Re: Sec Channel Exit code
Chris, Could you send me the article and code. Thanks David -Original Message- From: Howarth, Chris [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 28, 2002 2:37 AM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code I wrote the article mentioned below. It has an explanation of how channel security exits work and has outline template code. You still need to plug in the actual security you choose to implement, but the article explains what each step is for, how it works and different methods of security you can plug in. If anyone wants the article and code, drop me a note. I think the link below has the first part of the article. Regards, ___ Chris Howarth CommerceQuest UK Ltd -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED]] Sent: 27 November 2002 17:34 To: [EMAIL PROTECTED] Subject: OS/390: Channel Security Exit Wasn't someone asking a question about this very topic just a week or so ago? I just thought I'd point out that the latest issue of Mainframe Week (http://www.mainframeweek.com) has the start of a series of articles on this. It may be too late for the person with the query, but perhaps someone else would be interested. Regards, Rebecca P.S. For those of you in the U.S. --Happy Thanksgiving! Rebecca Bullock Computer Sciences Corporation Educational Testing Service Account Princeton, NJ 08541 e-mail: [EMAIL PROTECTED][EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Chris, I would like a copy of the article and the code. Thanks, Sudheer -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED]]On Behalf Of Howarth, Chris Sent: Thursday, November 28, 2002 12:37 AM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code I wrote the article mentioned below. It has an explanation of how channel security exits work and has outline template code. You still need to plug in the actual security you choose to implement, but the article explains what each step is for, how it works and different methods of security you can plug in. If anyone wants the article and code, drop me a note. I think the link below has the first part of the article. Regards, ___ Chris Howarth CommerceQuest UK Ltd -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED]] Sent: 27 November 2002 17:34 To: [EMAIL PROTECTED] Subject: OS/390: Channel Security Exit Wasn't someone asking a question about this very topic just a week or so ago? I just thought I'd point out that the latest issue of Mainframe Week (http://www.mainframeweek.com) has the start of a series of articles on this. It may be too late for the person with the query, but perhaps someone else would be interested. Regards, Rebecca P.S. For those of you in the U.S. --Happy Thanksgiving! Rebecca Bullock Computer Sciences Corporation Educational Testing Service Account Princeton, NJ 08541 e-mail: [EMAIL PROTECTED][EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Chris, part 1 looks pretty useful at mainframe week. If part 2 is going to be a while, I would also appreciate the full article via mail or post. Thanks Bill -Original Message- From: Yu, David [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 03, 2002 10:51 AM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code Chris, Could you send me the article and code. Thanks David -Original Message- From: Howarth, Chris [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 28, 2002 2:37 AM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code I wrote the article mentioned below. It has an explanation of how channel security exits work and has outline template code. You still need to plug in the actual security you choose to implement, but the article explains what each step is for, how it works and different methods of security you can plug in. If anyone wants the article and code, drop me a note. I think the link below has the first part of the article. Regards, ___ Chris Howarth CommerceQuest UK Ltd -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED]] Sent: 27 November 2002 17:34 To: [EMAIL PROTECTED] Subject: OS/390: Channel Security Exit Wasn't someone asking a question about this very topic just a week or so ago? I just thought I'd point out that the latest issue of Mainframe Week (http://www.mainframeweek.com) has the start of a series of articles on this. It may be too late for the person with the query, but perhaps someone else would be interested. Regards, Rebecca P.S. For those of you in the U.S. --Happy Thanksgiving! Rebecca Bullock Computer Sciences Corporation Educational Testing Service Account Princeton, NJ 08541 e-mail: [EMAIL PROTECTED][EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Chris, Can I have a copy, too.thanks. marc. Sudheer Kumar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent by: MQSeries List cc: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code Tuesday December 3, 2002 01:56 PM Please respond to MQSeries List Chris, I would like a copy of the article and the code. Thanks, Sudheer -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED]]On Behalf Of Howarth, Chris Sent: Thursday, November 28, 2002 12:37 AM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code I wrote the article mentioned below. It has an explanation of how channel security exits work and has outline template code. You still need to plug in the actual security you choose to implement, but the article explains what each step is for, how it works and different methods of security you can plug in. If anyone wants the article and code, drop me a