Re: Prompting for iseries user ID and password on a web application

Thanks Matt. Those are some good tips for me to remember. This
particular application that I'm dealing with is a very restricted
application and only a select fews of internal users are allowed to
access it. Currently, it uses NT login (NTLM) to perform access
authority. The request is to change it to use iseries signon for this
type of authority checking.

"Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx> wrote in message
news:<mailman.32322.1276276591.2580.java400-l@xxxxxxxxxxxx>...
The easiest way is to set up your HTTP server to use Basic
Authentication to password protect things. Once that is done, the user
name that was entered will be available in the remote user environment
variable.

That said, it's generally not good to use user profiles for web sites
because you open the system up to hacking by providing credentials that
mean something to the base OS.

Also, there isn't a way to change passwords when they expire or reset
profiles when they get disabled from too many invalid login attempts
which will likely result in additional support calls.

Matt

----------------------------------------------------------------------

message: 1
date: Fri, 11 Jun 2010 10:12:00 -0500
from: "Lim Hock-Chai" <Lim.Hock-Chai@xxxxxxxxxxxxxxx>
subject: Prompting for iseries user ID and password on a web
application

There is a new business requirement where I've to make modification to
one of our web-app to now prompt for iseries user ID and password before
allowing user to access the application. Does any know if there is
already a pre-built tool (in jt400?) that can already do that for me or
I've to pretty much create one?

Thanks

----------