Re: Can't set FTP exit point

Try the iSeries Security Reference manual, found on the info center under
the Security folder.  Appendix C shows commands restricted to specific
profiles.  Appendix D shows the required authority to objects used by
commands.  ADDEXITPGM/RMVEXITPGM are set to PUBIC *EXCLUDE. You need at
least *USE  to the command.

I'm told by Bruce Vining, that since the command doesn't require that the
program you're registering exist at the time you register it, there is no
authority check done at that time either.  Now, I believe the exit point
that you are trying to register against MAY require some sort of special
authority in order to register a program (e.g. *IOSYSCFG).  You'd have to
look that up wherever the exit point itself is documented.

Patrick Botz
Senior Technical Staff Member
IBM Lab Services, Rochester
Security Architecture & Consulting, i5/OS Security Architect
(507) 253-0917, T/L 553-0917
CTC Fax # 507-253-2070
email: botz@xxxxxxxxxx

For more information on CTC, visit our website at
http://www.ibm.com/eserver/services
http://www.ibm.com/servers/eserver/services


midrange-l-bounces@xxxxxxxxxxxx wrote on 09/29/2006 11:53:15 AM:

I'm trying to register an FTP exit point n a V5R2 box, and I can't seem

to

do it.  I keep getting CPF3CE5, even though the program exists.  I'm
guessing I need special admin rights, but what rights would those be?

And

more importantly, where could I find that information?  I seem to recall

in

the dim past there was a place one could look up required authorizations

for

various commands, but it's a very faint echo in the musty corridors of my
mind.