If you do not want user applications to connect to your queue manager, remove their authority to connect to it.
About this task
Revoke the authority of all users to connect to the queue manager by using the appropriate command for your operating system.
On
UNIX,
Linux®,
Windows systems, and
IBM® i, you can also use the
DELETE AUTHREC command.
Note: On IBM MQ Appliance you can use only the DELETE AUTHREC command.
Procedure
-
For UNIX, Linux and Windows systems, issue the following command:
setmqaut -m QMgrName -t qmgr -g GroupName -connect
-
For IBM i, issue the following command:
RVKMQMAUT OBJ (' QMgrName ') OBJTYPE(*MQM) USER(*ALL) AUT(*CONNECT)
-
For z/OS®, issue the following commands:
RDEFINE MQCONN QMgrName.BATCH UACC(NONE)
RDEFINE MQCONN QMgrName.CHIN UACC(NONE)
RDEFINE MQCONN QMgrName.CICS UACC(NONE)
RDEFINE MQCONN QMgrName.IMS UACC(NONE)
Do not issue any PERMIT commands.
The variable names have the following meanings:
- QMgrName
- The name of the queue manager. On z/OS, this value can also be the name of a queue-sharing group.
- GroupName
- The name of the group to be denied access.