Re: Using UserID and Pawword with HTTP server(V5R1original)

[Rob Dixon <robertsdixon@xxxxxxxxx>]

John

Many thanks for your help but unfortuntately I'm on V5R1 with HTTP original
server as I put in the subject.  However, when I move over to my V5R3 box, I
am sure that your contribution will be most welcome.

I can't find an equivalent to "Require valid-user" in the original HTTP
server.

According to the manual "Entering %%CLIENT%% [for userID] causes the server
to challenge the client on each and every request for a
user ID and password."

many thanks

Rob

2009/1/26 John Jones <chianime@xxxxxxxxx>

> Sorry to jump in to this late, but on my production system (V5R3, Apache),
> we have the following:
>
> AuthName SOME_NAME
> AuthType Basic
> PasswdFile %%SYSTEM%%
> UserID %%SERVER%%
> Require valid-user
> # ACLOverride  On
>
> The "Require valid-user" isn't in the sample below.
>
> The above is actually in a separate file called AUTH_USERS.inc which is
> included in the main config via a "Include conf/AUTH_USERS.inc" line.  That
> line can be anywhere.
>
> You can also protect just specific directories:
> <Directory /some_dir>
>   Allow From all
>   Require valid-user
>   PasswdFile %%SYSTEM%%
>   AuthType Basic
>   AuthName some_system_name
> </Directory>
>
> > > > > Matt
> > > > > > You must think me very rude not to have replied to you before but
> > > > somehow
> > > > > I
> > > > > > missed your kind post.  As I still have not solved the problem, I
> > > was
> > > > > > researching today and so came across your reply.
> > > > > >
> > > > > > Of course I tried your suggestion at once,
> > > > > >
> > > > > > my code is
> > > > > >
> > > > > >  Protection TestProt {
> > > > > >  PasswdFile %%SYSTEM%%
> > > > > >  Authtype      Basic
> > > > > >  ACLOverride Off
> > > > > >  PostMask All
> > > > > >  GetMask All
> > > > > >  ServerID www.erros.co.uk
> > > > > >  Userid    %%CLIENT%%
> > > > > >   }
> > > > > >  Protect /cgi-bin/stipple/* TestProt
> > > > > >  CGIMode %%EBCDIC%%
> > > > > >  PersistentCGITimeout 60 minutes
> > > > > >  MaxPersistentCGITimeout 60 minutes
> > > > > >    Exec  /cgi-bin/hello  /QSYS.LIB/E280CGIOBJ.LIB/hello
> > > > > >    Exec  /cgi-bin/stipple  /QSYS.LIB/E290PRDOBJ.LIB/e29
> > > > > >    Exec  /cgi-bin/e29rpp/*   /QSYS.LIB/E290PRDOBJ.LIB/E29RPP.PGM
> > > > > >
> > > > > > I have restarted the server but still no luck
> > > > > >
> > > > > > Does your memory go back far enough to suggest what I am doing
> > > wrong?
> > > > > > Many thanks
> > > > > >
> > > > > > Rob
> > > > > >
> > > > > > 2009/1/13 Haas, Matt (CL Tech Sv) <matt.haas@xxxxxxxxxxx>
> > > > > >
> > > > > > > I had a minute to look at an old config and here is an example
> > > that
> > > > > > should
> > > > > > > work:
> > > > > > >
> > > > > > > Protection  TESTPROT  {
> > > > > > >     PasswdFile   %%SYSTEM%%
> > > > > > >     ACLOverride  Off
> > > > > > >     PostMask     All
> > > > > > >     GetMask      All
> > > > > > >     AuthType     BASIC
> > > > > > >     ServerID     some_name
> > > > > > >     UserID       %%CLIENT%%
> > > > > > >  }
> > > > > > >
> > > > > > > Protect        /cgi-bin/stipple/*          TESTPROT
> > > > > > >
> > > > > > > Note that I have no way to test this.
> > > > > > >
> > > > > > > Matt
>
> --
> John Jones
> "I'm in no condition to drive...Wait! I shouldn't listen to myself, I'm
> drunk!"
>  - Homer J. Simpson
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.