Re: HTTP server for AS/400 *ADMIN

["R. Bruce Hoffman, Jr." <rbruceh@xxxxxxxxxxxxx>]

too quick on the send button...

Are you sure that the user does not belong to a group or supplimental group
that has *IOSYSCFG authority?

===========================================================
R. Bruce Hoffman, Jr.
 -- IBM Certified AS/400 Professional System Administrator
 -- IBM Certified AS/400 Professional Network Administrator
 -- IBM Certified Specialist - AS/400 Administrator
 -- IBM Certified Specialist - RPG IV Developer

"Those who would give up essential Liberty,
  to purchase a little temporary Safety,
  deserve neither Liberty nor Safety."

     - The Papers of Ben Franklin

-----Original Message-----
From: Pascal Bellerose <pascal.bellerose@progisys.com>
To: 'midrange-l@midrange.com' <midrange-l@midrange.com>
Date: Wednesday, July 12, 2000 7:50 PM
Subject: HTTP server for AS/400 *ADMIN


IBM says that you need the *IOSYSCFG special authority to perform
administration and configuration tasks on the HTTP server for AS400.  Well I
just noticed that any user that has a user profile on the AS400 is not only
able of logging onto the HTTP ADMIN server but can also change the settings,
regardless he has the *IOSYSCFG special authority.

Sinde we know that, we have closed the HTTP server, until we could find
what's wrong in our configuration or a way to block those users from
accessing the HTTP ADMIN server.

We will be using Websphere Application Server for AS/400 for our servlets as
soon as we can get this thing to work properly and safely.

If someone has any answer to this problem,
Please let us know !!!

thanks in advance

Pascal Bellerose
Programmeur-analyste / Software developer
pascal.bellerose@progisys.com

PROGISYS inc.
Téléphone / Telephone :   (418) 871-4880
Télécopieur / Fax :            (418) 871-0486
Site internet / Website :       www.PROGISYS.com
Courriel / E-mail :              progisys@progisys.com




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---