[WEB400] Still having problems with Qtmhhtp1 profile

["Justin Houchin" <justin@xxxxxxxxxxxx>]

This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
Hi Everyone,
I have one CGI program that calls two service programs. In one of those
service programs, it goes into the Digital Certificate Manager to check
to see if the main CGI program is registered there, if so, it initiates
a secure connection to UPS to receive shipping rates. The problem I am
having is that Qtmhhtp1 does not have authority to the Digital
Certificate Manager. I determine this by changing the Qtmhhtp1 profile
from *USER to *SECOFR. The program works. But I understand by granting
Qtmhhtp1 *SECOFR authority, I open a security hole in my system. I don't
want that. I have compiled both service programs and the main program
with the user profile option- *OWNER. Which I own all three and I am
*SECOFR with ALLOBJ authority. I try the program, still doesn't work. I
do a DSPPGM and check that User Profile states *OWNER and it does and
that Use adopted authority states *YES and it does. I do a DSPSRVPGM and
check that both service programs have User Profile-*OWNER and Use
adopted authority-*YES and they do. Can anybody think of why this is not
working?

Note: I do compile my programs on one 400 and FTP them to another to run
them. I have *SECOFR and *ALLOBJ on both systems.

Justin Houchin
Programmer and Web Developer
ReliaTek, Inc
justin@reliatek.com

--