|
Does everyone call an initial program that adopts the authority of an *IOSYSCFG.
Something is handing out elevated authority.
jte
Pascal Bellerose wrote:
IBM says that you need the *IOSYSCFG special authority to perform administration and configuration tasks on the HTTP server for AS400. Well I just noticed that any user that has a user profile on the AS400 is not only able of logging onto the HTTP ADMIN server but can also change the settings, regardless he has the *IOSYSCFG special authority. Sinde we know that, we have closed the HTTP server, until we could find what's wrong in our configuration or a way to block those users from accessing the HTTP ADMIN server.We will be using Websphere Application Server for AS/400 for our servlets as soon as we can get this thing to work properly and safely.If someone has any answer to this problem,Please let us know !!!thanks in advancePascal Bellerose
Programmeur-analyste / Software developer
pascal.bellerose@progisys.comPROGISYS inc.
Téléphone / Telephone : (418) 871-4880
Télécopieur / Fax : (418) 871-0486
Site internet / Website : www.PROGISYS.com
Courriel / E-mail : progisys@progisys.com
--
John Earl
johnearl@400security.com
The PowerTech Group
206-575-0711
PowerLock Network Security
www.400security.com
--
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
