Home

 

Parameter descriptions

 

The command qualifier specifies which resource classes are to be refreshed. Select from:

*

A full refresh of the type specified is performed. This is the default value.

MQADMIN

Valid only if TYPE is CLASSES. Specifies that Administration type resources are to be refreshed. Valid on z/OS only.

If, when refreshing this class, it is determined that a security switch relating to one of the other classes has been changed, a refresh for that class also takes place.

MQNLIST

Valid only if TYPE is CLASSES. Specifies that Namelist resources are to be refreshed. Valid on z/OS only.

MQPROC

Valid only if TYPE is CLASSES. Specifies that Process resources are to be refreshed. Valid on z/OS only.

MQQUEUE

Valid only if TYPE is CLASSES. Specifies that Queue resources are to be refreshed. Valid on z/OS only.

CMDSCOPE

This parameter applies to z/OS only and specifies how the command is executed when the queue manager is a member of a queue-sharing group.

‘ ’

The command is executed on the queue manager on which it was entered. This is the default value.

qmgr-name

The command is executed on the queue manager you specify, providing the queue manager is active within the queue-sharing group.

We can specify a queue manager name, other than the queue manager on which the command was entered, only if you are using a queue-sharing group environment and if the command server is enabled.

*

The command is executed on the local queue manager and is also passed to every active queue manager in the queue-sharing group. The effect of this is the same as entering the command on every queue manager in the queue-sharing group.

TYPE

Specifies the type of refresh that is to be performed.

AUTHSERV

The list of authorizations held internally by the authorization services component is refreshed.

This is valid only on non-z/OS platforms where it is the default.

CLASSES

WebSphere MQ in-storage ESM (external security manager, for example RACF) profiles are refreshed. The in-storage profiles for the resources being requested are deleted. New entries are created when security checks for them are performed, and are validated when the user next requests access.

We can select specific resource classes for which to perform the security refresh.

This is valid only on z/OS where it is the default. See the WebSphere MQ for z/OS System Setup Guide for more information about RACF commands you have to issue when you use this parameter.

SSL

Refreshes the cached view of the Secure Sockets Layer key repository and allows updates to become effective on successful completion of the command. Also refreshed are the locations of:

• the LDAP servers to be used for Certified Revocation Lists

• the key repository

as well as any cryptographic hardware parameters specified through WebSphere MQ.

 

Parent topic:

REFRESH SECURITY

sc12730_

 

Home