 5:41 am Post subject: Re: CHLAuth Address & Addresslist |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| taruns2000 wrote: |
| If above is the case then need to specify a very large ip range and my requirement is to allow only those specific ips only. |
Why quote a "very large range"? Why not block everything and specifically allow those (presumably small number) of specific IPs only?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| taruns2000 |
| Posted: Wed Apr 01, 2015 2:34 am Post subject: |
|
|
Newbie
Joined: 31 Mar 2015
Posts: 2
|
hi mqjeff,
Yes, after you pointed out I can see the commas in the syntax.
Can I use comma delimiter with Address field as well? I do not see the same syntax for ADDRESS.
Because I want to allow specific ips with specific MCA user
for example-
current configuration of blockip is as given below-
for svrconn channel C1
it allows below ips with below MCA users-
CON=ip1;MCA=user1
CON=ip2;MCA=user2
CON=ip3;MCA=user3
I understand that I need to use below command to achieve the same-
SET CHLAUTH('C1') TYPE(ADDRESSMAP) ADDRESS('ip1','ip2','ip3') USERSRC(MAP) MCAUSER('user1','user','user3')
Query- 1. Is the above approach/understanding correct?
2. Can ADDRESS and MCAUSER fields have comma delimited values?
3. My understanding is that ADDRESS must be used along with TYPE(ADDRESSMAP) if I want to allow ips and ADDRLIST must be along with TYPE(BLOCKADDR) if I want to block ips. Current understanding is that I cannot use ADDRLIST with TYPE(ADDRESSMAP). Pls sugget if this understanding is correct.
pls suggest. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
