RE: Effective profiles in WAS5.0

["Raikov, Leonid" <RaikovL1@xxxxxxxxx>]

Does this mean than that WAS has a built-in authority checking
mechanism? Suppose I try accessing a stream file from my Java class; at
what point and who ascertains that the end user has sufficient authority
to the file?

Lo 

-----Original Message-----
From: Frances Stewart [mailto:francess@xxxxxxxxxx]
Sent: 16 December 2003 13:51
To: Java Programming on and around the iSeries / AS400
Subject: Re: Effective profiles in WAS5.0



The security type in any version of WAS (3.0.2 ad higher) does not
affect
the the profile of the thread the HTTP request runs on. The WAS
application
server runs under user profile QEJBSVR by default, and the HTTP Server
(IBM
HTTP Server powered by Apache) runs under profile QTMHHTTP by default.
Enabling security does not change this.

You can change the user profile under which the WAS application server
runs
(this is documented under the Security section of the WAS for iSeries
documentation).  I believe you can also change the user profile under
which
the HTTP Server runs, but do not know how - I would expect it to be
documented with the HTTP Server documentation.


Frances Stewart
WebSphere Application Server for iSeries
    External web site: http://www.iseries.ibm.com/websphere
    Team web site: http://w3.rchland.ibm.com/~was
E-mail: francess@xxxxxxxxxx
Tie-line: 553-2795, External: 507 253-2795
IBM Rochester



 

                      "Raikov, Leonid"

                      <RaikovL1@xxxxxxxxx        To:
"'JAVA400-L@xxxxxxxxxxxx'" <JAVA400-L@xxxxxxxxxxxx>

                      >                          cc:

                      Sent by:                   Subject:  Effective
profiles in WAS5.0                                                 
                      java400-l-bounces@m

                      idrange.com

 

 

                      12/16/2003 07:19 AM

                      Please respond to

                      Java Programming on

                      and around the

                      iSeries / AS400

 

 





In WAS5.0 for iSeries, if the security type is "Local OS", what
effective profile does a thread created on behalf of an HTTP request run
under? Is it the profile name entered by the user at signon? That is, is
QWTPSETP API used when a new thread is created?
Lo


_______________________________________________
This is the Java Programming on and around the iSeries / AS400
(JAVA400-L)
mailing list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.





_______________________________________________
This is the Java Programming on and around the iSeries / AS400
(JAVA400-L) mailing list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.