RE: [WEB400] Anyone use HTTP_AS_AUTH_PROFILETKN?

["Bob Cozzi" <cozzi@xxxxxxxxx>]

Scott,
A shot in the dark, but perhaps convert the 32-byte string into character
from Hex (is it hex text or truly random text?) the convert it from ASCII to
EBCDIC and then convert it back to hex and try it again.
-Bob


-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of web400@xxxxxxxxxxxxxxxx
Sent: Friday, January 14, 2005 11:25 AM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] Anyone use HTTP_AS_AUTH_PROFILETKN?

Hello,

I'm writing a CGI program.

I've been trying to use the "ProfileToken on" directive in the PBA web 
server to give my program the level of authority of the requesting user, 
but I'm having problems.

I'm able to find the HTTP_AS_AUTH_PROFILETKN environment variable, and 
retrieve it's value.  Watching the program in debug, I can see that it's 
retrieving a 32-byte value that's a series of "random" letters and numbers 
(possibly something that's base64 encoded.)

When I pass this profile token to the QSYSETPT API, the API returns 
CPF2274 "Profile Token Not Valid."

I've been banging my head against the wall trying to figure out what I 
could be doing wrong, but to no avail.  Surely it's not possible that 
Apache is somehow generating invalid tokens, is it?

What could I be doing wrong?

---
Scott Klement  http://www.scottklement.com
_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.