Re: Using UserID and Pawword with HTTP server (V5R1 original)

[Simon Coulter <shc@xxxxxxxxxxxxxxxxx>]

On 26/01/2009, at 8:41 PM, Rob Dixon wrote:

> I didn't copy line 1140 correctly.  It should have read
>
>    01140        Exec  /cgi-bin/stipple
>  /QSYS.LIB/E290PRDOBJ.LIB/e290G00000.PGM

I thought part of it was missing but it's not material to the problem  
at hand.

> Clearly you are quite correct, but I had tried
>
>   01080        Protect  /QSYS.LIB/E290PRDOBJ.LIB/e290G00000.PGM  
> TestProt
>
> earlier, but with the same result.

Well that's not going to work!

I thought I had clearly pointed out the error but I see I'll have to  
TELL you the answer rather than let you work out the solution.

Protection is failing for you because:
	1) in the above example you are applying protection to the program path
	2) in the previous example you are applying protection to a  
different request

Protect:
Use this directive to activate protection setup rules for requests  
that match a template.

Operative word is "requests"

Syntax:
Protect request-template [[label] [FOR IP-address-template]]

Note "request-template"

Exec:
Use this directive to specify a template for requests you want to  
accept and respond to by running a CGI program.

Operative word is "requests"

Syntax:
Exec request-template [program-path [IP-address-template]]  
[CGIConvMode [CgiThreadedMode]]

Note "request-template" vs. "program-path"

Thus it should be apparent that "request" is what the client sends  
you therefore you need to apply your protection to THAT request.

Page 152 in the IBM HTTP Server (original) for iSeries Webmaster's  
Guide V5R2 under "Step 1. Activating protection" clearly shows you  
must protect requests.

Once the user has authenticated and is allowed to run the request the  
web-server will perform any PASS, MAP, or EXEC directives.

Thus your protect statement must be:
	Protect  /cgi-bin/stipple	TestProt

Regards,
Simon Coulter.
--------------------------------------------------------------------
   FlyByNight Software         OS/400, i5/OS Technical Specialists

   http://www.flybynight.com.au/
   Phone: +61 2 6657 8251   Mobile: +61 0411 091 400        /"\
   Fax:   +61 2 6657 8251                                   \ /
                                                             X
                 ASCII Ribbon campaign against HTML E-Mail  / \
--------------------------------------------------------------------