When working on short-timed queue managers in proof-of-concept or demo environments there is sometimes much easier to just turn of default security behaviour to get the job done then to start configuring a safe and secure queue manager. Here is how to disable the default rule to not allow any privilege users access objects from remote connections.
This example will allow a privileged user to connect to a SVRCONN channel, for example with MQExplorer
The following command is run using the runmqsc command
SET CHLAUTH(MY.MQEXPLORER.CHANNEL) TYPE(BLOCKUSER) USERLIST('nouser') DESCR('Rule to allow privileged user to connect to channel')
Tested on IBM MQ 9.0.5.0 and Red Hat 7
Comments are closed.