Question & Answer
How do you configure IBM WebSphere MQ 8 to support anonymous access?
This is sometimes necessary if an IBM Rational Integration Tester (RIT) project is to be shared without containing Windows security credentials, or if a RIT project previously used with IBM MQ 6 must now be used with IBM MQ 7.1 or above.
These instructions are intended only for test systems containing non-confidential data since after these steps are taken anonymous access to the IBM MQ instance is possible.
For a queue manager name QM_Primary the following commands can be used to enable a connection to be established with these anonymous credentials. Note the blank username and password.
- Host: <hostname>
Queue Manager: QM_Primary
Application Name: GHC MQ Transport
Application Type: MQSeries Client
Launch MQSC specifying the queue manager. e.g. On Windows:
- CD C:\Program Files\IBM\WebSphere MQ\bin
Modify the security settings (on any operating system):
- ALTER QMGR CHLAUTH(DISABLED)
ALTER AUTHINFO(SYSTEM.DEFAULT.AUTHINFO.IDPWOS) AUTHTYPE(IDPWOS) CHCKCLNT(OPTIONAL)
REFRESH SECURITY TYPE(CONNAUTH)
This video is a useful introduction to unblocking MQ Security without permitting anonymous access, and also shows how to read the MQ logs.
11 July 2019