Re: User licensing for web access

From the v7.1 knowledge center...

For specific information about IBM i users and the variety of user
entitlements available, see the "IBM i licensing by user" chapter in IBM
System i® Overview: Models 515, 525, 550, 570, 595 and More
<http://www.redbooks.ibm.com/abstracts/redp5052.html>.

That Redpiece has lots on details...among them:
"If 20 people, for example, use one i5/OS user profile to concurrently
exchange credentials with i5/OS, an i5/OS application, or middleware, you
require 20 i5/OS User Entitlements, because 20 different persons are
authenticated through their credentials."

"Exchanging credentials (authentication) can be performed in several ways.
The most commonly used functions that exchange credentials with i5/OS
include:
– 5250 workstation signon process
– File Transfer Protocol (FTP) signon
– Signing on to i5/OS through a browser interface to a Web application
– Use of Kerberos authentication
– Using i5/OS as a file server, for example, a Windows workstation with a
network drive to the i5/OS integrated file server
– A remote application accessing the i5/OS database via, for example, the
i5/OS database server jobs providing ODBC, .Net, or Java Database
Connectivity (JDBC™) interfaces.
If no user authentication (exchange of credentials) is performed, user
license entitlement is not required."

As I understand it, if you use your i as a public web server, you don't
need a user license for every person in the world. However, if part of
your site is available only to authorized users, then you need a license
for each concurrent user. In this case, you'd probably go with the
External Access license or the regular Unlimited user one.

"The i5/OS External Access option provides an unlimited number of
concurrent i5/OS User Entitlements for i5/OS users who are external to the
enterprise on the system. For example, if you have multiple i5/OS
partitions on the System i, one i5/OS External Access option provides
access for an unlimited number of concurrent i5/OS User Entitlements for
i5/OS users who are external to the enterprise across one or multiple i5/OS
partitions.
"You do not need to purchase the i5/OS External Access option if you have
already purchased the Unlimited i5/OS User Entitlement option. The
Unlimited i5/OS User Entitlement option provides an unlimited number of
concurrent i5/OS User Entitlements for a system for i5/OS Users within and
external to the enterprise."

Charles

On Fri, Nov 17, 2017 at 6:03 AM, Steve Pavlichek <spavlichek@xxxxxxxxxxx>
wrote:

Let’s not forget that only the entry level IBM I systems require user
licenses. If you’re running Amazon.com on IBM I, you’re probably not going
to be running P05/P10 systems. If you are using a cluster of these small
systems, then IBM has three options for you:

1. Concurrent users
2. Unlimited Users
3. Unlimited External Users, which is specifically for publishing your
application on the web and is fairly cheap in comparison to the other two
options.

The P20 and above system do not require user based licensing for the OS.
Some LPPs do require user licenses, such as Client Access and Web Query.

From: Bradley Stone<mailto:bvstone@xxxxxxxxx>
Sent: Friday, November 17, 2017 7:47 AM
To: Midrange Systems Technical Discussion<mailto:midrange-l@xxxxxxxxxxxx>
Subject: Re: User licensing for web access

Rob, let me ask a not so pointed question to get to the point.

My site runs Amazon.com on an IBM i.

IBM is going to say each customer with an account (and none are tied to
User IDs) is a "user" under their T&C?

If so, what does that mean?

Bradley V. Stone


On Fri, Nov 17, 2017 at 6:42 AM, Rob Berendt <rob@xxxxxxxxx> wrote:

No Nathan. Steve did not misinterpret it at all. I think you are trying
to inject your hopes and desires into the mix and if you undergo an audit
you may be in for a rude surprise.
I think the T&C are quite clear that if you have a table you created
yourself which says
User Password IBM i User
SAM SMIRDLY QUSER
PETE PUMA QUSER
POP MUSIC QSYSOPR
ROCK FOREVER QSYSOPR
Then the T&C says these are four users, not 2.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755

From: Nathan Andelin <nandelin@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 11/16/2017 05:18 PM
Subject: Re: User licensing for web access
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



On Thu, Nov 16, 2017 at 3:03 PM, Steve Pavlichek <spavlichek@xxxxxxxxxxx

wrote:

Not correct regarding your own application credentials. That is
specifically covered in IBM’s T&C.

Steve,

I'm aware of the IBM i terms and conditions. It appears that you are
misinterpreting the word "credentials", and asserting that it means "any
type of credentials", rather than limiting it to "IBM i credentials".

When the terms and conditions refer to "applications", and "middleware",
they are referring to applications and middleware that authenticate
against
IBM i credentials.

IBM i has no way of tracking users that don't have IBM i credentials. And
the type of user that might access IBM i via the HTTP interfaces are not
using any of the products listed in the WRKLICINF screens, nor any type

of

client that interfaces with those products.

Hope that helps.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD