IBM Support

The use of component managed authentication is no longer available for the default messaging provider in version 7 and above for the WebSphere Application Server Administrative Console

Question & Answer


Question

The option to configure a component managed authentication alias on a default messaging provider (Service Integration Bus) connection factory has been removed from the WebSphere Application Server Version 7 administrative console. A component managed authentication alias is a default set of credentials to be used by any application that looks up a connection factory (using JNDI) and creates a connection without specifying its own credentials.

Cause

Using component managed authentication is less desirable than specifying authentication on a per application basis as it does not restrict who can access the connection factory beyond who can access the JNDI namespace. As such it has been removed from the WebSphere Application Server Version 7 administrative console.

Answer

Authentication can be specified on a per application basis using either:

  • Container managed authentication
    Lookup the connection factory using a resource reference with 'res-auth' set to 'Container' in the application, and bind the resource reference to an authentication alias during deployment.
  • Application managed authentication
    Specify the username/password on the createConnection / createQueueConnection / createTopicConnection method call

Alternatively, the use of Component managed authentication is still available using wsadmin scripting.

The following example shows how to modify an existing default messaging provider connection factory, defined at cell scope in the example, to specify a component managed authentication alias:


    JACL:
    wsadmin>set cell [ $AdminConfig getid "/Cell:mycell" ]

    mycell(cells/mycell|cell.xml#Cell_1)

    wsadmin>$AdminTask listSIBJMSConnectionFactories $cell

    MyCF(cells/mycell|resources.xml#J2CConnectionFactory_1247500675104)

    wsadmin>    $AdminTask modifySIBJMSConnectionFactory MyCF(cells/mycell|resou
    rces.xml#J2CConnectionFactory_1247500675104)     { -authDataAlias myalias }

    MyCF(cells/mycell|resources.xml#J2CConnectionFactory_1247500675104)

    wsadmin>cell = AdminConfig.getid("/Cell:mycell")

    wsadmin>AdminTask.listSIBJMSConnectionFactories(cell)

    'MyCF(cells/mycell|resources.xml#J2CConnectionFactory_1247500675104)'

    wsadmin>AdminTask.modifySIBJMSConnectionFactory('    MyCF(cells/mycell|reso
    urces.xml#J2CConnectionFactory_1247500675104)    ', "-authDataAlias myalias")

    'MyCF(cells/mycell|resources.xml#J2CConnectionFactory_1247500675104)

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Service Integration Technology","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"8.5.5;8.5;8.0;7.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSFKSJ","label":"WebSphere MQ"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Service Integration Technologies \/SIB","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"","label":"iSeries"}],"Version":"7.5;7.1;7.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Historical Number

75586 660 706

Product Synonym

WMQ MQ SIB SIBUS SI BUS WAS

Document Information

Modified date:
15 June 2018

UID

swg21442576

Page Feedback