MQ does, in fact, support that, and I've used it.  It's the "Channel 
Authentication" user mapping feature.
I was just wondering if it was "directly supported" without a mapping, if the 
presented user ID was more than 8 characters.
Thanks.

________________________________
From: IBM Mainframe Discussion List <[email protected]> on behalf of 
Walt Farrell <[email protected]>
Sent: Sunday, May 3, 2020 7:22 AM
To: [email protected] <[email protected]>
Subject: Re: Mainframe user ID length

On Thu, 30 Apr 2020 19:46:04 +0000, Frank Swarbrick 
<[email protected]> wrote:

>Is z/OS still limited in all cases to 8 upper case characters?  I am curious 
>if a user that only has access to MQ might be able to have a longer and
>ideally mixed case user ID.  They wouldn't have access to TSO or CICS or IMS.

It is in theory possible for an application (such as MQ) to use z/OS security 
services to map an alternative identity (which might have different 
characteristics from a z/OS user ID) into a standard z/OS user ID.

That can be done, for example, when applications support authentication via 
digital certificates, or via Kerberos (e.g., Windows Active Directory), or via 
LDAP. And there are additional mechanisms besides those three that z/OS 
supports.

I have no idea whether MQ supports any of those alternative mechanisms, nor 
which ones, nor whether they're applicable in your environment.

--
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to