Re: Using UserID and Pawword with HTTP server (V5R1 original)

[Rob Dixon <robertsdixon@xxxxxxxxx>]

Dear Simon

Thank you so very much for taking the time to send such a long reply.  I had
tried so many different configurations over the last few days without
success.  Now, thanks to you, I can log on.  Even then, I ran immediately
into ACL problems and it tool me a while to overcome them but evenutally I
did.

Matt had earlier posted an almost correct solution.

I can now move forward - until the next stumbling block.

Its easy when you know how and now I do.

Many thanks for your kindness.

Best wishes

Rob

2009/1/26 Simon Coulter <shc@xxxxxxxxxxxxxxxxx>

> On 26/01/2009, at 8:41 PM, Rob Dixon wrote:
>
> > I didn't copy line 1140 correctly.  It should have read
> >
> >    01140        Exec  /cgi-bin/stipple
> >  /QSYS.LIB/E290PRDOBJ.LIB/e290G00000.PGM
>
> I thought part of it was missing but it's not material to the problem
> at hand.
>
> > Clearly you are quite correct, but I had tried
> >
> >   01080        Protect  /QSYS.LIB/E290PRDOBJ.LIB/e290G00000.PGM
> > TestProt
> >
> > earlier, but with the same result.
>
> Well that's not going to work!
>
> I thought I had clearly pointed out the error but I see I'll have to
> TELL you the answer rather than let you work out the solution.
>
> Protection is failing for you because:
>        1) in the above example you are applying protection to the program
> path
>        2) in the previous example you are applying protection to a
> different request
>
> Protect:
> Use this directive to activate protection setup rules for requests
> that match a template.
>
> Operative word is "requests"
>
> Syntax:
> Protect request-template [[label] [FOR IP-address-template]]
>
> Note "request-template"
>
> Exec:
> Use this directive to specify a template for requests you want to
> accept and respond to by running a CGI program.
>
> Operative word is "requests"
>
> Syntax:
> Exec request-template [program-path [IP-address-template]]
> [CGIConvMode [CgiThreadedMode]]
>
> Note "request-template" vs. "program-path"
>
> Thus it should be apparent that "request" is what the client sends
> you therefore you need to apply your protection to THAT request.
>
> Page 152 in the IBM HTTP Server (original) for iSeries Webmaster's
> Guide V5R2 under "Step 1. Activating protection" clearly shows you
> must protect requests.
>
> Once the user has authenticated and is allowed to run the request the
> web-server will perform any PASS, MAP, or EXEC directives.
>
> Thus your protect statement must be:
>         Protect  /cgi-bin/stipple       TestProt
>
> Regards,
> Simon Coulter.
> --------------------------------------------------------------------
>    FlyByNight Software         OS/400, i5/OS Technical Specialists
>
>    http://www.flybynight.com.au/
>    Phone: +61 2 6657 8251   Mobile: +61 0411 091 400        /"\
>    Fax:   +61 2 6657 8251                                   \ /
>                                                              X
>                  ASCII Ribbon campaign against HTML E-Mail  / \
> --------------------------------------------------------------------
>
>
>
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.