You can use the channel authentication records widget to create blocking and warning
channel authentication records with a final assigned user ID identity. The final assigned user ID
identity matches to list of specified user IDs from a server channel.
Before you begin
You must create a channel authentication records widget before you can use it. For more
information about creating IBM® MQ object widgets, see
Working with IBM MQ objects.
Procedure
To add a channel authentication record:
-
Click the create icon
![[V9.0.5 Mar 2018]](ng905.gif)
in the channel authentication record widget toolbar.
-
Select the Rule Type to indicate what type of rule you want on the
channel authentication record:
- Select Block to block access to inbound connections.
- Select Warn to warn about access to inbound connections that would be
blocked. The connection is allowed access, and an error message is reported. If events are
configured, an event message is created that shows the details of what would be blocked. Only
matched rules are reported.
-
Select the Final assigned user ID identity type from the list.
-
Click Next
-
Specify a Profile Name.
The profile name is the name of the channel or set of channels for which you are setting the
channel authentication. The profile can contain wildcards so that you can block a range of channels.
For example, the profile alphadelta* blocks channels named alphadelta1,
alphadelta2, alphdelta3 and so on.
-
Specify the User list. The user list is a comma-separated list of user
IDs to be blocked from the channel.
- Optional:
Click Next.
- Optional:
Specify a Description for the channel authentication record.
-
Click Create. The new channel authentication record is created.