Re: Adopted authority with SSL_Init

The same comment applies regarding the ifs: adopted authority doesn't work with ifs objects.

Grant the user at least RX rights to "/QIBM/USERDATA/ICSS/CERT/SERVER/DEFAULT.KDB" or perform a profile swap to a profile that does have rights to it.

-----Original Message-----
From: c400-l-bounces@xxxxxxxxxxxx [mailto:c400-l-bounces@xxxxxxxxxxxx] On Behalf Of bbresc512@xxxxxxxxxx
Sent: Monday, February 10, 2014 12:44 PM
To: mark.s.waterbury@xxxxxxxxxxxxx
Cc: c400-l@xxxxxxxxxxxx
Subject: Re: [C400-L] Adopted authority with SSL_Init

Mark,

Thanks for the quick reply.



Please disregard C vs CL comparison statement in the previous email.

The problem seems to be specific with SSL_Init call.

The following code works when called by a user with *ALLOBJ special
authority:

memset((char *)&sslinit2, 0x00, sizeof(sslinit2));

sslinit2.keyringFileName = "/QIBM/USERDATA/ICSS/CERT/SERVER/DEFAULT.KDB";

sslinit2.keyringPassword = NULL;

sslinit2.cipherSuiteList = NULL;

sslinit2.cipherSuiteListLen = 0;

rc = SSL_Init(&sslinit2);



But it doesn't work when a user with no special authority runs the code from a program set as User = *OWNER.



Thanks

Boris.



From: Mark S Waterbury [mailto:mark.s.waterbury@xxxxxxxxxxxxx]
Sent: Monday, February 10, 2014 1:55 PM
To: bbresc512@xxxxxxxxxx
Subject: Re: [C400-L] Adopted authority [PRIVATE REPLY]
Importance: High



Boris:
>>>---> private reply off-list <---<<<

How do you know that "the C program doesn't get the owner's *ALLOBJ authority."?

What exactly are you trying to do in this C program that needs this authority? Can you give an example, or provide some sample code? Perhaps you can "cut and paste" some code from that C program? -- you can change any object names etc. in the source code so as not to reveal disclose any confidential information, etc.)

The more you can tell me about what you are trying to do and why, the better I may be able to advise you on how to proceed.

Hope that helps,

Mark S. Waterbury

On 2/10/2014 1:38 PM, bbresc512@xxxxxxxxxx wrote:

Is there anything specific to defining a C program adopted authority?
I have a C program with User = *OWNER. A user with no special authority calls the C program but the C program doesn't get the owner's *ALLOBJ authority. I have a similar CL program set to the same User = *OWNER and does get the owner's authority.

Thanks
Boris.




--
This is the Bare Metal Programming IBM i (AS/400 and iSeries) (C400-L) mailing list To post a message email: C400-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/c400-l
or email: C400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at http://archive.midrange.com/c400-l.