Stopping unauthorized queue managers sending messages

Prevent unauthorized queue managers sending messages to your queue manager using a channel security exit.


Before starting

Clustering has no effect on the way security exits work. We can restrict access to a queue manager in the same way as you would in a distributed queuing environment.


Prevent selected queue managers from sending messages to your queue manager:


Procedure

  1. Define a channel security exit program on the CLUSRCVR channel definition.
  2. Write a program that authenticates queue managers trying to send messages on the cluster-receiver channel and denies them access if they are not authorized.


What to do next

Channel security exit programs are called at MCA initiation and termination.

Parent topic: Keeping clusters secure