Allow privileged user to access a specific channel in IBM MQ v9

When working on short-timed queue managers in proof-of-concept or demo environments there is sometimes much easier to just turn of default security behaviour to get the job done then to start configuring a safe and secure queue manager. Here is how to disable the default rule to not allow any privilege users access objects from remote connections.
This example will allow a privileged user to connect to a SVRCONN channel, for example with MQExplorer

The following command is run using the runmqsc command

SET CHLAUTH(MY.MQEXPLORER.CHANNEL) TYPE(BLOCKUSER) USERLIST('nouser') DESCR('Rule to allow privileged user to connect to channel')

Tested on IBM MQ 9.0.5.0 and Red Hat 7

Leave a Comment


NOTE - You can use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong> <pre lang="" line="" escaped="" cssfile="">

This site uses Akismet to reduce spam. Learn how your comment data is processed.