RE: i5/OS external entitlement definition

As I recall, there were several LONG and involved threads about two months ago that discussed the user entitlements. As I recall, IBM initially counted users by counting USRPRF objects, but later changed this.... I can't remember quite what the final word was on that. There is also the bit ($$$) that allows for unlimited "external" access, which would be used for web-based users who are NOT employed by your company.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Rubens
Sent: Wednesday, August 29, 2007 1:32 PM
To: 'Midrange Systems Technical Discussion'
Subject: RES: i5/OS external entitlement definition


Kirk,

Thanks for your kind answer.

You see, that's exactly my problem... You defined based on your own
understanding, there's not a clear document stating all those points.

Mine point of view differs from yours and maybe both differs from others on
this list, my legal department sure would have yet another opinion, wich one
is right?

As IBM quoted external entitlement for us, my question is based on what, as
documents found are unclear, they can't sell anything wich is undefined can
they?

I've posted here exactly to know how others are dealing with that.

Thanks

-----Mensagem original-----
De: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] Em nome de Kirk Goins
Enviada em: quarta-feira, 29 de agosto de 2007 15:01
Para: Midrange Systems Technical Discussion
Assunto: Re: i5/OS external entitlement definition

If access say Apache in the i5 to browse a file, say a list
of available inventory that ANYONE can see and I Do Not give
a ID and Password then I am not authenticated and do not need
a license. On the other hand if I give and ID and password or
in some other way identify myself specifically I need a license.

Let's say I login to a Intel based server and that server
accesses data on the i5 on my behalf then I need a license

If say I login to an application running on an i5, like Lotus
Notes, but never directly login to the i5, I still need a license.

External Users vs Internal Users
Internal User is someone you are paying. Either a real
employee or even a consultant working on the system.

External Users aren't on the payroll, Like Visitors your
website. If you ask then to login for whatever reason and the
i5 is in the mix then they need a license. If they can browse
and even place an order but do login then no license is required.

It is my understanding that if I have a 50 user license and
I'm using 25 of those concurrently for internal users and
that I could handle 25 external users without buying more licenses.



Rubens wrote:

Hi,

I'm trying to configure a new 515, but can't find a clear definiton
about external entitlement, to know if we really need it or not.

An i5/OS user is a person who accesses the i5/OS operating system
through one or more connections. The user exchanges

credentials (user

identifications) either directly with the operating system or
indirectly through application or middleware software that is
supported by the operating system.

http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp?topic=

/rzam8
/rzam8userentitlements.htm

What's exactly operating system? Just 5250, Ops Navigator

and similar

ways to reach "commands"? Are applications included?

Suppose I have a website (hosted on i5), as my "visitor" types a
string it gets pages generated by a query - true he's indirectly
getting results from DB2, but I hope he should never reach our
operating system - is that a "visitor" or an "user"?

Since all my "visitors" indirectly exchanges identification

on Apache,

they're "users"?

Going further, there are several ways to achieve real protection
"exchanging credentials" on Apache, such as writing an application
wich reads and verifies data ("user" and "password") saved

anywhere,

IP ranges, validation lists (again "user" and "password"),

user name

(again from anywhere), and finally i5/OS USRPRF (perhaps

this one is

really a "user"), or maybe a combination or any of those.

As there are many applications wich run on i5, wich behave such as
Apache, where exactly a "visitor" becames an "user"?

Microsoft defines "user" those defined on Active Directory

- such as

an USRPRF - anything else is defined as a "visitor", it's

simple and

maybe it don't covers all possibilities, but it's perfectly clear.

Thanks,


Rubens Lehmann

--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L) mailing list To post a message email:
MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change
list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting,
please take a moment to review the archives at
http://archive.midrange.com/midrange-l.