Work with AuthInfo objects (WRKMQMAUTI)

    Where allowed to run
    All environments (*ALL)

    Threadsafe
    Yes

The Work with MQ AuthInfo objects (WRKMQMAUTI) command allows you to work with multiple authentication information objects which are defined on the local queue manager.

This enables you to change, copy, create, delete, display, and display and change authority to an MQ authentication information object.


Parameters

Keyword Description Choices Notes
AINAME AuthInfo name Character value, *ALL Optional, Positional 1
MQMNAME Message Queue Manager name Character value, *DFT Optional, Positional 2
WHERE Filter command Single values: *NONE Other values: Element list Optional, Positional 3
Element 1: Filter keyword *ALTDATE, *ALTTIME, *AUTHTYPE, *CONNAME, *TEXT, *USERNAME, *OCSPURL
Element 2: Filter operator *GT, *LT, *EQ, *NE, *GE, *LE, *LK, *NL, *CT, *EX, *CTG, *EXG
Element 3: Filter value Character value


AuthInfo name (AINAME)

>

The name or names of the authentication information objects.

The possible values are:

    *ALL or *
    All authentication information objects are selected.

    generic-authinfo-name
    The generic name of the authentication information objects. A generic name is a character string followed by an asterisk (*). For example ABC*, it selects all authentication information objects having names that start with the character string.

    You are recommended to specify the name required within quotation marks. Using this format ensures that your selection is precisely what you entered.

    We cannot select all the uppercase and lowercase versions of a generic name on a single panel, without requesting all the names.

    authentication-information-name
    Specify the name of a single authentication information object.


Message Queue Manager name (MQMNAME)

>

The name of the queue manager.

The possible values are:

    *DFT
    Use the default queue manager.

    queue-manager-name
    The name of an existing message queue manager. The maximum string length is 48 characters.


Filter command (WHERE)

>

This parameter can be used to selectively display those AuthInfo objects with particular AuthInfo attributes only.

The parameter takes three arguments, a keyword, an operator, and a value.

Generic strings are allowed for values which are names.

The operator can take one of the following values:

    *GT
    Greater than.

    Applicable to integer and non-generic string values.

    *LT
    Less than.

    Applicable to integer and non-generic string values

    *EQ
    Equal to.

    Applicable to integer and non-generic string values.

    *NE
    Not equal to.

    Applicable to integer and non-generic string values.

    *GE
    Greater than or equal to.

    Applicable to integer and non-generic string values.

    *LE
    Less than or equal to.

    Applicable to integer and non-generic string values.

    *LK
    Like.

    Applicable to generic string values.

    *NL
    Not like.

    Applicable to generic string values.

    *CT
    Contains.

    Applicable to non-generic list values.

    *EX
    Excludes.

    Applicable to non-generic list values.

    *CTG
    Contains generic.

    Applicable to generic list values.

    *EXG
    Excludes generic.

    Applicable to generic list values.

The keyword can take one of the following values:

    *ALTDATE
    The date on which the definition or information was last altered.

    The filter value is the date in the form yyyy-mm-dd.

    *ALTTIME
    The time at which the definition or information was last altered.

    The filter value is the time in the form hh:mm:ss.

    *AUTHTYPE
    The type of the authentication information object.

    The filter value is one of the following:

      *CRLLDAP
      The type of the authentication information object is CRLLDAP.

      *OCSP
      The type of the authentication information object is OCSP.

      *IDPWOS
      Connection authentication user ID and password checking is done using the operating system.

      *IDPWLDAP
      Connection authentication user ID and password checking is done using an LDAP server.

    *CONNAME
    The address of the host on which the LDAP server is running.

    The filter value is the address name.

    *TEXT
    Descriptive comment.

    The filter value is the text description of the queue.

    *USERNAME
    The distinguished name of the user.

    The filter value is the distinguished name.

    *OCSPURL
    The OCSP Responder URL.

    The filter value is the URL name.


Examples

>

None


Error messages

>

Unknown

Parent topic: CL commands reference for IBM i