Re: Validate User Logon

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

> What APIs are available to validate a user profile for writing a custom
> TCP/IP sockets application.  And do any of them have a restriction on
> profiles created prior to V2R2?

There are two sets of APIs that might be useful.  The "profile handle"
APIs and the "profile token" APIs.  In both cases, you give it a userid
and password and it validates the profile, allows you to switch the job to
run under the user's authority, etc.

The main difference between these two sets of APIs is that the "profile
tokens" return a string that can be stored in a cookie (or something
similar) and then can be used again later... whereas the profile handle is
only valid within a single job.

Both sets of APIs are documented in the Information Center under
  Programming -> APIs -> APis by Category -> Security

Carsten Flensburg wrote a sample program in his APIs by Example column in
my newsletter.  You can read that article at the following link (requires
a free membership with the iSeries Network)
http://www.iseriesnetwork.com/resources/clubtech/index.cfm?fuseaction=ShowNewsletterIssue&ID=18517


> Yes we have upgraded our systems from a B40 Running V1R1M3 to a 820
> running V5R2.  Some of our profiles have been migrated thru the years.
> I have a new package that validates user logon and fails with profiles
> created prior to V2R2.  These profiles own production files that are
> open and in use 24x7.  I do not know what API the package uses at this
> time.  They are looking at the problem from their end but probably will
> not have an old profile to test with.  I would like to research these
> APIs and see if it is a documented restriction or if there is a work
> around.

I have no idea about the pre-V2R2 issue... maybe someone else knows?