RE: RE: Authenticate web users against Validation Lists -- WEB400

This is kind of stream of thought, so bear with me...

You could setup a properties file with a generic userid and password, then
set up a corresponding userid/password on the 400 that is restricted to the
areas you want this Java application to access.  Use JPassword fields in an
Applet to receive the user's information.  Verify in your servlet that the
user's information is formatted correctly (you'll ahve to come up with your
own approach), and if it is valid then use the sign-on info from the
properties file for your JDBC connection.

This way you can limit 400 access to a single userid/password but still give
each user a unique sign on and none of them know the actual AS/400 sign in
information.

Joel R. Cochran
Director of Internet Services
VamaNet.com
(800)480-8810
mailto:custservice@vamanet.com

> -----Original Message-----
> From: Wills, Mike N. (TC) [mailto:MNWills@taylorcorp.com]
> Sent: Thursday, January 31, 2002 12:17 PM
> To: 'ign_list@ignite400.org'; Midrange - Web400 (E-mail)
> Subject: [WEB400] RE: Authenticate web users against Validation Lists
>
>
> Okay, we have this part working. There are some Validation
> list stuff for
> the JT400. I haven't found out where our programmer found it,
> but he did.
>
> Now, for the next question. How can we bypass the AS400 login
> screen? We
> would like to create our own log in screen and act as the
> AS400 sign in. We
> know this can be done in plain text (very stupid idea). Is
> there any other
> way in Java servlets (on an NT Tomcat box), like through a
> post? We are
> using an Apache based instance on the 400.
>
> Any help would be appreciated.
>
> -----Original Message-----
> From: Bob Cancilla [mailto:BOBC@ri-net.com]
> Sent: Tuesday, January 29, 2002 6:10 PM
> To: ign_list@ignite400.org
> Subject: Re: Authenticate webusers against Validation Lists
>
>
>
> Mike,
>
> Sounds ugly :-)  I don't think you can make the HTTP server handle the
> requests, but you should be able to use API calls to the 400
> via classes in
> the AS/400 Java Tool kit to the VLDL API's.  You'll probably
> have to do
> your own authentication within your application to pull this off.
>
> Bob C.
>
>
>
>
>
>                     "Wills, Mike
>
>                     N. (TC)"             To:
> <ign_list@ignite400.org>
> (IGNITe/400 Mailing List)
>                     <MNWills@taylo       cc:
>
>                     rcorp.com>           Subject:     Re: Authenticate
> webusers against Validation Lists
>                     Sent by:
>
>                     <ign_list@igni
>
>                     te400.org>
>
>                     (IGNITe/400
>
>                     Mailing List)
>
>
>
>
>
>                     01/29/2002
>
>                     02:45 PM
>
>                     Please respond
>
>                     to ign_list
>
>
>
>
>
>
>
>
>
> But will this work off a NT Tomcat server? This is where the
> Java servlet
> will be running.
>
> -----Original Message-----
> From: Bob Cancilla [mailto:BOBC@ri-net.com]
> Sent: Tuesday, January 29, 2002 3:20 PM
> To: ign_list@ignite400.org
> Subject: Re: Authenticate webusers against Validation Lists
>
>
>
> Mike,
>
> The base API's are appropriate for C or C++ and can be
> wrappered.  I'll see
> if I can dig anything up on direct JAVA support.  BTW, I just got
> authentication working in WebSphere and the Original HTTP
> server using HTTP
> Basic Authentication.  We just specify the path of our primary
> authenticated directory as part of the path for our Java
> applications.  We
> had to define the path in our apps and to Websphere via the
> console (i.e.
> /private/myapp)  where /private is an alias for an
> authenticated directory
> in the HTTP server, and /myapp is the path to the Websphere Enterprise
> application.
>
> It worked remarkably well,  I was able to deduct 3 hours from my Java
> consultants who are triaining our folks since they didn't
> know the trick.
>
> Bob C.
>
>
>
>
>
>                     "Wills, Mike
>
>                     N. (TC)"             To:
> <ign_list@ignite400.org>
> (IGNITe/400 Mailing List)
>                     <MNWills@taylo       cc:
>
>                     rcorp.com>           Subject:     Re: Authenticate
> webusers against Validation Lists
>                     Sent by:
>
>                     <ign_list@igni
>
>                     te400.org>
>
>                     (IGNITe/400
>
>                     Mailing List)
>
>
>
>
>
>                     01/29/2002
>
>                     01:09 PM
>
>                     Please respond
>
>                     to ign_list
>
>
>
>
>
>
>
>
>
> Sorry for the little amount of detail, I guess I should read
> what I sent
> before I sent it :-[. I want to know what Java API can be
> used to validate
> users in a validation list. We have an application that does the
> authentication, but we also want our custom program (which extents the
> capability of the software) to do it's own verification. This
> customized
> program resides on a NT server.
>
> -----Original Message-----
> From: Bob Cancilla [mailto:BOBC@ri-net.com]
> Sent: Tuesday, January 29, 2002 3:02 PM
> To: ign_list@ignite400.org
> Subject: Re: Authenticate webusers against Validation Lists
>
>
>
> Mike,
>
> What are you trying to do?  The answer is yes, I validate my customers
> using validation lists and have for years, but can you be
> more specific?  I
> use the Admin gui and just pick validation list to configure
> the server.
> You can download some sample programs from IGNITe/400 to help
> you automate
