REFRESH SECURITY

---

Use REFRESH SECURITY to carry out a security refresh.

On platforms other than z/OS, The REFRESH SECURITY command refreshes the list of authorizations held internally by the authorization service component.

Synonym: REF SEC

REBUILD SECURITY is another synonym for REFRESH SECURITY.

REFRESH SECURITY
 
>>-REFRESH SECURITY--+----------------------+------------------->
                     '-(-+-*------------+-)-'
                         |         (2)  |
                         +-MQADMIN------+
                         |         (2)  |
                         +-MQNLIST------+
                         |        (2)   |
                         +-MQPROC-------+
                         |         (2)  |
                         '-MQQUEUE------'
 
   .-CMDSCOPE(' ')------------. (2)
>--+--------------------------+--------------------------------><
   |                     (1)  |
   +-CMDSCOPE(qmgr-name)------+
   |             (1)          |
   '-CMDSCOPE(*)--------------'
 
 

Notes:

1. Valid only on full function WebSphere MQ for z/OS when the queue manager is a member of a queue-sharing group.

2. Valid only on z/OS.

 

Parameter descriptions

This command refreshes WebSphere MQ in-storage ESM (external security manager, for example RACF) profiles. The in-storage profiles for the resources being requested are deleted. New entries are created when security checks for them are performed, and are validated when the user next requests access.

For z/OS, see the WebSphere MQ for z/OS System Setup Guide for more information about RACF commands you have to issue when you issue this command.

You must specify the resource class for which the security refresh is to be performed. The classes are:

*

All resource classes.

MQADMIN

Administration type resources. Valid on z/OS only.

MQNLIST

Namelist resources. Valid on z/OS only.

MQPROC

Process resources. Valid on z/OS only.

MQQUEUE

Queue resources. Valid on z/OS only.

Note:

If, when refreshing this class, it is determined that a security switch relating to one of the other classes has been changed, a refresh for that class also takes place.

CMDSCOPE

This parameter applies to z/OS only and specifies how the command is executed when the queue manager is a member of a queue-sharing group.

CMDSCOPE cannot be used for commands issued from the first initialization input data set CSQINP1.

' '

The command is executed on the queue manager on which it was entered. This is the default value.

qmgr-name

The command is executed on the queue manager you specify, providing the queue manager is active within the queue-sharing group.

You can specify a queue manager name, other than the queue manager on which the command was entered, only if you are using a queue-sharing group environment and if the command server is enabled.

*

The command is executed on the local queue manager and is also passed to every active queue manager in the queue-sharing group. The effect of this is the same as entering the command on every queue manager in the queue-sharing group.

 

WebSphere is a trademark of the IBM Corporation in the United States, other countries, or both.

 

IBM is a trademark of the IBM Corporation in the United States, other countries, or both.