note. I think the link below has the first part of the article. Regards, ___ Chris Howarth CommerceQuest UK Ltd -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED]] Sent: 27 November 2002 17:34 To: [EMAIL PROTECTED] Subject: OS/390: Channel Security Exit Wasn't someone asking a question about this very topic just a week or so ago? I just thought I'd point out that the latest issue of Mainframe Week (http://www.mainframeweek.com) has the start of a series of articles on this. It may be too late for the person with the query, but perhaps someone else would be interested. Regards, Rebecca P.S. For those of you in the U.S. --Happy Thanksgiving! Rebecca Bullock Computer Sciences Corporation Educational Testing Service Account Princeton, NJ 08541 e-mail: [EMAIL PROTECTED][EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
I would like a copy of your article. Thanks, Michael Hecht DTCC [EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
I wrote the article mentioned below. It has an explanation of how channel security exits work and has outline template code. You still need to plug in the actual security you choose to implement, but the article explains what each step is for, how it works and different methods of security you can plug in. If anyone wants the article and code, drop me a note. I think the link below has the first part of the article. Regards, ___ Chris Howarth CommerceQuest UK Ltd -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED]] Sent: 27 November 2002 17:34 To: [EMAIL PROTECTED] Subject: OS/390: Channel Security Exit Wasn't someone asking a question about this very topic just a week or so ago? I just thought I'd point out that the latest issue of Mainframe Week (http://www.mainframeweek.com) has the start of a series of articles on this. It may be too late for the person with the query, but perhaps someone else would be interested. Regards, Rebecca P.S. For those of you in the U.S. --Happy Thanksgiving! Rebecca Bullock Computer Sciences Corporation Educational Testing Service Account Princeton, NJ 08541 e-mail: [EMAIL PROTECTED][EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Chris, thank you for this note. Yes, would very much like the article and code. Would be most helpful in our shop. Thank you for sharing. BB. -Original Message- From: Howarth, Chris [SMTP:[EMAIL PROTECTED]] Sent: Thursday, November 28, 2002 3:37 AM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code I wrote the article mentioned below. It has an explanation of how channel security exits work and has outline template code. You still need to plug in the actual security you choose to implement, but the article explains what each step is for, how it works and different methods of security you can plug in. If anyone wants the article and code, drop me a note. I think the link below has the first part of the article. Regards, ___ Chris Howarth CommerceQuest UK Ltd -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED]] Sent: 27 November 2002 17:34 To: [EMAIL PROTECTED] Subject: OS/390: Channel Security Exit Wasn't someone asking a question about this very topic just a week or so ago? I just thought I'd point out that the latest issue of Mainframe Week (http://www.mainframeweek.com) has the start of a series of articles on this. It may be too late for the person with the query, but perhaps someone else would be interested. Regards, Rebecca P.S. For those of you in the U.S. --Happy Thanksgiving! Rebecca Bullock Computer Sciences Corporation Educational Testing Service Account Princeton, NJ 08541 e-mail: [EMAIL PROTECTED][EMAIL PROTECTED] Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Sec Channel Exit code
I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Maybe you miss the strcmp Cheers, Manuel Carlos Rodriguez IBM Certified Specialist - WebSphere MQ -Mensaje original- De: Richard Killian [SMTP:[EMAIL PROTECTED]] Enviado el: Wednesday, November 27, 2002 2:44 PM Para: [EMAIL PROTECTED] Asunto: Sec Channel Exit code I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Hi Richard, MQMD is not available during Security exit. The reason being there is no messages transfer during security exits. MQMD is only available during MQPUT MQGET calls. Security exits are invoked when you issue the MQCONN call. Curious to know why are you checking for some value in ApplIDentityData to set the MCAUserIdentifier ? Can you give me some more details on what you want to achieve. Regards, Srivathsa -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED]]On Behalf Of Richard Killian Sent: Wednesday, November 27, 2002 7:14 PM To: [EMAIL PROTECTED] Subject: Sec Channel Exit code I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Do you mean
if (0 == memcmp(pmqmd-ApplIdentityData,
71 - MQ Monitor,
sizeof(pmqmd-ApplIdentityData)
)
{
strcpy(pmqcd-MCAUserIdentifier, mqprog );
}
Dave
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Of course what I really meant to say was:
Did you mean:
static const char * const Mon71 = 71 - MQ Monitor;
static const char * const mqprog = mqprog;
if (0 == memcmp(pmqmd-ApplIdentityData,
Mon71,
min (sizeof(pmqmd-ApplIdentityData), strlen(Mon71))
)
{ 123456789012
memcpy(pmqcd-MCAUserIdentifier, mqprog,
min(sizeof(pmqcd-MCAUserIdentifier), strlen(mqprog)));
}
Dave
-Original Message-
From: MQSeries List [mailto:[EMAIL PROTECTED]]On Behalf Of Richard
Killian
Sent: 27 November 2002 13:44
To: [EMAIL PROTECTED]
Subject: Sec Channel Exit code
I am writing a security exit for a SVRCONN channel.
