RE: Implementing AS400 security on a web page

[Scott Mildenberger <Smildenber@xxxxxxxxxxxx>]

David,

This is what we have in our configuration and it's working:

Protection  OUTQPROT  {                       
      PasswdFile   %%SYSTEM%%                 
      ACLOverride  Off                        
      Mask         All@*                      
      AuthType     Basic                      
      ServerID     QDEV                       
      UserID       %%SERVER%%                 
}                                             
 Protect /QSYS.LIB/SCOTTINF.LIB/* OUTQPROT    

And I assume that you restarted the server instance after making your
changes.

Scott Mildenberger

> -----Original Message-----
> From: David Gibbs [mailto:dgibbs@verticalsky.com]
> Sent: Tuesday, April 03, 2001 8:17 AM
> To: 'WEB400 Mailing List'
> Subject: Implementing AS400 security on a web page
> 
> 
> Folks:
> 
> I'm trying to protect a web page on a CGI program and use 
> AS400 userid &
> password as validation.
> 
> I've added the following (using the *admin interface) to my instance
> configuration...
> 
> Protect  /cgi-bin  il400sv2  {      
>       PasswdFile   %%SYSTEM%%       
>       ACLOverride  Off              
>       PostMask     All@(*)          
>       GetMask      All@(*)          
>       AuthType     Basic            
>       ServerID     SecurityCheck      
>       UserID       %%SERVER%%       
> }                                   
> 
> But the system refuses to ask for userid & password.
> 
> I'm running on V4R1.
> 
> Any suggestions?
> 
> Thanks!
> 
> david
> 
> --
> David Gibbs
> Sr. Software Engineer
> Mortice Kern Systems US, Inc.
> 2500 S. Highland Ave., Suite 200
> Lombard, IL  60148
> 
> phone: (630) 495-2108 x5004
> http://www.mks.com
> mailto:dgibbs@mks.com
> 
> Need a laugh: http://www.userfriendly.org/static
> 
> +---
> | This is the WEB400 Mailing List!
> | To submit a new message, send your mail to WEB400@midrange.com.
> | To subscribe to this list send email to WEB400-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> WEB400-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---