Creating qmgr and allowing remote authorization
Download as DOCX, PDF1 like160 views
This document provides a step-by-step guide for creating a queue manager and enabling remote authorization in IBM MQ. It covers key actions such as starting the queue manager, defining server connection channels, and managing security settings, including turning off connection authentication and configuring remote queue managers. Additional commands for troubleshooting connectivity issues are also included.
Creating qmgr and allowing remote authorization
- 1. Creating QMGR and allowing Remote authorization 1) Create a Queue manager. crtmqm <Queue Managername> 2) Start Queue Manager. strmqm <QMGR Name> 3) VerifythatQMGR is running. dspmq 4) Create a ServerConnectionchannel (itispossible inside of runmqsc<qmgr>) Runmqsc<qmgr> Ɩ define channel(<channel name>) chltype(SVRCONN)trptype(TCP)
- 2. From thisstepall stepswill runinside of runmqsccommand. 5) Start channel start channel(<Channel Name>) 6) Create Listener. define listener(<Listername>) trptype(TCP) port(<Portnumber) 7) Start Listener. start listener(<Listenername>) 8) WebSphere MQV7.1 introducedCHLAUTH ruleswhichbydefaultbannedremoteaccessby privilegedusers.Toturnoff CHLAUTH you are correctthat you can issue. ALTER QMGR CHLAUTH(DISABLED)
- 3. However,youcouldalsoverysimplyallow yourself accessona particularchannel as describedin CHLAUTH - Allowsome privilegedadmins. 9) IBM MQ V8 introducedConnectionAuthenticationwhichdefaultdemandsapasswordto authenticate aremote privilegeduser.Tomake thisOPTIONAL(asitisfor non-privileged users) youcan issue ALTER AUTHINFO(SYSTEM.DEFAULT.AUTHINFO.IDPWOS) AUTHTYPE(IDPWOS) CHCKCLNT(OPTIONAL) 10) rather thanturningit off completelywith ALTER QMGR CONNAUTH(' ') After either of these commands you'll need to issue the following command for the queue manager to be aware of your changes. 11) Refresh Security mechanism on Queue manager. REFRESH SECURITY TYPE(CONNAUTH) REFRESH SECURITY ============================================================== Adding Remote Queue Manager Note:Make sure that youhave networkconnectivitybetweenthe systemswhere Local Queue Manager available andWhere youare creatingremote definition. 1) RightClickon QMGR AddRemote Queue Manager
- 4. 2) 3)
- 5. 4) AfterclickingonFinishbutton youcansee the Remote Queue Managerentry.
- 6. If you are unable toconnectthenoptionallyexecutethe below commandalsoinabove steps. ALTER CHANNEL(<CHANNEL NAME>) CHLTYPE(SVRCONN) TRPTYPE(TCP) MCAUSER(‘mqm’) Nowtry to connectby followingabove steps. @Ravi Babu K 24|03|2017.