Does anyone out there see something wrong with this code? It compiles and
links okay. It just doesn't set the MCA User Id.
I do have access to the MQMD in the security exit don't I.
if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0)
strcpy(pmqcd-MCAUserIdentifier, mqprog );
_
Regards,
Dick Killian
MQ Administrator Adabas DBA
Rochester Gas Electric Corp
(585) 771-6049
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Richard, First, I guess you dropped a 'strcmp' out of the if statement! What does pmqmd point to? The first structure returned in the AgentBuffer(parm 5) is the XMIT Header, so if you map this to a PMQXQH as say pXmit, you can access the mqmd as eg: pXmit-MsgDesc.ApplIdentityData etc... Hope this helps! Peter Richard Killian Dick_Killian@r ge.com To: MQSERIES Sent by: cc: MQSeries List Subject: Sec Channel Exit code MQSERIES@AKH-W IEN.AC.AT 27-Nov-2002 13:44 Please respond to MQSeries List MQSERIES@AKH-W IEN.AC.AT I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Richard, You don't have access to an MQMD in a security exit as no message is yet flowing. If you want to set the mcauser in a security exit based upon the application name you'll probably have to grab the application name using a client-side exit and pass it over to the server side during the initial security flows. HTH, Marty Frasier e-mail: [EMAIL PROTECTED] Richard Killian [EMAIL PROTECTED] Sent by: MQSeries List [EMAIL PROTECTED] 11/27/2002 08:44 AM Please respond to MQSeries List To: [EMAIL PROTECTED] cc: Subject:Sec Channel Exit code I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
That's it, I did a cust/paste and lost the strcmp. Also my [1,15] designation was way off. I replaced the strcmp statement with a strstr statement. I think it's good now but I have not successfully accessed the MQMD data. I hope I am not spinning my wheels with trying to get to the MQMD data in a security exit. _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 RodrÃguez Alvarez-Querol, To: [EMAIL PROTECTED] Manuel Carlos cc: mcarlosrod@MAPFRSubject: Re: [MQSERIES] Sec Channel Exit code E.COM Sent by: MQSeries List MQSERIES@AKH-WIE N.AC.AT 11/27/2002 09:28 AM Please respond to MQSeries List Maybe you miss the strcmp Cheers, Manuel Carlos Rodriguez IBM Certified Specialist - WebSphere MQ -Mensaje original- De: Richard Killian [SMTP:[EMAIL PROTECTED]] Enviado el: Wednesday, November 27, 2002 2:44 PM Para: [EMAIL PROTECTED] Asunto: Sec Channel Exit code I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Sure, My intent is to have one SVRCONN channel for the QMgr and allow several applications and people to use that channel for their various purposes. I set the MCA User Id on the channel to 'nobody' thereby effectively locking it. I intend to use the security exit to override the MCA User Id with one of several values based on who or what is accessing the channel. I thought I would need to interrogate the application id and the user id being passed from the client. _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Srivathsa T.V. srivathsa_vijay@To: [EMAIL PROTECTED] thbs.comcc: Sent by: MQSeriesSubject: Re: [MQSERIES] Sec Channel Exit code List MQSERIES@AKH-WIE N.AC.AT 11/27/2002 10:16 AM Please respond to MQSeries List Hi Richard, MQMD is not available during Security exit. The reason being there is no messages transfer during security exits. MQMD is only available during MQPUT MQGET calls. Security exits are invoked when you issue the MQCONN call. Curious to know why are you checking for some value in ApplIDentityData to set the MCAUserIdentifier ? Can you give me some more details on what you want to achieve. Regards, Srivathsa -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED]]On Behalf Of Richard Killian Sent: Wednesday, November 27, 2002 7:14 PM To: [EMAIL PROTECTED] Subject: Sec Channel Exit code I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
