Validation Lists (Was: MD5 via RPG?)

h
Hello Booth,

You can use validation lists to authenticate web users.  The HTTP server 
understands 
how to use them.  You could also use them to secure access to different parts 
of an 
application.  

The validation list is really just a list of user identifiers and encrypted 
passwords 
(with some other stuff too).  The idea is that you use them to secure access to 
parts 
of the AS/400 without having to have a *USRPRF for each user.  That implies 
they never 
actually sign-on to the AS/400.

In your example, if the users are connecting via a browser you could use a 
validation 
list to hold their name and password (received from an HTML form).  The 
validation 
entry would be added on the first interaction with the user.  The you would 
verify the 
user id and password before allowing them to modify existing details.

Validation lists could be used to authenticate access to private fora, 
downloads 
sections, member-only areas, etc., etc., etc.

Regards,
Simon Coulter.

«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
«» FlyByNight Software         AS/400 Technical Specialists       «»
«» Eclipse the competition - run your business on an IBM AS/400.  «»
«»                                                                «»
«» Phone: +61 3 9419 0175      Mobile: +61 0411 091 400           «»
«» Fax:   +61 3 9419 0175      mailto: shc@flybynight.com.au      «»
«»                                                                «»
«» Windoze should not be open at Warp speed.                      «»
«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
//--- forwarded letter -------------------------------------------------------
> X-Mailer: Lotus Notes Release 5.0a  May 4, 1999
> Date: Wed, 28 Jun 2000 00:46:32 +0000
> From: booth@MartinVT.com
> To: MIDRANGE-L@midrange.com
> Reply-To: MIDRANGE-L@midrange.com
> Cc: none
> Subject: MD5 via RPG?

> 
> Validation lists?  How about a discussion of their uses and abuses? 
> 
> We have several applications where we want people to be able to use the 
> AS/400 to enter data and to be able to edit their own data and in most 
> instances we won't even know who they are until after they have entered 
> their information.  Would a validation list work for that?
> _______________________
> Booth Martin

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---