MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  changing LTPA expiry time

    Posted Thu August 28, 2025 03:39 AM
    I'm testing with LTPA2 tokens. 

    I've set 
      <variable name="ltpaExpiration" value="1m"   />
     <jndiEntry jndiName="ltpaExpiration" value="${ltpaExpiration}"/>
    in mqwebuser.xml
    but the expiry interval stays at 120 minutes.
    (for example the trace shows
    Current time = Thu Aug 28 07:34:52 GMT 2025, expiration time = Thu  Aug 28 09:34:40 GMT 2025
    )

    Do I need to change anything else to force it to change?
    Note:  Using trace com.ibm.ws.security.token.ltpa.internal.LTPAToken2=finest 
    shows the TLPA trace information.
    Colin




  • 2.  RE: changing LTPA expiry time

    Posted Fri August 29, 2025 06:07 AM

    Hi Colin,

    ltpaExpiration is documented as an integer property. Try 

      <variable name="ltpaExpiration" value="1"   />

    I would have thought you were getting a MQWB2020E message in the log with what you were doing?

    Regards, Matt.



    ------------------------------
    Matt Leming
    STSM, IBM MQ for z/OS
    Email: lemingma@uk.ibm.com
    ------------------------------