Re: i5/OS external entitlement definition

If access say Apache in the i5 to browse a file, say a list of available inventory that ANYONE can see and I Do Not give a ID and Password then I am not authenticated and do not need a license. On the other hand if I give and ID and password or in some other way identify myself specifically I need a license.

Let's say I login to a Intel based server and that server accesses data on the i5 on my behalf then I need a license

If say I login to an application running on an i5, like Lotus Notes, but never directly login to the i5, I still need a license.

External Users vs Internal Users
Internal User is someone you are paying. Either a real employee or even a consultant working on the system.

External Users aren't on the payroll, Like Visitors your website. If you ask then to login for whatever reason and the i5 is in the mix then they need a license. If they can browse and even place an order but do login then no license is required.

It is my understanding that if I have a 50 user license and I'm using 25 of those concurrently for internal users and that I could handle 25 external users without buying more licenses.



Rubens wrote:

Hi,
I'm trying to configure a new 515, but can't find a clear definiton about
external entitlement, to know if we really need it or not.
An i5/OS user is a person who accesses the i5/OS operating system through
one or more connections. The user exchanges credentials (user
identifications) either directly with the operating system or indirectly
through application or middleware software that is supported by the
operating system.
http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp?topic=/rzam8
/rzam8userentitlements.htm
What's exactly operating system? Just 5250, Ops Navigator and similar ways
to reach "commands"? Are applications included? Suppose I have a website (hosted on i5), as my "visitor" types a string it
gets pages generated by a query - true he's indirectly getting results from
DB2, but I hope he should never reach our operating system - is that a
"visitor" or an "user"?
Since all my "visitors" indirectly exchanges identification on Apache,
they're "users"?
Going further, there are several ways to achieve real protection "exchanging
credentials" on Apache, such as writing an application wich reads and
verifies data ("user" and "password") saved anywhere, IP ranges, validation
lists (again "user" and "password"), user name (again from anywhere), and
finally i5/OS USRPRF (perhaps this one is really a "user"), or maybe a
combination or any of those.
As there are many applications wich run on i5, wich behave such as Apache,
where exactly a "visitor" becames an "user"?
Microsoft defines "user" those defined on Active Directory - such as an
USRPRF - anything else is defined as a "visitor", it's simple and maybe it
don't covers all possibilities, but it's perfectly clear.
Thanks,
Rubens Lehmann