Security between IIS and iSeries Apache server?

We are running a .Net interface but use the iSeries for all the data and business logic using Web Services which support the .Net. (Basically a .Net interface to our steady and true iSeries platform) When we create a file (like .pdf or .csv) to give to the users we move it to the IFS then send a URL address to .NET which then uses Apache Web Server on the iSeries to show the file.

We are having a problem with security that we need to figure out. The .NET IIS server is the web piece that runs the front end. When it executes the URL to get the data file from the iSeries we need the IIS server to pass user credentials to Apache so that we have user security for access to the IFS file. Right now we have to set permissions on the iSeries to Public *Read so they can access the file.

Does anyone know how to call a URL from a MicroSoft IIS server that is pointing at an iSeries IFS directory using Apache on the iSeries, and send user credentials so security is locked down to the IIS user and iSeries permissions?

Thanks,
Doug Darden


This e-mail message is for the sole purpose of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.