Blocking access for a client asserted user ID

You can use a channel authentication record to prevent a client asserted user ID from starting channels.

Before you begin

Ensure that channel authentication records are enabled as follows:


ALTER QMGR CHLAUTH(ENABLED)

About this task

Note that this technique applies only to server-connection channels. It has no effect on other channel types.

Procedure

Set a channel authentication record using the MQSC command SET CHLAUTH, or the PCF command Set Channel Authentication Record. For example, you can issue the MQSC command:


SET CHLAUTH(' generic-channel-name ') TYPE(USERMAP) CLNTUSER(' client-user-name ') USERSRC(NOACCESS)

generic-channel-name is either the name of a channel to which you want to control access, or a pattern including the asterisk (*) symbol as a wildcard that matches the channel name.
client-user-name is the user ID asserted by the client.