A customer requested a new feature be added to MQ Authenticate User Security Exit (MQAUSX).

A customer asked if there was anyway to tell when a client disconnects from a queue manager. After a brief discussion with the customer, they said they had an application that accesses sensitive/confidential information and they wanted to know how long each user was connected to the queue manager.

This is a pretty straightforward feature to add to MQAUSX. MQAUSX knows when the client application connected, so it was very easy to get the time at termination, calculate the difference and output a line to the log file.

Not to affect current users, a new keyword called LogDiscMessage was added to MQAUSX. To use the new feature, the user needs to enable it.

i.e.

LogDiscMessage = Y

Here is a sample of the MQAUSX logfile with LogDiscMessage enabled:

2016/02/25 14:07:04.288 MQAUSX I:  Connection accepted for MCA_UID='roger' UserID='roger' UserSpecifiedServer='abc01' QMgr='MQWT1' ChlName='TEST.EXIT' ConName='10.10.10.10' Server='' RemoteUserID='roger'

2016/02/25 14:29:56.437 MQAUSX I:  Disconnection for MCA_UID='roger' UserID='roger' UserSpecifiedServer='abc01' QMgr='MQWT1' ChlName='TEST.EXIT' ConName='10.10.10.10' Server='' RemoteUserID=''. Connected for 22 minutes and 52 seconds.

As you can see by the “Disconnection” line in the logfile, the user was connected to the queue manager for 22 minutes and 52 seconds.

If you would like to try out the new feature then send an email to
support@capitalware.com and we will send you the latest release of MQAUSX or z/MQAUSX.

On a different note, there was a recent discussion of RVERSION and RPRODUCT values on the MQ ListServer. MQAUSX and z/MQAUSX already have this ability to dump the information to the logfile when in Verbose logging mode. Here is a sample:

2016/02/24 16:07:48.873 MQAUSX I:  RemoteProduct = 'MQCC' : RemoteVersion = '08000004'

2016/02/24 16:35:03.293 MQAUSX I:  RemoteProduct = 'MQJB' : RemoteVersion = '07000113'

And when a company implements both MQAUSX server-side and client-side components, the following is also outputted to the logfile when LogMode is Verbose:

2016/02/24 16:07:48.873 MQAUSX I:  MQAUSX Client Version='3.1.0' Native on Windows

2016/02/24 16:35:03.293 MQAUSX I:  MQAUSX Client Version='3.0.0.0' Java on Linux

As you can see, the MQAUSX logfile contains lots of information about the connecting client application.

Regards,
Roger Lacroix
Capitalware Inc.