Thanks for the link @Jim Creasman. Something of a terminology mismatch here I guess.
Your link is talking about MQ "objects", and yes you're right a group name isn't counted as an MQ object, so the 48 character limit does not apply to it. MQ refers to groups and users (which it calls principals) as "entities" though! So I was momentarily curious about whether there was a doc change needed.
Cheers,
Morag
------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
------------------------------
Original Message:
Sent: Wed August 05, 2020 08:11 AM
From: Jim Creasman
Subject: Max length of GROUP name on SET AUTHREC command?
Thanks, Morag! That's what I was looking for. I mentioned the 48 character limit from here, though I didn't really believe that applied in this case since the group name isn't an MQ entity, per se.
Jim
------------------------------
Jim Creasman
Original Message:
Sent: Wed August 05, 2020 01:53 AM
From: Morag Hughson
Subject: Max length of GROUP name on SET AUTHREC command?
According to Knowledge Centre, the PCF version of SET AUTHREC, SetAuthorityRecord describes the GROUP and PRINCIPAL fields thus:
- GroupNames (MQCFSL)
- Group names (parameter identifier: MQCACF_GROUP_ENTITY_NAMES).
The names of groups having their authorizations set. At least one group name or principal name must be specified. An error occurs if neither are specified.
Each member in this list can be a maximum length of MQ_ENTITY_NAME_LENGTH.
- PrincipalNames (MQCFSL)
- Principal names (parameter identifier: MQCACF_PRINCIPAL_ENTITY_NAMES).
The names of principals having their authorizations set. At least one group name or principal name must be specified. An error occurs if neither are specified.
Each member in this list can be a maximum length of MQ_ENTITY_NAME_LENGTH.
MQ_ENTITY_NAME_LENGTH is defined as 1024.
Not sure where 48 came from? Do you have a reference?
Cheers,
Morag
------------------------------
Morag Hughson
MQ Technical Education Specialist
MQGem Software Limited
Original Message:
Sent: Tue August 04, 2020 05:43 PM
From: Jim Creasman
Subject: Max length of GROUP name on SET AUTHREC command?
We are using LDAP groups to provide authentication/access within MQ. In the MQ setup we have statements like this:
SET AUTHREC GROUP('group-name') OBJTYPE(QMGR) AUTHADD(CONNECT,INQ)
I'm trying to confirm the max length of a group-name. The MQ documentation gives a limit of 48 characters for most entities, but I wasn't sure if that applied to this parameter or not. Is the max length of the group-name determined by MQ or can it be whatever the LDAP server allows?
Thanks,
Jim
------------------------------
Jim Creasman
------------------------------