ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexGeneral IBM MQ SupportMQ v 7.1 chlauth

Post new topicReply to topic Goto page Previous  1, 2, 3
MQ v 7.1 chlauth View previous topic :: View next topic
Author Message
harish225
PostPosted: Mon Jan 02, 2017 12:14 am Post subject: CHLAUTH Reply with quote

Newbie

Joined: 18 Nov 2016
Posts: 7

While connecting through MQ explorer.

Execute command in qmgr control area

SET CHLAUTH('CHANNEL_NAME') TYPE(USERMAP) CLNTUSER('user') USERSRC(MAP) MCAUSER('user') ADDRESS('*') ACTION(ADD)

if your user name is 'TEST' and address is 192.168.1.10 then it is like

SET CHLAUTH('CHANNEL_NAME') TYPE(USERMAP) CLNTUSER(TEST) USERSRC(MAP) MCAUSER(TEST) ADDRESS(192.168.1.10) ACTION(ADD)

After that

You need to perform 'setmqaut' command, to give access for the particular user

QMGR connect permission :

setmqaut -m MY.QMGR -t qmgr -p user +connect

if your user is TEST

setmqaut -m MY.QMGR -t qmgr -p TEST +connect

Permission on queues

setmqaut -m MY.QMGR -n '**' -t queue -p user +put +get +browse +all

if your user is TEST

setmqaut -m MY.QMGR -n '**' -t queue -p TEST +put +get +browse +all

To connect your MQ Explorer to remote qmgr
mailny need to give permissions on below queues

SYSTEM.ADMIN.COMMAND.QUEUE
SYSTEM.MQEXPLORER.REPLY.MODEL
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Mon Jan 02, 2017 6:15 am Post subject: Re: CHLAUTH Reply with quote

Grand Poobah

Joined: 18 Nov 2003
Posts: 18988
Location: LI,NY

harish225 wrote:
...

You need to perform 'setmqaut' command, to give access for the particular user

QMGR connect permission :
if your user is TEST

Code:
setmqaut -m MY.QMGR -t qmgr -p TEST +connect


Permission on queues
Code:
setmqaut -m MY.QMGR -n '**' -t queue -p TEST +put +get +browse +all

...

Please do not add +all at the end of your permissions. It negates the work you did defining them and is a source of over authorization...
If the authorizations defined are not enough add inquire (+inq) to the existing authorization. This is usually enough and is required for JMS. For all other cases, add the required missing authorization...

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:
Post new topicReply to topic Goto page Previous  1, 2, 3 Page 3 of 3

MQSeries.net Forum IndexGeneral IBM MQ SupportMQ v 7.1 chlauth
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.