How to use MCAUSER?

[skkl]

Hi,
I am not clear on how to make use of MCAUSER.
Say I set MCAUSER to a nonblank value(xxx) when define the server(WIN2K) connection channel as follow,
DEFINE CHANNEL(CHANNEL1) CHLTYPE(SVRCONN) TRPTYPE(TCP) MCAUSER('xxx').
&
at client machine(NT4), I use ENV. VARIABLE :
SET MQSERVER=CHANNEL1/TCP/10.106.1.118(1414)

Actually, what would be the possible value for xxx?
Anything else I need to do or configure in order to run
a client program manipulating queue located on server by using MCAUSER?
thnaks in advance.

 

[MiddlewareOnline]

The server connection definition will overwrite what ever the client is passing. Or to be specific, the client connection is always seen at server side as accessed by MCAUSER defined in SERVER CONNECTION.

MiddlewareOnline.com

http://www.MiddlewareOnline.com

IBM MQ Series Certified Consultants

 

[skkl]

Hi,
Thanks to middlewareonline.com. I'm sorry that i still not
very clear on the way of using this MCAUSER.
Let say at client machine(Win 2K) I logon as an user named mquser belongs to local mqm group. Then at server side(Win 2K), do I need to logon using the same user with the same group? & then make the MCAUSER=mquser as follow:
DEFINE CHANNEL(CHANNEL1) CHLTYPE(SVRCONN) TRPTYPE(TCP) MCAUSER('mquser')

is this the correct way?
Please point me. Thanks in advance.

 

[MiddlewareOnline]

When you say
"Then at server side(Win 2K), do I need to logon using the same user with the same group? & then make the MCAUSER=mquser as follow:"

You are referring to interactive logon (please correct me If I am wrong here). MCAUSER is used to indicate to server who the client is connecting as (at program runtime). It has got nothing to do how you logon to server interactively. The clients connect using sockets to server, which is listening for connections. When the connection is made the Server validtaes the authentication that clients has. If you don't populate MCAUSER at connect time, it will use the client user id.
By defining it in channel definition you can overwrite this id (even though the client user id is "abc" and you definied mcauser as "xyz" in server channel definition, priviledge of xyz will be used for this conection).

I hope I am to answer your question.

http://www.MiddlewareOnline.com

IBM MQ Series Certified Consultants

 

[skkl]

Hi,
so anything that i need to do or configure at client machine or client program after I defined mcauser as "xyz" in server channel definition?

 

[MiddlewareOnline]

The server channel definition is what you refer to in you client connection.
MQSERVER=SERVER_CHNL_NAME/TCP/IP(PORT)

Now, if you hardcode the MCAUSER in server definition, it leaves a security loophole. Any client connecting to MQ Server has authority of user "xyz". So, you need to see whether you are comfortable with this or not. Also, you may want to look into "Writing Exits".

MiddlewareOnline.COM

http://www.MiddlewareOnline.com

IBM MQ Series Certified Consultants

 

[skkl]

Thanks to MiddlewareOnline.COM,
could you please expose me to "Writing Exists"-the concept & way to do so? What is different within "Writing Exists" & MCAUSER?

 

[MiddlewareOnline]

I suggest you read MQ Series Manuals to get more info. You must read Intecommunication Guide to get some of the conceptual things out of your way.

MiddlewareOnline.COM

http://www.MiddlewareOnline.com

IBM MQ Series Certified Consultants