Re: Authority issues with FTP RCMD

Hi Mark,

I'd look at compiling the programs with a user that has authority to the
libraries and or IFS folders and Use Adopt Authority *YES.

That will work for the libraries, but not the IFS. Look at securing your
IFS folders/files with an
Authorization List. IFS authority/security does not work like
library/object authority.

I hope this helps.
DO NOT go the *ALLOBJ authority route, not good.

Bob Schwartz
Director of Technical Services
Glynn County Board of Education
1313 Egmont Street
Brunswick, GA 31520

date: Mon, 11 Oct 2021 12:06:37 -0400
from: Mark Murphy <jmarkmurphy@xxxxxxxxx>
subject: Authority issues with FTP RCMD

I have a little utility I wrote using Scott Klement's FTP API to simplify
the FTP process between IBM i boxes. You tell it what object to send, and
where to send it, and the utility takes care of creating save files on the
local and remote side, saving the object, and restoring it on the other
end. This worked great for a while until our system engineers started
messing with authorities, and now no one knows how to set up the
authorities to make it work again. They keep telling me that the only way
to make it work is to give the user *ALLOBJ. I am skeptical about that, but
I don't know what authority is required.

The problem arises when I try to create the save file in QTEMP on the
remote side. I do that using FTP's RCMD sub command. What I am getting is
550 Request rejected.

I can't really find anything in the documentation concerning special
authorities required by the RCMD subcommand. I did find something
recommending that it be restricted using an exit, but we have no exit
programs registered. So I am at a loss. I can create the save file from the
command line, but not from the RCMD command which is supposed to act like a
command line according to this:

Does anyone know of any authority requirements for the RCMD subcommand for
the IBM i FTP server? Or where I can look to find more information?