Peter, Other's responses have said that I can't get the MQMD data in a security exit but you have stated that I can by accessing the MQXQH-MsgDesc data in the AgentBuffer. I don't know who is correct but I am going with your suggestions simply because I want you to be right. I have been trying your approach and no success yet. I did get my code cleaned up enough to stop getting 2059's (I assume I was failing in the exit) and now I get 2035's which to me says the exit is not failing anymore, it's just not giving me what I want. So my next venture is to try to write the MsgDesc data to a file and look at the contents. Being that it is 3:00 PM and I need to pick up the turkey, the beer, and a tomato then get home and make pies and clean the house and whatever else is on my honey-do list, I think I will resume testing on Monday. Happy Thanksgiving to those who celebrate. Thanks to those who have responded so far. _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Peter Cradwick peter.d.cradwickTo: [EMAIL PROTECTED] @GSK.COMcc: Sent by: MQSeriesSubject: Re: [MQSERIES] Sec Channel Exit code List MQSERIES@AKH-WIE N.AC.AT 11/27/2002 10:05 AM Please respond to MQSeries List Richard, First, I guess you dropped a 'strcmp' out of the if statement! What does pmqmd point to? The first structure returned in the AgentBuffer(parm 5) is the XMIT Header, so if you map this to a PMQXQH as say pXmit, you can access the mqmd as eg: pXmit-MsgDesc.ApplIdentityData etc... Hope this helps! Peter Richard Killian Dick_Killian@r ge.com To: MQSERIES Sent by: cc: MQSeries List Subject: Sec Channel Exit code MQSERIES@AKH-W IEN.AC.AT 27-Nov-2002 13:44 Please respond to MQSeries List MQSERIES@AKH-W IEN.AC.AT I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
The security exit is driven at MCA initiation (connect time, in the case of SVRCONNs)--possibly long before you have even constructed the MD, much less sent a message. You can however, pass information that identifies the client and server exits in the agentbuffer. Understand, though, that you are essentially trusting the client to be whomever the client says it is. If you need a little more certainty you should at least encrypt the information and accompany it by some sort of security token that limits your exposure to masquerades. -Original Message- From: Richard Killian [SMTP:[EMAIL PROTECTED]] Sent: Wednesday, November 27, 2002 12:10 PM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code Peter, Other's responses have said that I can't get the MQMD data in a security exit but you have stated that I can by accessing the MQXQH-MsgDesc data in the AgentBuffer. I don't know who is correct but I am going with your suggestions simply because I want you to be right. I have been trying your approach and no success yet. I did get my code cleaned up enough to stop getting 2059's (I assume I was failing in the exit) and now I get 2035's which to me says the exit is not failing anymore, it's just not giving me what I want. So my next venture is to try to write the MsgDesc data to a file and look at the contents. Being that it is 3:00 PM and I need to pick up the turkey, the beer, and a tomato then get home and make pies and clean the house and whatever else is on my honey-do list, I think I will resume testing on Monday. Happy Thanksgiving to those who celebrate. Thanks to those who have responded so far. _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Peter Cradwick peter.d.cradwickTo: [EMAIL PROTECTED] @GSK.COMcc: Sent by: MQSeriesSubject: Re: [MQSERIES] Sec Channel Exit code List MQSERIES@AKH-WIE N.AC.AT 11/27/2002 10:05 AM Please respond to MQSeries List Richard, First, I guess you dropped a 'strcmp' out of the if statement! What does pmqmd point to? The first structure returned in the AgentBuffer(parm 5) is the XMIT Header, so if you map this to a PMQXQH as say pXmit, you can access the mqmd as eg: pXmit-MsgDesc.ApplIdentityData etc... Hope this helps! Peter Richard Killian Dick_Killian@r ge.com To: MQSERIES Sent by: cc: MQSeries List Subject: Sec Channel Exit code MQSERIES@AKH-W IEN.AC.AT 27-Nov-2002 13:44 Please respond to MQSeries List MQSERIES@AKH-W IEN.AC.AT I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: Sec Channel Exit code
