RE: FTP Exit pgms

["Murphy, Guy" <murphy@xxxxxxxxxxxxxxxxx>]

        If your exit program is CL, then you can use the RTVUSRPRF command
and it will return the group profile for the user.  If you are using a
higher level language and you want to complicate your life a little more,
you can use the QSYRUSRI api to do the same thing.
        As for restricting certain ftp subcommands for certain libraries
you're going to have to make a file listing the libraries and what ftp
priviledges you want users to have to them.  Since you are going to use a
fine grained approach to ftp security, you are going to have to do a lot of
coding and in a language other than CL.  You and your bosses might want to
set aside some time to think about not only the design of your project, but
AS/400 security in general.
        In the meantime, if ftp is a big hole in the security and no one has
the tools yet to nail it down, shut down the 400 ftp server until you do.


Guy Murphy - FACTS Systems
University of Illinois
217-333-8670
murphyfa@uiuc.edu


(snip)

I really need to somehow restrict certain FTP subcommands on certain
libs, as well as restrict access to certain libs altogether for all
members of this group profile.    As I see it now, you can only
retrieve the *USRPRF within the exit pgm..... (actually it's an input
parm, but you know what I mean!..)  .... I would hate to have to code
hundreds of usrprfs in there, just to restrict certain access to all
members of this group!!   Also, since all the  *usrprfs within this
group start with different letters (i.e. SMITHJ, JONESH,RICHARDSL,
etc, etc),  I cannot simply %SST the &USRPRF variable to check for
certain strings within the exit pgm --- which I imagaine would work
great, if all the profiles started with the same couple letters!...


Any ideas?  I'm thinking now that maybe by calling another pgm within
the exit pgm, to check the profile may be possible somehow?  (OK, I
admit, I've only been writing CLP for a few months, and I havent yet
taken RPG (next semester hopefully!!)

 (BTW - I'm speaking of the TCP/IP FTP Server Logon exit, and the
other is the FTP Server Request Validation exit  (V4R3)


Thanks
jamie
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---