RE: Authentication solution for applet using JDBC on an employee Intranet

Thanks for the info Prakash.  I'm leaning towards a similar solution. PLA

-----Original Message-----
From: owner-java400-l@midrange.com
[mailto:owner-java400-l@midrange.com]On Behalf Of Prakash Harri
Sent: Monday, April 09, 2001 12:56 PM
To: JAVA400-L@midrange.com
Subject: Re: Authentication solution for applet using JDBC on an
employee Intranet


I use a standard user profile ( hard coded for the intanet ) and when a user
needs access to restricted data I have a seperate user id/password which the
user must enter that I validate using a table on the as400.

----- Original Message -----
From: "Patrick L Archibald" <Patrick.Archibald@HOMETELCO.COM>
To: <JAVA400-L@midrange.com>
Sent: Friday, April 06, 2001 11:33 AM
Subject: Authentication solution for applet using JDBC on an employee
Intranet


> Hi
>
> I have a question about authentication methods
> regarding applets.  My system is V4R5, WAS 3.5.2.
>
> I have a applet on my employee Intranet
> using the jtopen JDBC driver in jt400.jar.
> It displays some hierarchical data in a swing JTree.
> It is working fine.
>
> The employee Intranet has basic authentication,
> set up in the http configuration,
> requiring an AS/400 user profile and password.
>
> My problem is I would like to avoid the request for
> user id and password when making a JDBC connection
> via the applet.  I don't have this problem in my
> servlets. From what I can tell and read, servlet
> JDBC connections use the user profile QEJBSVR
> I'm using the native DB2 JDBC driver in the servlets.
>
> Here are the solutions I've thought of, none of
> which I like:
>
> 1. Create a profile for running JBDC queries and hard-code it in my
applets.
> 2. Add a password to QEJBSVR and hard-code it in my applets.
> 3. Require the user to key his profile and password again, first when
logging on to the Intranet and second when the applet makes
> the JDBC connection.
>
> I wish the applet would use the profile and password used in the http
authentication to the Intranet. That would be ideal.  Does
> anyone else have a solution that is simple and easy to administer?
>
> Thanx, PLA
> /
> / Patrick L Archibald
> / http://HomeTelco.com/pla/
> /
>
> +---
> | This is the JAVA/400 Mailing List!
> | To submit a new message, send your mail to JAVA400-L@midrange.com.
> | To subscribe to this list send email to JAVA400-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
JAVA400-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner: joe@zappie.net
> +---
>

+---
| This is the JAVA/400 Mailing List!
| To submit a new message, send your mail to JAVA400-L@midrange.com.
| To subscribe to this list send email to JAVA400-L-SUB@midrange.com.
| To unsubscribe from this list send email to JAVA400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: joe@zappie.net
+---
+---
| This is the JAVA/400 Mailing List!
| To submit a new message, send your mail to JAVA400-L@midrange.com.
| To subscribe to this list send email to JAVA400-L-SUB@midrange.com.
| To unsubscribe from this list send email to JAVA400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: joe@zappie.net
+---