If you can get a queue manager to yourself for testing the exit then the MQ trace facility can also be of great help as you can see the protocol exchanges happening. Regards Tim A Miller, Dennis [EMAIL PROTECTED]To: [EMAIL PROTECTED] OM cc: Sent by: MQSeriesSubject: Re: Sec Channel Exit code List MQSERIES@AKH-WIE N.AC.AT 28/11/2002 08:51 Please respond to MQSeries List The security exit is driven at MCA initiation (connect time, in the case of SVRCONNs)--possibly long before you have even constructed the MD, much less sent a message. You can however, pass information that identifies the client and server exits in the agentbuffer. Understand, though, that you are essentially trusting the client to be whomever the client says it is. If you need a little more certainty you should at least encrypt the information and accompany it by some sort of security token that limits your exposure to masquerades. -Original Message- From: Richard Killian [SMTP:[EMAIL PROTECTED]] Sent: Wednesday, November 27, 2002 12:10 PM To: [EMAIL PROTECTED] Subject: Re: Sec Channel Exit code Peter, Other's responses have said that I can't get the MQMD data in a security exit but you have stated that I can by accessing the MQXQH-MsgDesc data in the AgentBuffer. I don't know who is correct but I am going with your suggestions simply because I want you to be right. I have been trying your approach and no success yet. I did get my code cleaned up enough to stop getting 2059's (I assume I was failing in the exit) and now I get 2035's which to me says the exit is not failing anymore, it's just not giving me what I want. So my next venture is to try to write the MsgDesc data to a file and look at the contents. Being that it is 3:00 PM and I need to pick up the turkey, the beer, and a tomato then get home and make pies and clean the house and whatever else is on my honey-do list, I think I will resume testing on Monday. Happy Thanksgiving to those who celebrate. Thanks to those who have responded so far. _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Peter Cradwick peter.d.cradwickTo: [EMAIL PROTECTED] @GSK.COMcc: Sent by: MQSeriesSubject: Re: [MQSERIES] Sec Channel Exit code List MQSERIES@AKH-WIE N.AC.AT 11/27/2002 10:05 AM Please respond to MQSeries List Richard, First, I guess you dropped a 'strcmp' out of the if statement! What does pmqmd point to? The first structure returned in the AgentBuffer(parm 5) is the XMIT Header, so if you map this to a PMQXQH as say pXmit, you can access the mqmd as eg: pXmit-MsgDesc.ApplIdentityData etc... Hope this helps! Peter Richard Killian Dick_Killian@r ge.com To: MQSERIES Sent by: cc: MQSeries List Subject: Sec Channel Exit code MQSERIES@AKH-W IEN.AC.AT 27-Nov-2002 13:44 Please respond to MQSeries List MQSERIES@AKH-W IEN.AC.AT I am writing a security exit for a SVRCONN channel. Does anyone out there see something wrong with this code? It compiles and links okay. It just doesn't set the MCA User Id. I do have access to the MQMD in the security exit don't I. if ((pmqmd-ApplIdentityData[1,15], 71 - MQ Monitor)==0) strcpy(pmqcd-MCAUserIdentifier, mqprog ); _ Regards, Dick Killian MQ Administrator Adabas DBA Rochester Gas Electric Corp (585) 771-6049 Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription
