Table 14–7 lists general broker properties related to security services.
Table 14–7 General Broker Security Properties
Property |
Type |
Default Value |
Description |
---|---|---|---|
String |
file |
Type of user authentication: file: File-based ldap: Lightweight Directory Access Protocol jaas: Java Authentication and Authorization Service |
|
String |
digest |
digest: MD5 (for file-based authentication) basic: Base-64 (for LDAP or JAAS authentication) |
|
String |
None |
Password encoding method for connection service serviceName: digest: MD5 (for file-based authentication) basic: Base-64 (for LDAP or JAAS authentication) If specified, overrides imq.authentication.type for the designated connection service. |
|
Integer |
180 |
Interval, in seconds, to wait for client response to authentication requests |
|
Boolean |
true |
If true, the system will check the access control file to verify that an authenticated user is authorized to use a connection service or to perform specific operations with respect to specific destinations. |
|
Boolean |
None |
Use access control for connection service? If specified, overrides imq.accesscontrol.enabled for the designated connection service. If true, the system will check the access control file to verify that an authenticated user is authorized to use the designated connection service or to perform specific operations with respect to specific destinations. |
|
String |
accesscontrol.properties |
Name of access control file The file name specifies a path relative to the access control directory (see Appendix A, Platform-Specific Locations of Message Queue Data). |
|
String |
None |
Name of access control file for connection service If specified, overrides imq.accesscontrol.file.filename for the designated connection service. The file name specifies a path relative to the access control directory (see Appendix A, Platform-Specific Locations of Message Queue Data). |
|
String |
See Appendix A, Platform-Specific Locations of Message Queue Data |
Path to directory containing key store file |
|
String |
keystore |
Name of key store file |
|
imq.keystore.password [Should be used only in password files] |
String |
None |
Password for key store file |
Boolean |
false |
Obtain passwords from password file? |
|
String |
See Appendix A, Platform-Specific Locations of Message Queue Data |
Path to directory containing password file |
|
String |
passfile | ||
String |
None |
Password for administrative user The Command utility (imqcmd) uses this password to authenticate the user before executing a command. |
Table 14–8 lists broker properties related to LDAP-based user authentication.
Table 14–8 Broker Security Properties for LDAP Authentication