Configuring authorization service stanzas on UNIX and Linux

On UNIX and Linux®, each queue manager has its own queue manager configuration file.

For example, the default path and file name of the queue manager configuration file for queue manager QMNAME is /var/mqm/qmgrs/QMNAME/qm.ini.

The Service stanza and the ServiceComponent stanza for the default authorization component are added to qm.ini automatically, but can be overridden by mqsnoaut. Any other ServiceComponent stanzas must be added manually.

For example, the following stanzas in the queue manager configuration file define two authorization service components on IBM® MQ for AIX®. MQ_INSTALLATION_PATH represents the high-level directory in which IBM MQ is installed.

Figure 1. UNIX and Linux authorization service stanzas in qm.ini


 Service:
    Name=AuthorizationService
    EntryPoints=13
 
 ServiceComponent:
    Service=AuthorizationService
    Name=MQSeries.UNIX.auth.service
Module= MQ_INSTALLATION_PATH/lib/amqzfu
    ComponentDataSize=0
 
 ServiceComponent:
    Service=AuthorizationService
    Name=user.defined.authorization.service
    Module=/usr/bin/udas01
    ComponentDataSize=96

The service component stanza (MQSeries.UNIX.auth.service) defines the default authorization service component, the OAM. If you remove this stanza and restart the queue manager, the OAM is disabled and no authorization checks are made.