Re: Can't set FTP exit point

[Patrick Botz <botz@xxxxxxxxxx>]

Try the iSeries Security Reference manual, found on the info center under
the Security folder.  Appendix C shows commands restricted to specific
profiles.  Appendix D shows the required authority to objects used by
commands.  ADDEXITPGM/RMVEXITPGM are set to PUBIC *EXCLUDE. You need at
least *USE  to the command.

I'm told by Bruce Vining, that since the command doesn't require that the
program you're registering exist at the time you register it, there is no
authority check done at that time either.  Now, I believe the exit point
that you are trying to register against MAY require some sort of special
authority in order to register a program (e.g. *IOSYSCFG).  You'd have to
look that up wherever the exit point itself is documented.

Patrick Botz
Senior Technical Staff Member
IBM Lab Services, Rochester
Security Architecture & Consulting, i5/OS Security Architect
(507) 253-0917, T/L 553-0917
CTC Fax # 507-253-2070
email: botz@xxxxxxxxxx

For more information on CTC, visit our website at
http://www.ibm.com/eserver/services
http://www.ibm.com/servers/eserver/services


midrange-l-bounces@xxxxxxxxxxxx wrote on 09/29/2006 11:53:15 AM:

> I'm trying to register an FTP exit point n a V5R2 box, and I can't seem
to
> do it.  I keep getting CPF3CE5, even though the program exists.  I'm
> guessing I need special admin rights, but what rights would those be?
And
> more importantly, where could I find that information?  I seem to recall
in
> the dim past there was a place one could look up required authorizations
for
> various commands, but it's a very faint echo in the musty corridors of my
> mind.