Change Security on z/OS®

The Change Security command changes specified attributes of an existing security definition.

The Change Security (MQCMD_CHANGE_SECURITY) command defines system-wide security options.

    Required parameters
    None


Optional parameters

    CommandScope (MQCFST)
    Command scope (parameter identifier: MQCACF_COMMAND_SCOPE). Specifies how the command is executed when the queue manager is a member of a queue-sharing group. We can specify one of the following:

    • blank (or omit the parameter altogether). The command is executed on the queue manager on which it was entered.
    • a queue manager name. The command is executed on the queue manager you specify, providing it is active within the queue sharing group. If you specify a queue manager name other than the queue manager on which it was entered, you must be using a queue sharing group environment, and the command server must be enabled.
    • an asterisk (*). The command is executed on the local queue manager and is also passed to every active queue manager in the queue sharing group.

    The maximum length is MQ_QSG_NAME_LENGTH.

    SecurityInterval (MQCFIN)
    Timeout check interval (parameter identifier: MQIACF_SECURITY_INTERVAL).

    Specifies the interval between checks for user IDs and associated resources to determine whether the SecurityTimeout has occurred. The value specifies a number of minutes in the range zero through 10080 (one week). If SecurityInterval is specified as zero, no user timeouts occur. If SecurityInterval is specified as nonzero, the user ID times out at a time between SecurityTimeout and SecurityTimeout plus SecurityInterval.

    SecurityTimeout (MQCFIN)
    Security information timeout (parameter identifier: MQIACF_SECURITY_TIMEOUT).

    Specifies how long security information about an unused user ID and associated resources is retained by IBM MQ . The value specifies a number of minutes in the range zero through 10080 (one week). If SecurityTimeout is specified as zero, and SecurityInterval is nonzero, all such information is discarded by the queue manager every SecurityInterval number of minutes.