Re: Not authorized to PASE for i program ... zfcgi

SamP>Add following directive to your httpd.conf file in order to run
FastSGI jobs under your profile: FastCGIServerID AARON

I am looking to run it in under the normal Apache profiles and not my own.




ScottK>Your "ls" output that you sent to show us permissions, does not show
the permissions on the / dir. You'll want to make sure the user has r+x
authority to that, as well.

I've never thought about that. At first I wasn't sure (and maybe still
not) how to check that. Would it be the below? (note the single period on
the far right which I am guessing signifies the / dir's authority)

$ ls -all /
total 361750
drwxrwsrwx 28 qsys 0 327680 Jan 8 22:33 .




ChuckP> Best to run the script using USER(QTMHHTTP) given that is the
initial user for the

Not sure what you mean and your sentence was cut off. The STRTCPSVR
command** doesn't have a USER option.

**
http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_72/cl/strtcpsvr.htm?lang=en


Concerning audit journal for AF entries, I did find three of them (they are
all the same except the directory specified on line 00851). Here's an
example of one. Do you see something that gives more info about the error?

Display Journal Entry

Object . . . . . . . : Library . . . . . . :
Member . . . . . . . :
Incomplete data . . : No Minimized entry data : *NONE
Sequence . . . . . . : 10382
Code . . . . . . . . : T - Audit trail entry
Type . . . . . . . . : AF - Authority failure

Entry specific data
Column *...+....1....+....2....+....3....+....4....+....5
00001 'A*N *N *DIR CODE01 QTMHHTTP '
00051 '168853 QTMHHTTP 0000'
00101 '000 '
00151 ' '
00201 ' '
00251 ' ºròÙ P '
00301 ' '
00351 ' '
00401 ' '
00451 ' '
00501 ' '
00551 ' '
00601 ' '
00651 ' '
00701 ' '
00751 ' '
00801 ' ºròÙ P QASP01 00001 USENU Y '
00851 ' /QOpenSys/usr/sbin '
00901 ' '
00951 ' '
01001 ' '



Aaron Bartell
litmis.com - Services for open source on IBM i