Re: HTTP server for AS/400 *ADMIN

----------------------------------------------------------------------------
----

An internal error occurred in the configuration CGI program. The specific
error message is shown below:


IOSYSCFG special authority is required.


----------------------------------------------------------------------------
----

HHHHMMMMMMM... when I create a profile without IOSYSCFG and select
configuration and administration from the  Internet connection server from
the AS400 Tasks page, I get the above message.

What release are you running?
Are you at the current cume package for that release?
Did you authorize QTMHHTP1 to *IOSYSCFG? (that would be wrong.)
Did you change the QTMHHTTP profile? (that would be wrong.)


-----Original Message-----
From: Pascal Bellerose <pascal.bellerose@progisys.com>
To: 'midrange-l@midrange.com' <midrange-l@midrange.com>
Date: Wednesday, July 12, 2000 7:50 PM
Subject: HTTP server for AS/400 *ADMIN


IBM says that you need the *IOSYSCFG special authority to perform
administration and configuration tasks on the HTTP server for AS400.  Well I
just noticed that any user that has a user profile on the AS400 is not only
able of logging onto the HTTP ADMIN server but can also change the settings,
regardless he has the *IOSYSCFG special authority.

Sinde we know that, we have closed the HTTP server, until we could find
what's wrong in our configuration or a way to block those users from
accessing the HTTP ADMIN server.


===========================================================
R. Bruce Hoffman, Jr.
 -- IBM Certified AS/400 Professional System Administrator
 -- IBM Certified AS/400 Professional Network Administrator
 -- IBM Certified Specialist - AS/400 Administrator
 -- IBM Certified Specialist - RPG IV Developer

"Those who would give up essential Liberty,
  to purchase a little temporary Safety,
  deserve neither Liberty nor Safety."

     - The Papers of Ben Franklin



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---