> the process of maintaining the VLDL's.
>
> Bob C.
>
>
>
>
>
>                     "Wills, Mike
>
>                     N. (TC)"             To:
> <ign_list@ignite400.org>
> (IGNITe/400 Mailing List)
>                     <MNWills@taylo       cc:
>
>                     rcorp.com>           Subject:
> Authenticate webusers
> against Validation Lists
>                     Sent by:
>
>                     <ign_list@igni
>
>                     te400.org>
>
>                     (IGNITe/400
>
>                     Mailing List)
>
>
>
>
>
>                     01/29/2002
>
>                     12:40 PM
>
>                     Please respond
>
>                     to ign_list
>
>
>
>
>
>
>
>
>
> Is there a way to validate against a validation list, like
> there is for
> AS400 profiles?
>
> Thanks for any help
>
> Mike
>
> #############################################################
> From the IGNITe/400 Mailing List (http://www.ignite400.org)
> Powered by CommuniGate PRO for the iSeries! (http://www.stalker.com)
>
> This message is sent to you because you are subscribed to
>   the mailing list <ign_list@ignite400.org>.
> To unsubscribe, E-mail to: <ign_list-off@ignite400.org>
> To switch to the DIGEST mode, E-mail to
> <ign_list-digest@ignite400.org>
> To switch to the INDEX mode, E-mail to <ign_list-index@ignite400.org>
> Send administrative queries to  <ign_list-request@ignite400.org>
>
> The material on this mailing list is (c) Copyright 2001 IGNITe/400 and
> may not be reproduced without first obtaining the permission of
> IGNITe/400 and the author of the message.
>
>
>
>
> #############################################################
> From the IGNITe/400 Mailing List (http://www.ignite400.org)
> Powered by CommuniGate PRO for the iSeries! (http://www.stalker.com)
>
> This message is sent to you because you are subscribed to
>   the mailing list <ign_list@ignite400.org>.
> To unsubscribe, E-mail to: <ign_list-off@ignite400.org>
> To switch to the DIGEST mode, E-mail to
> <ign_list-digest@ignite400.org>
> To switch to the INDEX mode, E-mail to <ign_list-index@ignite400.org>
> Send administrative queries to  <ign_list-request@ignite400.org>
>
> The material on this mailing list is (c) Copyright 2001 IGNITe/400 and
> may not be reproduced without first obtaining the permission of
> IGNITe/400 and the author of the message.
>
> #############################################################
> From the IGNITe/400 Mailing List (http://www.ignite400.org)
> Powered by CommuniGate PRO for the iSeries! (http://www.stalker.com)
>
> This message is sent to you because you are subscribed to
>   the mailing list <ign_list@ignite400.org>.
> To unsubscribe, E-mail to: <ign_list-off@ignite400.org>
> To switch to the DIGEST mode, E-mail to
> <ign_list-digest@ignite400.org>
> To switch to the INDEX mode, E-mail to <ign_list-index@ignite400.org>
> Send administrative queries to  <ign_list-request@ignite400.org>
>
> The material on this mailing list is (c) Copyright 2001 IGNITe/400 and
> may not be reproduced without first obtaining the permission of
> IGNITe/400 and the author of the message.
>
>
>
>
> #############################################################
> From the IGNITe/400 Mailing List (http://www.ignite400.org)
> Powered by CommuniGate PRO for the iSeries! (http://www.stalker.com)
>
> This message is sent to you because you are subscribed to
>   the mailing list <ign_list@ignite400.org>.
> To unsubscribe, E-mail to: <ign_list-off@ignite400.org>
> To switch to the DIGEST mode, E-mail to
> <ign_list-digest@ignite400.org>
> To switch to the INDEX mode, E-mail to <ign_list-index@ignite400.org>
> Send administrative queries to  <ign_list-request@ignite400.org>
>
> The material on this mailing list is (c) Copyright 2001 IGNITe/400 and
> may not be reproduced without first obtaining the permission of
> IGNITe/400 and the author of the message.
>
> #############################################################
> From the IGNITe/400 Mailing List (http://www.ignite400.org)
> Powered by CommuniGate PRO for the iSeries! (http://www.stalker.com)
>
> This message is sent to you because you are subscribed to
>   the mailing list <ign_list@ignite400.org>.
> To unsubscribe, E-mail to: <ign_list-off@ignite400.org>
> To switch to the DIGEST mode, E-mail to
> <ign_list-digest@ignite400.org>
> To switch to the INDEX mode, E-mail to <ign_list-index@ignite400.org>
> Send administrative queries to  <ign_list-request@ignite400.org>
>
> The material on this mailing list is (c) Copyright 2001 IGNITe/400 and
> may not be reproduced without first obtaining the permission of
> IGNITe/400 and the author of the message.
>
>
>
>
> #############################################################
> From the IGNITe/400 Mailing List (http://www.ignite400.org)
> Powered by CommuniGate PRO for the iSeries! (http://www.stalker.com)
>
> This message is sent to you because you are subscribed to
>   the mailing list <ign_list@ignite400.org>.
> To unsubscribe, E-mail to: <ign_list-off@ignite400.org>
> To switch to the DIGEST mode, E-mail to
> <ign_list-digest@ignite400.org>
> To switch to the INDEX mode, E-mail to <ign_list-index@ignite400.org>
> Send administrative queries to  <ign_list-request@ignite400.org>
>
> The material on this mailing list is (c) Copyright 2001 IGNITe/400 and
> may not be reproduced without first obtaining the permission of
> IGNITe/400 and the author of the message.
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/web400
> or email: WEB400-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
>