Object code

 

The object code file is called amqrspin.dll. For both client and server, it is installed as a standard part of WebSphere MQ for Windows in the exits folder, and is loaded as a standard user exit. We can run the supplied security channel exit and use authentication services in your definition of the channel.

To do this, specify either of the following:

SCYEXIT('amqrspin(SCY_KERBEROS)')

SCYEXIT('amqrspin(SCY_NTLM)')

To provide support for a restricted channel, specify the following on the SRVCONN channel:

SCYDATA('remote_principal_name')
where remote_principal_name is in the form DOMAIN\user. The secure channel is established only if the name of the remote principal matches remote_principal_name.

To use the supplied channel-exit programs between systems that operate within a Kerberos security domain, create a servicePrincipalName for the queue manager.

 

Parent topic:

Using the SSPI security exit on Windows systems


fg17980_