String

Type of user authentication:

• file: File-based

• ldap: Lightweight Directory Access Protocol

• jaas: Java Authentication and Authorization Service

String

Password encoding method:

• digest: MD5 (for file-based authentication)

• basic: Base-64 (for LDAP or JAAS authentication)

String

None

Password encoding method for connection service serviceName:

• digest: MD5 (for file-based authentication)

• basic: Base-64 (for LDAP or JAAS authentication)

If specified, overrides imq.authentication.type for the designated connection service.

Integer

Interval, in seconds, to wait for client response to authentication requests

Boolean

Use access control?

If true, the system will check the access control file to verify that an authenticated user is authorized to use a connection service or to perform specific operations with respect to specific destinations.

String

Specifies the access control type

Boolean

None

Use access control for connection service?

If specified, overrides imq.accesscontrol.enabled for the designated connection service.

If true, the system will check the access control file to verify that an authenticated user is authorized to use the designated connection service or to perform specific operations with respect to specific destinations.

String

Path to the access control directory

String

Name of access control file

The file name specifies a path relative to imq.accesscontrol.file.dirpath.

String

None

Name of access control file for connection service

If specified, overrides imq.accesscontrol.file.filename for the designated connection service.

The file name specifies a path relative to imq.accesscontrol.file.dirpath.

String

Not set

The location, as a URL, of the access control file.

If the URL uses LDAP protocol (ldap://), the access control file must be returned as a single string that uses dollar sign ($) as the separator between the lines of the access control file.

String

None

The location, as a URL, of the access control file for the connection service.

If specified, overrides imq.accesscontrol.file.url for the designated connection service.

If the URL uses LDAP protocol (ldap://), the access control file must be returned as a single string that uses dollar sign ($) as the separator between the lines of the access control file.

String

Path to directory containing key store file

String

Name of key store file

String

None

Password for key store file

Boolean

Obtain passwords from password file?

String

Path to directory containing password file

String

Name of password file

String

None

Password for administrative user

The Command utility (imqcmd) uses this password to authenticate the user before executing a command.

Boolean

Is audit logging to broker log file enabled?

Boolean

Is audit logging to the Solaris BSM audit log disabled?

String

Path to the directory containing the flat-file user repository

String

Name of the flat-file user repository file in the directory specified by imq.user_repository.file.dirpath

String

None

Host name and port number for LDAP server

The value is of the form

• hostName:port

where hostName is the fully qualified DNS name of the host running the LDAP server and port is the port number used by the server.

To specify a list of failover servers, use the following syntax:

• host1:port1

• ldap://host2: port2

• ldap://host3 :port3

• …

Entries in the list are separated by spaces. Note that each failover server address is prefixed with ldap://. Use this format even if you use SSL and have set the property imq.user_repository.ldap.ssl.enabled to true. You need not specify ldaps in the address.

String

None

Distinguished name for binding to LDAP user repository

Not needed if the LDAP server allows anonymous searches.

String

None

Password for binding to LDAP user repository

Not needed if the LDAP server allows anonymous searches.

String

None

Directory base for LDAP user entries

String

None

Provider-specific attribute identifier for LDAP user name

String

None

When set to a value of dn, specifies that DN username format is used for authentication (for example: uid=mquser,ou=People,dc=red,dc=sun,dc=com).

Also, the broker extracts the value of the imq.user.repository.lpdap.uidatr attribute from the DN username, and uses this value as the user name in access control operations.

If not set, then normal username format is used.

String

None

JNDI filter for LDAP user searches

Boolean

Enable LDAP group searches?

String

None

Directory base for LDAP group entries

String

None

Provider-specific attribute identifier for LDAP group name

String

None

Provider-specific attribute identifier for user names in LDAP group

String

None

JNDI filter for LDAP group searches

Integer

Time limit for LDAP searches, in seconds

Boolean

Use SSL when communicating with LDAP server?

String

The fully qualified class name of the socket factory to use to make SSL connections to the LDAP server.

When this property is not set and imq.user_repository.ldap.ssl.enabled is set to true, the default socket factory designated by the LDAP naming service is used.

String

None

Set to the name of the desired entry (in the JAAS configuration file) that references the login modules you want to use as the authentication service. This is the name you noted in Step 3.

String

None

This property, used by Message Queue access control, specifies the java.security.Principal implementation class in the login module(s) that the broker uses to extract the Principal name to represent the user entity in the Message Queue access control file. If, it is not specified, the user name passed from the Message Queue client when a connection was requested is used instead.

String

None

This property, used by Message Queue access control, specifies the java.security.Principal implementation class in the login module(s) that the broker uses to extract the Principal name to represent the group entity in the Message Queue access control file. If, it is not specified, the user name passed from the Message Queue client when a connection was requested is used instead.