MQGem tools can use Connection Authentication

When MQGem Software announced support for IBM MQ V8, one of the features included was:-

Both MO71 and MQSCX allow the provision of a user ID and password which can be validated by an MQ V8 queue manager.

In this post more detail about that support will be described.

MO71 supports Connection Authentication

When you manage a queue manager with the MO71 GUI Administrator, you make a connection to that queue manager. This connection is subject to the same rules as any other connection to a queue manager, so if the queue manager requires a password, you need to provide one. To do so in MO71, you specify this in the location dialog for the queue manager. Open the location dialog, either with Ctrl+O or by selecting the right-mouse context menu and choosing Open Location… for the selected queue manager.

MO71 Location Security

The Security tab on the Location dialog is where you configure MO71 to send a password

In the location dialog, switch to the Security tab and ensure that:-

  • Userid and Password is ticked
  • Security Exit Only is unticked
  • and make a choice about whether you want the password to be cached for you to save typing it in every time by ticking Store in cache file

MO71 PasswordFrom this dialog you can also choose to Set Password right away, thus caching it for use next time you connect to the queue manager. If you don’t do this, you’ll get the same dialog as a pop-up the next time you try to connect to the queue manager at which point you can type in the password then. Once you have successfully connected, the password will be saved to stop you having to type it in every time. This will be remembered until MO71 is restarted, or for longer if you enable the password cache file.

Password Cache File

To enable use of the password cache, open the Preferences dialog, either with Ctrl+P or by choosing menu File->Preferences… The settings you want are on the Connection tab. To use it, simply make sure that Use Cache File is ticked.

MO71 Password Cache File

The preferences dialog, Connection tab, allows the configuration of the password cache file

The password cache file is by default called MQMON.PWC and is created in the same directory as the MO71 config file, MQMON.CFG. If you need to change this then you can nominate a new password cache file somewhere else. If your config file for MO71 is shared, but you want separate password cache files, then you can make use of an environment variable to vary the location for the file, for example %USERPROFILE%. Whichever way you choose to dictate the location of the file, the actual file location will be shown in the preferences dialog. On first use of the cache file it will be created and you will be requested to create a password for the file. This will be the only password you need to type to allow MO71 to use passwords that it has saved for all your queue managers.

The queue manager’s password from the cache will be used until such time as it fails, and then you will be prompted to provide the password anew. You can reset it at any time before it fails from the location dialog.

MQSCX supports Connection Authentication

When you configure a queue manager with the MQSCX command line tool, you make a connection to that queue manager. This connection is subject to the same rules as any other connection to a queue manager, so if the queue manager requires a password, you need to provide one. To do so in MQSCX you include a user, and optionally a password, on the =conn command. If you provide the password it will be used, but alternatively, if you use pwd(*) then you will instead be prompted for the password which will keep the string you type obscured and not visible in the command stream.

MQSCX Extended MQSC Program – Version 8.0.0

Licenced to Paul Clarke

> =conn qm(MQGEM) user(Paul) pwd(*)

MQSCX Extended MQSC Program – Version 8.0.0

Licenced to Paul Clarke

QM(MQGEM) User(Paul) password > ********

MQSCX Extended MQSC Program – Version 8.0.0

Licenced to Paul Clarke

[14:05:31] =conn qm(MQGEM) user(Paul) pwd(*)

Connected to 'MQGEM'

MQGEM>

Using pwd(*) also means the MQSCX will remember the password for future =conn commands to the same queue manager until MQSCX is restarted.

If you’d like to try out either of these products, and you are not currently a licence holder, you may email support@mqgem.com to request a trial licence.


For more information about IBM MQ and the Connection Authentication feature, read IBM MQ V8 Connection Authentication – More Information.

Advertisements

The team at MQGem would love to hear what you think. Leave your comments here.

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s