Use a trusted user account to connect to MQ

[Jason Gross]

Does anyone know how to use another user account to connect to MQ? By default we pass in HCI, but for internal controls purposes we need to use trusted user accounts that we have created to put and get messages from MQ queues.

Any help is greatly appreciated!

Jason

Topic

[Peter Heggie]

Can you give HCI the MQ authority to specify the userid in the MQMD? or does it have to be done by another userid?

setmqaut -n -t queue -g +setid

setmqaut -m -t qmgr -g +setid

setmqaut -m -t qmgr -g +altusr

I think these will get hci authorized to change certain attributes in the MQOPEN and MQPUT header to specify a different userid.

Then in the MQS Protocol Properties you set the Open Options to MQOO_SET_IDENTITY_CONTEXT (among others), and then in the MQMD Features, you enter the userid.

Give that a shot, or something similar.

Peter Heggie

[Jason Gross]

Thanks for the reply, I’ll have to share this with some colleagues to see if it’s possible.

[Author]

Replies