Archive for the Category: MQ Authenticate User Security Exit

MQAUSX and Microsoft Active Directory

March 21, 2012 Roger Lacroix

Centralize authentication is a great thing. Many customers use MQAUSX on AIX, HP-UX, IBM i (OS/400), Linux, Solaris and authenticate against Microsoft Active Directory (AD) as a remote LDAP server. Since, AD conforms to LDAP v3, this generally works very well. Some companies configure their AD servers such that the attribute sAMAccountName contains the user’s […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows Comments Off on MQAUSX and Microsoft Active Directory

Where’s the MQ Security?

February 15, 2012 Roger Lacroix

I was at Wendy’s (in Canada) for lunch today and the cashier put the following flyer on my tray: Of course, it made me smile because I recently wrote a blog item that MQ people still need to implement either SSL or a security exit in WMQ v7.1. Maybe, I should create some T-Shirts with […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Channel Encryption, MQ Enterprise Security Suite, MQ Message Encryption, MQ Standard Security Exit, Unix, Windows, z/OS Comments Off on Where’s the MQ Security?

MQAUSX LDAP on Linux x86 & Linux x64

February 1, 2012 Roger Lacroix

When MQAUSX first supported LDAP authentication, Capitalware used Novell’s LDAP Libraries for C for AIX, HP-UX, Solaris, Linux x86, Linux x64 (x86 64-bit) and Windows. Several years ago, for AIX, HP-UX and Solaris platforms, we switched to the native/included client LDAP libraries that are available for each OS (Operating System). This week, a weird bug […]

Also posted in Capitalware, IBM MQ, Linux, Security Comments Off on MQAUSX LDAP on Linux x86 & Linux x64

MQAUSX/MQSSX versus WMQ v7.1 CHLAUTH

January 30, 2012 Roger Lacroix

Last week, there was a robust/lively discussion on the MQSeries List Server regarding Derek Hornby’s question of (see http://comments.gmane.org/gmane.network.mq.devel/13985): In the MQ V7.1 base install, a channel authentication record is created which is a “block user list” for all channels, and the block is on a User List of *MQADMIN So I created a User […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Standard Security Exit, Security, Unix, Windows, z/OS Comments Off on MQAUSX/MQSSX versus WMQ v7.1 CHLAUTH

Where’s the Security?

January 23, 2012 Roger Lacroix

Over the last 2 months, all of the sudden, I have “where’s the security?” phrase running through my head. Instead of that little old lady from the 80’s Wendy’s commercial saying “Where’s the beef?”, I have her in my head saying “Where’s the security?”. Back in 2005, when I first starting selling Capitalware’s MQ Authenticate […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Enterprise Security Suite, MQ Standard Security Exit, Security, Unix, Windows, z/OS Comments Off on Where’s the Security?

WebSphere MQ v7.1 and MQAUSX

January 4, 2012 Roger Lacroix

Capitalware has begun testing MQAUSX with WebSphere MQ (WMQ) v7.1 and everything is working very well. There are 2 items that everyone needs to be aware of when using MQAUSX with WMQ v7.1. 1. WMQ v7.1 has a new feature called Channel Authentication Records. (A poor name as no authentication is actually taking place. IBM […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows 7 Comments

MQAUSX without a Client-side Security Exit – Part 2

September 1, 2011 Roger Lacroix

As mentioned in Part 1, I often get asked if MQAUSX can authenticate a UserID and Password without the requirement of a client-side security exit. The answer is yes. Part 1 demonstrated how to set a UserID and Password for a client connection to a remote queue manager via code samples (i.e. C, C++, C#, […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows, z/OS Comments Off on MQAUSX without a Client-side Security Exit – Part 2

MQAUSX without a Client-side Security Exit – Part 1

August 23, 2011 Roger Lacroix

Quite often I get asked if MQAUSX can authenticate a UserID and Password without the requirement of a client-side security exit. The answer is yes. MQAUSX is actually 3 products in one: 1. If the client application is configured with the client-side security exit then the user credentials are encrypted and sent across the wire […]

Also posted in .NET, C, C#, C++, Capitalware, IBM MQ, Java, JMS, Programming, Security Comments Off on MQAUSX without a Client-side Security Exit – Part 1

Capitalware products and HP-UX on Itanium (IA64)

July 8, 2011 Roger Lacroix

For the record, Capitalware will support all of its commercial and open source products on HP’s HP-UX for Itanium (IA64) for as long as customers require it. By no means am I taking sides in the HP/Oracle war, I’m just stating what Capitalware’s support position is. If you want to read about the HP/Oracle Itanium […]

Also posted in Capitalware, MQ Auditor, MQ Batch Toolkit, MQ Channel Encryption, MQ Channel Throttler, MQ Enterprise Security Suite, MQ Message Encryption, MQ Message Replication, MQ Standard Security Exit, Unix Comments Off on Capitalware products and HP-UX on Itanium (IA64)

MQAUSX and AES 256-bit Encryption

June 27, 2011 Roger Lacroix

MQ Authenticate User Security Exit (MQAUSX) currently uses the ‘Tiny Encryption Algorithm Variant’ (aka TEAV or XTEA) for encryption and decryption of the user’s password between the client-side security exit and the server-side security exit. The security group of existing customers and potential customers are requesting that we use Advanced Encryption Standard (AES) symmetric-key encryption […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows, z/OS Comments Off on MQAUSX and AES 256-bit Encryption