RE: Access control of FTP clients to AS/400

["Gwiazdowski Wojciech" <gwiazdowski@xxxxxx>]

> -----Original Message-----
> From: Ramón Garcés [mailto:ramon_garces@yahoo.es]
> Sent: Thursday, October 17, 2002 11:43 AM
> To: rpg400-l@midrange.com
> Subject: RE: Access control of FTP clients to AS/400
[cut]
> The program we developed uses the code Gwiazdowski
> Wojciech send us. Additionally it uses de user
> identification in order to access a data base file and
> decides which user is accepted and which one is
> rejected, sending back the return code parameter (1 or
> 0).
>
> This program is assigned to the exit point
> QIBM_QTMF_SVR_LOGON format TCPL0100.
>
> We work with V4R4.
>
> We have two problems:
>
> 1. The system doesn't seem to work according with the
> return code we are sending back. Some times works fine
> and some times not.

Can you tell more about this ?

> 2. Beside this, when we have being testing the system
> for a while, the FTP services stopped and the FTP
> client gets the message "the connexion was rejected"
> not asking them for the user identification.
>  It happens this way even without assigning the
> program to the exit point.
> We recover shutting down TCP/IP and starting it again.

Jt's normal, J think. Wen you add (or remove) new exit program, you
should stop and start FTP Server again.

J'm not sure, J understend you well but mayby it can help you. In this
exit program you can only grant (#RtnCode=1) or reject (#RtnCode=0)
acces for user #UsrIdent and password #AuthStr. If you want, you can
grant acces under different user profile and password and set initial
library (#RtnCode = 2 - 6). Depends on value of #RtnCode, output
parameters  #UsrPrf, #Password and #InitLib must be set correctly. If
you need more funktionality, you should use format TCPL0200.

Format TCPL0200 provides additional parameters to control the logon
process, including:
1. ability to set the working directory to any directory on the system
2. ability to return application-specific information

If you want analyze client request and allow or not for specified
operation, you need new exit program assigned to the exit point
QIBM_QTMF_SERVER_REQ (FTP Server Validation Request).

regards

Wojciech Gwiazdowski