MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  LDAP & SSL authentication for MQ

    Posted 07/19/18 10:06 AM
    Hi Folks 

    We are asked to provide both LDAP & SSL support in one go for SWIFT apps , can someone please shed some light on this with some better options and easy way to handle this .

    Regards

    Vinay Kumar

    ------------------------------
    Vinay kumar
    ------------------------------


  • 2.  RE: LDAP & SSL authentication for MQ

    Posted 07/19/18 10:10 AM
    Requirement is little urgent if someone please help with this will be really helpful.

    how to use both LDAP and SSL at one .

    ------------------------------
    Vinay kumar
    ------------------------------



  • 3.  RE: LDAP & SSL authentication for MQ

    Posted 07/20/18 01:56 AM
    Viney,
    Your question really doesn't contain a lot of detail as to what is needed when you say "provide both LDAP & SSL support in one go for SWIFT apps", but if it's of help...
    - native MQ supports SSL on the MQ channels, so you can configure SSL on the channels used for your SWIFT apps.  See https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.0.0/com.ibm.mq.sec.doc/q014170_.html
    Ibm remove preview
    View this on Ibm >


    - Additionally, if you want SSL to be used "end to end" (not only on MQ channels), then you need to look at the MQ Advanced Message Security add-on product (generally delivered with MQ Advanced).

    - MQ also supports LDAP authentication with Connection Authentication.  See https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.0.0/com.ibm.mq.sec.doc/q113270_.html

    Ibm remove preview
    View this on Ibm >

    .

    .

    ------------------------------
    Carl Farkas
    ------------------------------



  • 4.  RE: LDAP & SSL authentication for MQ

    Posted 07/20/18 04:05 AM
    Just to add to Carl's points, MQ V9 also allows LDAP DNs to be used for resource authorisation.
    https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.0.0/com.ibm.mq.sec.doc/q123450_.html

    ------------------------------
    Dermot Flaherty
    MQ Solutions Architect
    Contractor
    ------------------------------



  • 5.  RE: LDAP & SSL authentication for MQ

    Posted 07/20/18 09:15 AM
    Thanks for reply i know i was not quire clear about my request .

    Request is that from new swift release all messages should be encrypted while it reaches them and we have testing with SSL and for authentication LDAP .


    ------------------------------
    Vinay kumar
    ------------------------------