Removing connectivity to the queue manager

If you do not want user applications to connect to your queue manager, remove their authority to connect to it.

About this task

Revoke the authority of all users to connect to the queue manager by using the appropriate command for your operating system.
On Multiplatforms, you can also use the DELETE AUTHREC command.
Note: On IBM® MQ Appliance you can use only the DELETE AUTHREC command.

Procedure

  • [AIX, Linux, Windows] For AIX®, Linux®, and Windows systems, issue the following command: 
    setmqaut -m QMgrName -t qmgr -g GroupName -connect
  • [IBM i] For IBM i, issue the following command: 
    RVKMQMAUT OBJ ('QMgrName') OBJTYPE(*MQM) USER(*ALL) AUT(*CONNECT)
  • [z/OS] For z/OS®, issue the following commands: 
    RDEFINE MQCONN QMgrName.BATCH UACC(NONE)
RDEFINE MQCONN QMgrName.CHIN UACC(NONE)
RDEFINE MQCONN QMgrName.CICS UACC(NONE)
RDEFINE MQCONN QMgrName.IMS UACC(NONE)

    Do not issue any PERMIT commands.

    The variable names have the following meanings:
    QMgrName
    The name of the queue manager.
    [z/OS]On z/OS, this value can also be the name of a queue sharing group.
    GroupName
    The name of the group to be denied access.