Channel Blocked

Event name:

Channel Blocked.

Reason code in MQCFH:

MQRC_CHANNEL_BLOCKED
Channel blocked.
MQRC_CHANNEL_BLOCKED_WARNING
Channel blocked - warning mode.

Event description:

This event is issued when an attempt to start an inbound channel is blocked.

For MQRC_CHANNEL_BLOCKED_WARNING, temporary access has been granted to the channel because the channel authentication record is defined with WARN set to YES.

Event type:

Channel.

Platforms:

All.

Event queue:

SYSTEM.ADMIN.CHANNEL.EVENT

Event data

QMgrName

Description:

Name of the queue manager generating the event.

Identifier:

MQCA_Q_MGR_NAME.

Data type:

MQCFST.

Maximum length:

MQ_Q_MGR_NAME_LENGTH.

Returned:

Always.

Reason qualifier

Description:

Identifier that qualifies the reason code

Identifier:

MQIACF_REASON_QUALIFIER

Data type:

MQCFIN.

Values:

MQRQ_CHANNEL_BLOCKED_ADDRESS: Channel was blocked due to its IP address being in the list to be refused
MQRQ_CHANNEL_BLOCKED_USERID: Channel was blocked due to its asserted or mapped user ID being in the list to be refused.
MQRQ_CHANNEL_BLOCKED_NOACCESS: Channel was blocked due to its IP address; TLS Peer name; remote queue manager name or client user ID being mapped to have no access.

Returned:

Always.

ChannelName

Description:

Channel Name.

Identifier:

MQCACH_CHANNEL_NAME.

Data type:

MQCFST.

Maximum length:

MQ_CHANNEL_NAME_LENGTH.

Returned:

If the Reason Qualifier is not MQRQ_CHANNEL_BLOCKED_ADDRESS. In that case the inbound connection is blocked before the channel name is known.

UserIdentifier

Description:

User identifier that was blocked.

Identifier:

MQCACF_USER_IDENTIFIER

Data type:

MQCFST.

Maximum length:

MQ_USER_ID_LENGTH

Returned:

Only if the Reason Qualifier is MQRQ_CHANNEL_BLOCKED_USERID

ConnectionName

Description:

Address of the partner attempting to establish connection

Identifier:

MQCACH_CONNECTION_NAME.

Data type:

MQCFST.

Maximum length:

MQ_CONN_NAME_LENGTH.

Returned:

Always

RemoteQMgrName

Description:

Name of the partner queue manager attempting to establish connection.

Identifier:

MQCA_REMOTE_Q_MGR_NAME

Data type:

MQCFST.

Maximum length:

MQ_Q_MGR_NAME_LENGTH

Returned:

Only for inbound queue manager connections.

SSLPeerName

Description:

The Distinguished Name in the certificate sent from the remote system.

Identifier:

MQCACH_SSL_PEER_NAME

Data type:

MQCFST.

Maximum length:

MQ_DISTINGUISHED_NAME_LENGTH

Returned:

Whenever the channel is using TLS and the client has not connected anonymously.

SSLIssuerName

Description:

The Name of the Issuer in the certificate sent from the remote system.

Identifier:

MQCA_SSL_CERT_ISSUER_NAME

Data type:

MQCFST

Maximum length:

MQ_DISTINGUISHED_NAME_LENGTH

Returned:

Whenever the channel is using TLS and the client has not connected anonymously.

ClientUserIdentifier

Description:

Client side user identifier of the partner attempting to establish connection.

Identifier:

MQCACH_CLIENT_USER_ID

Data type:

MQCFST.

Maximum length:

MQ_USER_ID_LENGTH

Returned:

Only for inbound client connections, if the Reason Qualifier is not MQRQ_CHANNEL_BLOCKED_ADDRESS. In that case the inbound connection is blocked before the client user Id name is known.

ApplType

Description:

Type of application that made the API call.

Identifier:

MQIA_APPL_TYPE

Data type:

MQCFIN.

Returned:

Only for inbound client connections. If the Reason Qualifier is not MQRQ_CHANNEL_BLOCKED_ADDRESS. In that case the inbound connection is blocked before the application name is known.

ApplName

Description:

Name of the application that made the API call.

Identifier:

MQCACF_APPL_NAME

Data type:

MQCFST.

Maximum length:

MQ_APPL_NAME_LENGTH

Returned:

Only for inbound client connections. If the Reason Qualifier is not MQRQ_CHANNEL_BLOCKED_ADDRESS. In that case the inbound connection is blocked before the application name is known.