Re: proper authorities for *http startup

["Jim Franz" <franz400@xxxxxxxxxxxx>]

still failing, but diff file.
Security audit journal says QPGMR (profile the startup jobd runs under)
has (AF) auth failure to /www/xxxx/conf/httpd.conf
Same HTP8029
The startup job does STRTCPSVR  *HTTP   HTTPSVR(XXXX '-vv')
On other V5r3 systems never had to auth qpgmr to any of these files.
Am comparing to another working system and public and qtmhhttp and qtmhhtp1
have same authority.
Same cume and groups at V5r3 on both systems.
Reviewed doc User profiles and required authorities for HTTP Server (V5R3)
in Info Center but it doesn't talk about auth to start server, except as 
"webmaster"
and using the http server wizard.

Does qpgmr need specific auth to anything but to use cmd STRTCPSVR??

jim

----- Original Message ----- 
From: "Greg Oziemkiewicz" <goziemkiewicz@xxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Wednesday, September 20, 2006 11:44 AM
Subject: Re: [WEB400] proper authorities for *http startup


> QTMHHTTP & QTMHHTP1 need to have *RWX authority to /tmp
>
> Greg Oziemkiewicz
>
>
> -----Original Message-----
> From: "Jim Franz" <franz400@xxxxxxxxxxxx>
> To: <WEB400@xxxxxxxxxxxx>
> Date: Wed, 20 Sep 2006 10:16:51 -0400
> Subject: [WEB400] proper authorities for *http startup
>
>
> I am looking for some doc or info to the correct authorities
> for various ifs objects to start an apache instance with
> the qstrup pgm at ipl (strtcpsvr *http). Receiving error HTP8029. Several
> IBM docs discuss HTP8029, but each has a different
> solution. I don't want too much authority on these objects,
> and want public *exclude, but doc
> http://www-1.ibm.com/support/docview.wss?uid=nas1167ba57248aaed3a86256df9004adef7
> says to give *public  *rwx with all authority to /tmp directory  !!!!!
> The apache instance is processing both static html and
> cgi (rpgle). V5R3 and V5R4 (two machines).
>
> jim franz
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.