简体繁体 English

MCA用户ID如何使用MQ Server连接通道授权客户端用户ID

[英]How MCA user id authorizes a client user id using MQ Server connection channels

原文 2013-11-26 05:48:01 3 1 client/ ibm-mq

I have a question on how the MCA user id we add while creating a WebSphere MQ Server Connection channel actually authorizes a client user id configured in an MQ client Application. 我有一个问题，关于我们在创建WebSphere MQ服务器连接通道时添加的MCA用户标识实际上如何授权在MQ客户端应用程序中配置的客户端用户ID。 For eg I have a domain user account servicemq01@domain added as MCA user id for a Server connection channel APP1.SVRCONN.01. 例如，我为服务器连接通道APP1.SVRCONN.01添加了一个域用户帐户servicemq01 @ domain作为MCA用户ID。 I have created a user group mqi_App1@server and added the servicemq01@domain user id into it. 我创建了一个用户组mqi_App1 @ server，并将servicemq01 @ domain用户ID添加到其中。 The mqi_App1 group is given required authorities to connect to the queue manager. 已授予mqi_App1组所需的权限以连接到队列管理器。 Also the required authorities are added at the queue level for mqi_App1 group. 另外，在队列级别为mqi_App1组添加了所需的权限。

Now the client Application App1 has a userid clientapp01@domain with which it runs. 现在，客户端应用程序App1具有运行它的用户ID clientapp01 @ domain。 The client Application is trying to connect to MQ server using channel APP1.SVRCONN.01. 客户端应用程序正在尝试使用通道APP1.SVRCONN.01连接到MQ服务器。 My question is does both the clientapp01@domain and servicemq01@domain needs to match for the MQ Server connection channel to work?? 我的问题是，clientapp01 @ domain和servicemq01 @ domain是否都需要匹配才能使MQ Server连接通道正常工作？

1 个解决方案

No. By putting a UserId in the channel's MCAUSER field, you are overriding the UserId that the application is using. 否。通过将UserId放置在通道的MCAUSER字段中，您将覆盖应用程序正在使用的UserId。 Any and ALL applications that connect on channel 'APP1.SVRCONN.01' will be using UserId 'servicemq01@domain'. 在通道“ APP1.SVRCONN.01”上连接的所有应用程序都将使用用户ID“ servicemq01 @ domain”。

Very trusting of you and not very secure. 非常信任您而不是很安全。