IBM Integration Bus, Version 10.0.0.17 Operating Systems: AIX, HP-Itanium, Linux, Solaris, Windows, z/OS


mqsireloadsecurity command - z/OS

Use the mqsireloadsecurity command on z/OS® to force the immediate expiry of some or all the entries in the security cache.

Syntax

z/OS command - BIPRLSEC

Read syntax diagramSkip visual syntax diagram
>>-mqsireloadsecurity--| integrationNodeSpec |------------------>

>--+------------------+--+-------------------+-----------------><
   '- u= --useridList-'  '- w= --timeoutSecs-'   

integrationNodeSpec

|--+- integrationNodeName ---------+----------------------------|
   +- n= --integrationNodeFileName-+   
   +- i= --ipAddress-- -p --port---+   
   '-+- i= --ipAddress-+-----------'   
     '- p= --port------'               

z/OS console command

Read syntax diagramSkip visual syntax diagram
>>-+-reloadsecurity-+--+--------------+--+----------------+----><
   '-rc-------------'  '-u=useridList-'  '-w=timeoutValue-'   

Parameters

integrationNodeSpec
You must specify at least one parameter to identify the target integration node for this command, in one of the following forms:
integrationNodeName
This parameter identifies the name of a locally defined integration node.
n= integrationNodeFileName
This parameter identifies the name of a file that contains the connection details for a local integration node.

Use this option if multiple users want to connect to the same integration node, or if you are using advanced connection parameters such as SSL.

If you want to run a command that uses SSL to administer a remote broker over a secured channel, you must specify the keystore and truststore password for the connection using the IBM_JAVA_OPTIONS environment variable. See Resolving problems when running commands for further information.

i= ipAddress, p= port
These parameters identify the connection details for the integration node.

If you are connecting to a remote integration node, you can additionally prefix integrationNodeName to explicitly set which integration node to connect to. You cannot use -n integrationNodeFileName in the same command.

Parameters that you omit assume default values:

  • i= ipAddress: The host name or IP address of the computer on which the integration node is running. If you do not specify this parameter, a value that represents the local computer is used.

    If you want to connect to a remote host name, provide the security credentials as a URI in the following format: protocol://user:password@hostname. If your password contains URI Reserved characters, you must convert these characters to the percent-encoded format. For more information, see A correct URL and password returns error BIP1939 when you attempt to connect to a remote host name in Resolving problems when running commands.

  • p= port: The port on which the web user interface HTTP connection listener is listening. If you do not specify this parameter, the value 4414 is used.
u= useridList
(Optional) This parameter reloads all entries in the security cache for the specified list of users (separated by colons). If you do not specify this parameter, all entries in the security cache are reloaded. For cached certificates, this value is the common name element value.
w= timeoutValue
(Optional) This parameter specifies the time in seconds that the utility waits to ensure that the command completed; the default value is 60.

Deprecation of the q= parameter

In previous versions of IBM® Integration Bus, you might have used the q= parameter for this command to define a connection to a queue manager. A queue manager connection is no longer used to connect to an integration node. The q= parameter is now deprecated, and is ignored if used. If you use the q= parameter, a BIP1922 warning is displayed.

Examples

Reload the cache for a single user on the specified integration node. The connection parameters for the integration node are defined in the file INODE1.broker.
mqsireloadsecurity n=INODE1.broker u=user1
Reload the cache for all users by using the console command:
F MQP1BRK,rc 
Reload the cache for a single user:
F MQP1BRK,rc u=user1 
Reload the cache for a list of users, and wait for 600 seconds before returning. The wait time is based on an integration node that is configured with a slightly longer wait time, so that the integration node does not finish processing before the command -w value. For more information, see Setting configuration timeout values.
F MQP1BRK,rc u=user1:user2:user3,w=600 

an28620_.htm | Last updated 2019-07-13 08:13:00