Help neded securing HTTP Proxy Server

[rpeterso@xxxxxxxxxxxxxx]

Our college contracts with text service providers who provide us "full text"
access to books, magazines, etc. over the web.  Most of these company's grant
access to their site based on the requestors IP address.  This works well for
staff and students who are on campus.  We are now offering many courses online
over the internet and would like to provide our remote access students via a
proxy HTTP server.  I've set up the HTTP server on one of our AS/400's to serve
as this proxy server and it works great.  You simply configure your browser (IE
or Netscape) to tell it to use our HTTP server as a proxy server and you have
access to the "full text" services just as if you were on campus and part of our
network.  This all works great, except I now have an obligation to limit access
to this proxy server to only those students and faculty who can provide a userid
and password.

The  "IBM Information Center" says I can use document protection to specify
which users can use my proxy server. Here is the page from the "Information
Center":

Specifying which clients can use the proxy


You can use the server's protection function to control which clients can use
your server as a proxy. This is part of controlling access to your server.


Use the Configuration and Administration forms to specify which clients can use
your server as a proxy.
   1.      Click Configurations.
   2.      Click Protection.
   3.      Click Document protection.
   4.      Complete the Document protection form that is provided.
   5.      Click the Apply button.


You will receive a message that tells you whether or not the task completed
successfully.


-------------------------------------- End of Info Center Text Copy
---------------------------------------------


My question is "how do I do step 4. Complete the Document protection form that
is provided?".  I'm not serving any documents from "my" HTTP server, it is only
a proxy to the actual info provider.  I tried using a get and post mask of
All@(*) but never get an "enter userid" prompt.   It seems like securing access
to a proxy server is a "must have" feature so it must be do-able, but I sure
can't figure it out.  Any ideas?  Anybody done this?


Thanks in advance!







+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---