Hello,
I have defined AUTHINFO to use ldap.
I am able to add individual users to Channel Authentication Records. I am trying to see if it is possible to add ldap group rather adding individual user(CLNTUSER('tanay') as shown below ) to Channel Authentication Records.

SET CHLAUTH('SYSTEM.ADMIN.SVRCONN') TYPE(ADDRESSMAP) DESCR('Default rule to allow MQ Explorer access') ADDRESS('*') USERSRC(CHANNEL) ACTION(REPLACE)
SET CHLAUTH('SYSTEM.*') TYPE(ADDRESSMAP) DESCR('Default rule to disable all SYSTEM channels') ADDRESS('*') USERSRC(NOACCESS) ACTION(REPLACE)

SET CHLAUTH('*') TYPE(USERMAP) CLNTUSER('tanay') USERSRC(CHANNEL) ACTION(REPLACE)

------------------------------
Praveen
------------------------------

I do not think u can map the group. It should be user.

------------------------------
om prakash
------------------------------

Don't know by heard, but I expect it to be possible.
Was doing that in the past.
LDAP was invented so that we don't have to administrate people individually

https://www.ibm.com/docs/en/ibm-mq/9.2?topic=authorization-ldap-administration

IBM MQ – Using Active Directory for authorisation in Unix queue managers
https://marketaylor.synology.me/?p=541

You may have to work with setmqauth instead of chlauth

------------------------------
Matthias Jungbauer
------------------------------