Re: How do I get usable file permissions using the IBM Web Administration for i5/OS on port :2001

[vhamberg@xxxxxxxxxxx]

Using the *ADMIN server is not a bad thing. And I don't know if it writ by the WAS people - Web Admin, as this site is named, is not Websphere Application Server - although it can be used to administer some of that, as well, I think.

Again I agree that one should not put iSeries security maintenance in this particular interface, however.

JMHO
Vern

 -------------- Original message ----------------------
From: Booth Martin <booth@xxxxxxxxxxxx>
> wow.  Am I reading you right?  Using the *ADMIN server is a bad 
> thing?!?!  It has security flaws?  IBM is putting out a product that is 
> dangerous to use?
>
> Aaron Bartell wrote:
> > Note that you have taken a non-traditional approach to deploying a web site
> > to an AS400.  The traditional approach, or rather how IBM tells you to do
> > it, is to use the *ADMIN server to create the server from scratch.  That
> > obviously isn't efficient in some cases (like mine where I have an install
> > script for RPG-XML Suite to automate the authorities).
> >
> > But on the flip side what you are asking is potentially a huge security
> > vulnerability - allowing the changing of securities through a derivative of
> > Websphere.  Makes me shudder in my poop kickers (that's midwest for boots
> > :-)
> >
> > I would much rather do the security changes from a command line and some of
> > that is just opinion and the other is the fact that there a large amount of
> > disconnect between the OS400 and Websphere folks (IMO).
> >
> > Aaron Bartell
> > http://mowyourlawn.com
> >
> >
> > On Mon, Sep 29, 2008 at 12:58 PM, Booth Martin <booth@xxxxxxxxxxxx> wrote:
> >
> >   
> > > That it is, Aaron.  You are exactly right.  But having to go back in
> > > with a 5250 command line to give permissions??  The more likely answer
> > > is that I don;lt know what I am doing!  :)   There must be a place in
> > > the HTTP Administrator to set that.  There HAS to be.  I just am not
> > > seeing it.
> > >
> > > Aaron Bartell wrote:
> > >     
> > > > To expound on that (and I agree with Matt btw) the profile *might* be
> > > > QTMHHTTP.  Do some trial and error to see what you get after giving
> > > >       
> > > QTMHHTTP
> > >     
> > > > access to those directories and files.
> > > >
> > > > HTH,
> > > > Aaron Bartell
> > > > http://mowyourlawn.com
> > > >
> > > > On Mon, Sep 29, 2008 at 12:08 PM, Haas, Matt (CL Tech Sv) <
> > > > matt.haas@xxxxxxxxxxx> wrote:
> > > >
> > > >
> > > >       
> > > > > It would be better to keep *PUBLIC set to *EXCLUDE and give the web
> > > > > server's profile *RX authority.
> > > > >
> > > > > Matt
> > > > >
> > > > > ------------------------------------------------------------------------
> > > > >
> > > > >         
> > > > > ------------------------------------------------------------------------
> > > > >
> > > > >
> > > > > No virus found in this incoming message.
> > > > > Checked by AVG - http://www.avg.com 
> > > > > Version: 8.0.169 / Virus Database: 270.7.5/1696 - Release Date: 9/28/2008 
> 1:30 PM
> > > > >         
>
> -- 
> ---------------------------------
> Booth Martin
> http://www.Martinvt.com
> ---------------------------------
>
> -- 
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.