Archive for the Category: MQ Authenticate User Security Exit

MQAUSX/MQSSX versus WMQ v7.1 CHLAUTH

January 30, 2012 Roger Lacroix

Last week, there was a robust/lively discussion on the MQSeries List Server regarding Derek Hornby’s question of (see http://comments.gmane.org/gmane.network.mq.devel/13985): In the MQ V7.1 base install, a channel authentication record is created which is a “block user list” for all channels, and the block is on a User List of *MQADMIN So I created a User […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Standard Security Exit, Security, Unix, Windows, z/OS Comments Off on MQAUSX/MQSSX versus WMQ v7.1 CHLAUTH

Where’s the Security?

January 23, 2012 Roger Lacroix

Over the last 2 months, all of the sudden, I have “where’s the security?” phrase running through my head. Instead of that little old lady from the 80’s Wendy’s commercial saying “Where’s the beef?”, I have her in my head saying “Where’s the security?”. Back in 2005, when I first starting selling Capitalware’s MQ Authenticate […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Enterprise Security Suite, MQ Standard Security Exit, Security, Unix, Windows, z/OS Comments Off on Where’s the Security?

WebSphere MQ v7.1 and MQAUSX

January 4, 2012 Roger Lacroix

Capitalware has begun testing MQAUSX with WebSphere MQ (WMQ) v7.1 and everything is working very well. There are 2 items that everyone needs to be aware of when using MQAUSX with WMQ v7.1. 1. WMQ v7.1 has a new feature called Channel Authentication Records. (A poor name as no authentication is actually taking place. IBM […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows 7 Comments

MQAUSX without a Client-side Security Exit – Part 2

September 1, 2011 Roger Lacroix

As mentioned in Part 1, I often get asked if MQAUSX can authenticate a UserID and Password without the requirement of a client-side security exit. The answer is yes. Part 1 demonstrated how to set a UserID and Password for a client connection to a remote queue manager via code samples (i.e. C, C++, C#, […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows, z/OS Comments Off on MQAUSX without a Client-side Security Exit – Part 2

MQAUSX without a Client-side Security Exit – Part 1

August 23, 2011 Roger Lacroix

Quite often I get asked if MQAUSX can authenticate a UserID and Password without the requirement of a client-side security exit. The answer is yes. MQAUSX is actually 3 products in one: 1. If the client application is configured with the client-side security exit then the user credentials are encrypted and sent across the wire […]

Also posted in .NET, C, C#, C++, Capitalware, IBM MQ, Java, JMS, Programming, Security Comments Off on MQAUSX without a Client-side Security Exit – Part 1

Capitalware products and HP-UX on Itanium (IA64)

July 8, 2011 Roger Lacroix

For the record, Capitalware will support all of its commercial and open source products on HP’s HP-UX for Itanium (IA64) for as long as customers require it. By no means am I taking sides in the HP/Oracle war, I’m just stating what Capitalware’s support position is. If you want to read about the HP/Oracle Itanium […]

Also posted in Capitalware, MQ Auditor, MQ Batch Toolkit, MQ Channel Encryption, MQ Channel Throttler, MQ Enterprise Security Suite, MQ Message Encryption, MQ Message Replication, MQ Standard Security Exit, Unix Comments Off on Capitalware products and HP-UX on Itanium (IA64)

MQAUSX and AES 256-bit Encryption

June 27, 2011 Roger Lacroix

MQ Authenticate User Security Exit (MQAUSX) currently uses the ‘Tiny Encryption Algorithm Variant’ (aka TEAV or XTEA) for encryption and decryption of the user’s password between the client-side security exit and the server-side security exit. The security group of existing customers and potential customers are requesting that we use Advanced Encryption Standard (AES) symmetric-key encryption […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, Security, Unix, Windows, z/OS Comments Off on MQAUSX and AES 256-bit Encryption

Security White Paper

March 3, 2011 Roger Lacroix

James Michael Stewart of Global Knowledge has written a white paper called: Ten Ways Hackers Breach Security Here’s the interesting part: All too often when hacking is discussed, it is assumed that the hacker is some unknown outsider. However, studies have shown that a majority of security violations actually are caused by internal employees.  So, […]

Also posted in IBM i (OS/400), IBM MQ, Linux, macOS (Mac OS X), MQ Channel Encryption, MQ Enterprise Security Suite, MQ Message Encryption, MQ Standard Security Exit, Unix, Windows, z/OS Comments Off on Security White Paper

MQAUSX Security Bulletin

February 18, 2011 Roger Lacroix

Yesterday, it was discovered that MQAUSX has a security issue of a high priority. If your IniFile is using UseAuthOrder and AuthOrder keywords and if the any of the parameters of AuthOrder keyword are disabled then all incoming connections are allowed. i.e. A fix is available for this bug. Please contact Capitalware Support immediately for […]

Also posted in Capitalware, IBM i (OS/400), Linux, Security, Unix, Windows, z/OS Comments Off on MQAUSX Security Bulletin

Capitalware Products for WMQ v5.3 on 32-bit Unix

December 22, 2010 Roger Lacroix

As of December 31st, 2010, Capitalware will no longer support its products on the 32-bit release of WebSphere MQ v5.3 (or earlier) on Unix (AIX, HP-UX and Solaris). Note: This does not affect the support of WebSphere MQ 32-bit for Linux. IBM ended support for WebSphere MQ v5.3 for distributed platforms on September 22, 2006. […]

Also posted in Capitalware, IBM MQ, MQ Standard Security Exit, Unix Comments Off on Capitalware Products for WMQ v5.3 on 32-bit Unix