Re: User profile in secure pages (https)

["Bradley V. Stone" <bvstone@xxxxxxxxxxxx>]

> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]On
> Behalf Of David Gibbs
> Sent: Monday, August 11, 2008 9:31 AM
> To: Web Enabling the AS400 / iSeries
> Subject: Re: [WEB400] User profile in secure pages (https)
>
>
> Raul A. Jager W. wrote:
> > I got a certificate and set up a secure page in the iSeries, it works
> > very well. But I just noticed that the pages that require
> authentication
> > do not pass the user profile to the program, they just pass QTMHHTP1
> > The same program in a non-secure library receives the user profile by
> > creating a field with INZ(*USER) or in the program status DS.
>
> If you're using basic authentication, I think you need to get the
> user profile from the REMOTE_USER environment variable.
>
> It's been a while since I worked on a RPG web app ... but I'm
> pretty sure the web server always runs under the same user profile.
>
> david

that is correct.  And be aware that it won't be available for all pages on
your site, only those under the protect directive.

For example, if you've set it up to protect /cgi-bin, that means that for
anything outside of that path the REMOTE_USER environment variable will not
be available.

Brad
www.bvstools.com