Re: web app security - user profile or validation list?

[Justin Taylor <JUSTIN@xxxxxxxxxxxxx>]

In your Apache config, you can set a user profile for the server to use.  I gave up on getting it to work with PHP.  Whenever I started my Apache server, PHP created a file that only QTMHHTTP was authorized to.  The server did nothing until I granted authority to my server user.



-----Original Message-----
From: Steve Richter [mailto:stephenrichter@xxxxxxxxx] 
Sent: Tuesday, August 21, 2018 11:38 AM
To: Web Enabling the IBM i (AS/400 and iSeries) <web400@xxxxxxxxxxxx>
Subject: Re: [WEB400] web app security - user profile or validation list?

not familiar with the userid parameter.  ZENDPHP7 jobs run as QTMHHTTP.
When my PHP code calls db2_connect I pass empty string for the user name and password.

 $options = array('i5_naming' => DB2_I5_NAMING_ON);
  if (strlen($libl) > 0)
  {
    $options['i5_libl'] = $libl ;
  }
  $conn = db2_connect("*LOCAL","","", $options);


mostly, I do not follow how if I use validation list, how best to switch to an IBM i user profile.




On Tue, Aug 21, 2018 at 12:06 PM, Jon Paris <jon.paris@xxxxxxxxxxxxxx>
wrote:

> Have you specified the UserId parameter in the server profile?  Anyone 
> signing in using the validation list should be running under this User 
> Id and will have those access rights.
>
> Does that not work for you?