Task: Creating User Maps for Sterling B2B Integrator and WebSphere MQ File Transfer Edition File Transfers

The WMQFTE User Map allows the MQMD User Id associated with transfer requests to be converted to a Sterling B2B Integrator user id and password. Each WebSphere® MQ File Transfer Edition transfer request includes a MQMD User Id that identifies the user on the WebSphere MQ network that has requested the transfer. To access mailbox messages within Sterling B2B Integrator, the MQMD User Id must first be mapped to a Sterling B2B Integrator user account. The permissions granted to this Sterling B2B Integrator user account determine if the transfer is able to successfully read or create the requested mailbox message. If no mapping is found for the presented MQMD User Id, or if the mapped user account does not have permissions to the necessary mailbox, the WebSphere MQ File Transfer Edition transfer request will fail.

For WebSphere MQ File Transfer Edition transfer operations generated within Sterling B2B Integrator, through both the WMQFTE Create Transfer service and the WebSphere MQ File Transfer Edition Agent Adapter, the MQMD User Id associated with the operations by default will be that of user id of the operating system account that started the Sterling B2B Integrator processes. This default behavior can be overridden by settings within the WebSphere MQ queue managers, particularly by setting an MCA User Id value on the channel used for client mode connections. On Windows installations, where Sterling B2B Integrator is configured to run as a Windows service executing by default as the operating system user account SYSTEM, it may be necessary to override the MQMD User Id associated with transfer operations generated within Sterling B2B Integrator.

A WMQFTE User Map must exist before you create a WebSphere MQ File Transfer Edition Agent Adapter. It does not need to have a complete list of MQMD User Id and a Sterling B2B Integrator User associations in it. WMQFTE User Map entries can be added, edited, and removed at any time.

WMQFTE User Map

You get to the WMQFTE User Map by selecting Deployment > Adapter Utilities > WMQFTE User Map from the Administrator Menu on the Sterling B2B Integrator Admin Console.

When you create a user map you enter a WMQFTE User Map name and a set of map entries. Each WMQFTE User Map entry consists of:

MQMD User ID: For inbound transfers, the MQMD User Id that the WebSphere MQ File Transfer Edition administrator gave you. You can use literal text to match a specific MQMD User Id or a regular expression to match any MQMD User Id sent with a transfer request. For outbound transfers, the MQMD User Id defaults to the ID of the system user that runs Sterling B2B Integrator.

Local User Name: The name of the user you defined for file transfers on Sterling B2B Integrator.

Local User Password: The password for the user you defined for file transfers on Sterling B2B Integrator.

There must be only one match between a Sterling B2B Integrator user ID and an MQMD User Id in a WMQFTE User Map. You can not use the same MQMD User Id more than once in a WMQFTE User Map file. Sterling B2B Integrator looks for a literal text match first. If it does not find a literal text match, then it looks for a regular expression match. If there is no match, or more than one match, the transfer request fails.