Re: [WEB400] Still having problems with Qtmhhtp1 profile

["Jim Franz" <franz400@xxxxxxxxxxxx>]

Are you able to test & verify this works on your own system?
Also, from the joblog of the restore after you ftp to another system, is
there
any messages (not halts) indicating the security was changed during
the restore? Does the restore use the option to allow all object
differences?
curious..
jim franz

----- Original Message -----
From: "Justin Houchin" <justin@RELIATEK.COM>
To: <web400@midrange.com>
Sent: Saturday, August 10, 2002 11:02 AM
Subject: [WEB400] Still having problems with Qtmhhtp1 profile


> This is a multi-part message in MIME format.
> --
> [ Picked text/plain from multipart/alternative ]
> Hi Everyone,
> I have one CGI program that calls two service programs. In one of those
> service programs, it goes into the Digital Certificate Manager to check
> to see if the main CGI program is registered there, if so, it initiates
> a secure connection to UPS to receive shipping rates. The problem I am
> having is that Qtmhhtp1 does not have authority to the Digital
> Certificate Manager. I determine this by changing the Qtmhhtp1 profile
> from *USER to *SECOFR. The program works. But I understand by granting
> Qtmhhtp1 *SECOFR authority, I open a security hole in my system. I don't
> want that. I have compiled both service programs and the main program
> with the user profile option- *OWNER. Which I own all three and I am
> *SECOFR with ALLOBJ authority. I try the program, still doesn't work. I
> do a DSPPGM and check that User Profile states *OWNER and it does and
> that Use adopted authority states *YES and it does. I do a DSPSRVPGM and
> check that both service programs have User Profile-*OWNER and Use
> adopted authority-*YES and they do. Can anybody think of why this is not
> working?
>
> Note: I do compile my programs on one 400 and FTP them to another to run
> them. I have *SECOFR and *ALLOBJ on both systems.
>
> Justin Houchin
> Programmer and Web Developer
> ReliaTek, Inc
> justin@reliatek.com
>
> --
>
>
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/web400
> or email: WEB400-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
>
>