Re: [IBMiOSS] XMLSERVICE, RPGLE & Java error

Kevin,

I may have asked this before, but is there any reason NOT to use the FastCGI interface for XMLSERVICE ?

The Yips docs alluded to not using for production.

My .Net Standard XMLSERVICE Wrapper uses http and FastCGI and works everywhere including Raspberry Pi with .Net Core.

I imagine the direct DB2 call is a bit faster but CGI on IBMi is quick as well and seems to work quite well.

Regards,
Richard Schoen
Director of Document Management
e. richard.schoen@xxxxxxxxxxxxxxx
p. 952.486.6802
w. helpsystems.com
------------------------------

message: 4
date: Tue, 11 Dec 2018 16:13:14 +0000
from: "Kevin Adler" <kadler@xxxxxxxxxx>
subject: Re: [IBMiOSS] XMLSERVICE, RPGLE & Java error

That really depends on how you call XMLSERVICE. Using the FastCGI
interface, you pass a username/password which it uses to connect to the
database to call the stored procedure. You can also call it directly using
any database connection. Either way, it uses the user that is logged in to
the database to call the program and then it's all down to standard
object-level user permissions.


XMLSERVICE does have a compile option for the FastCGI program to enable it
to connect with no username/password supplied, in which case it will call
the program as the user running your Apache instance (most likely
QTMHHTTP). This is not the default and AFAIK not provided by the IBM
version in QXMLSERV. I don't know about other vendor versions
(Zend/PowerRuby/etc).

----- Original message -----
From: "Slanina, John" <jslanina@xxxxxxxxxx>
Sent by: "OpenSource" <opensource-bounces@xxxxxxxxxxxx>
To: IBMi Open Source Roundtable <opensource@xxxxxxxxxxxx>
Cc:
Subject: Re: [IBMiOSS] XMLSERVICE, RPGLE & Java error
Date: Mon, Dec 10, 2018 3:55 PM

I could never understand how the security worked with XMLSERVICE. How do
you control what program and tables can be access ?

Thank
John Slanina