java 客户机-服务器模式的访问控制

你的MQ装在什么系统上？你可以写一个security exit来调用系统的用户认证服务（如果系统提供了这样的服务的话）。好像在这个论坛上看到有个人贴出来过一个相关的链接，不过那个上面的security exit是调用windows的用户认证服务的。收起

就是这样字的收起

现在有个问题。你是想验证客户提供的用户名/密码，并且想通过MQ所在的系统来验证，也就是说客户提供的用户名和密码在MQ所在的系统是一个可用的用户名/密码。这样的么？收起

This document applies only to the following language version(s):
English
  
Question

What is the purpose of MQEnvironment.password?

Does it get validated at the OS level?

When running a WebSphere MQ Java™ Client program, you supply values in the MQEnvironment.userID and the MQEnvironment.password. However, it seems that MQ ignores the MQEnvironment.password,

You find that you have access to queues, regardless of the value of the password (even if the password is not a valid one).  
  


Answer
The MQEnvironment.password is used by a user written security exit program. If a password supplied by an application has to be validated, then you must have a security exit that validates the password.

The validation of the userID is done at the operating system level.

Additional information
WebSphere MQ validates only the userID passed from the client application and the password is always ignored.


Client side:
If a security exit is defined for the client, then this security exit may validate the password.
If a security exit is not defined for the client, then the value of the password is transmitted to the server.

Server side:
If a security exit is defined for the server, then this security exit might validate the password.
If a security exit is not defined for the server, then the value of the password is ignored.收起

    /*设置MQEnvironment 属性以便客户机连接*/
MQEnvironment.hostname = hostName;
MQEnvironment.channel = channel ;
MQEnvironment.properties.put(MQC.TRANSPORT_PROPERTY,MQC.TRANSPORT_MQSERIES_CLIENT);
MQEnvironment.port = port;
MQEnvironment.CCSID = ccsid;
MQEnvironment.userID = "yuanpf";
MQEnvironment.password = "";

我设置了userID 但是似乎没起到限制作用，不知道能不能提供具体配置如何的文章？收起

也可以自己写个security exit，配置到server connection上面，然后做任何你想做的认证收起

可以設置的，默認的話連接的都是超級mq用戶，你可以設置一個受限制的mq用戶，連接的時候讓客戶端用這個用戶去連接mq服務端收起