MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » November 2012

RE: Reply list entry handling?



fixed

Lawn seed? Now that is funny. But as a vendor if he did throw out adopted programs like lawn seed he could then expand his business into mowers and trimmers! :)

If he doesn't want to have a secured program that adopts enough authority to run the RTVSYSINF command he can always adopt the necessary authority by swapping profiles.

If he doesn't want to install something on the i he can do a profile swap in java to obtain the needed authority. Here's an example from IBM on how to do it.

Example: Using a profile token credential to swap the OS/400 thread identity
Note: Read the Code example disclaimer for important legal information.

The following code example shows you how to use a profile token credential to swap the OS/400 thread identity and perform work on behalf of a specific user:

// Prepare to work with the local AS/400 system.
AS400 system = new AS400("localhost", "*CURRENT", "*CURRENT");

// Create a single-use ProfileTokenCredential with a 60 second timeout.
// A valid user ID and password must be substituted.
ProfileTokenCredential pt = new ProfileTokenCredential();
pt.setSystem(system);
pt.setTimeoutInterval(60);
pt.setTokenType(ProfileTokenCredential.TYPE_SINGLE_USE);

pt.setToken("USERID", "PASSWORD");

// Swap the OS/400 thread identity, retrieving a credential to
// swap back to the original identity later.
AS400Credential cr = pt.swap(true);

// Perform work under the swapped identity at this point.

// Swap back to the original OS/400 thread identity.
cr.swap();

// Clean up the credentials.
cr.destroy();
pt.destroy();

Under the "Perform work under the swapped identity at this point" he can run the class CommandCall to run RTVSYSINF.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Wednesday, November 28, 2012 9:40 AM
To: Midrange Systems Technical Discussion
Subject: RE: Reply list entry handling?

Gary,

David's a software vendor. He'd have to install a program on the server to do such. Not out of the question, we are using one of the packages from David's employer.

Some customers can get picky about adopted authority. After you've dealt with one vendor who had an adopted authority program of simply CALL QCMD just so the users didn't have to deal with those pesky security admins when he called them to do somethiing; I can appreciate the reluctance of throwing out adopted programs like lawn seed.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: "Monnier, Gary" <Gary.Monnier@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date: 11/28/2012 12:23 PM
Subject: RE: Reply list entry handling?
Sent by: midrange-l-bounces@xxxxxxxxxxxx



David,

Can't you use a program that adopts authority?

Gary

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of David Gibbs
Sent: Wednesday, November 28, 2012 9:16 AM
To: Midrange Systems Technical Discussion
Subject: Re: Reply list entry handling?

On 11/28/2012 11:08 AM, David Gibbs wrote:
I think the RTVSYSINF command is what I need.

Or not ... the RTVSYSINF command is *PUBLIC *EXCLUDE ... so I won't be
able to invoke the command as I intended.

I guess the manual method will have to be used. :(

david



--
IBM i on Power Systems - For when you can't afford to be out of business

I'm riding 100km (62 miles) in the 2013 Chicago Area Tour de Cure to raise
money for Diabetes research and education! Sponsor me by visiting
http://archive.ridewithdavid.com. Thanks!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.






Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact