Re: User Authentication

Dave,

Ah, I think I now see what your doing.  And, no, you can't create a
AS./400 user profile starting with a number.  Why.. it makes no sense,
but you can't.  

It seems these "users" of yours are really customers and not internal
users.   In that case, you can use a DB2/400 table with their account
number and a password and simply have your PC Web application make a
call to a stored procedure on the iSeries and it can call the table I
just mentioned and find out if the account number/password combination
exists.  If so, then call a different stored procedure that accesses a
DB2/400 table that is the account number/authorized report matrix.  
What you read here are the report names the account number can access
and display those on your web page.    When they click on the report
name on your web page you have some choices in design:  do as you are
currently doing and have the user simply call an existing report "print
out" located in the IFS, or you can have the report dynamically produced
via either your own custom applications use of SQL against the iSeries
or have the iSeries DB2 Query Manager dynamically call a pre-created
query that dynamically creates the report or some other query
tool/decision support tool/data analysis tool to do the report creation
and presentation.   The reason why I say the latter is at one site I was
at my folks created web applications that called MicroStrategy tools
that allowed the customer to display reports or do what-ifs on their
data.   The same was true for the Cognos tool set.  The point here is
you have many choices from the simple to the very elaborate. 

As to your question of space in the IFS... I doubt you'll have problems
storing reports if you must store them as PC reports, as the IFS gets
its space from the iSeries DASD pool.    So, you can carve out as much
as you can stand to lose from the iSeries DASD pool.

For the most part what I've tried to present here are solutions that
are native to the iSeries, uses the iSeries as the main storage
area/engine for storage of data, account numbers, performing queries and
other aspects that require power and security.   I highly recommend this
approach and leave the PC for doing what it does best... pretty
presentation and GUI capabilities.

HTH,

Dave


>>> DReiher@xxxxxxxxxxxxxxxx 8/29/2005 14:03:09 >>>
For starters, they currently log in to an old web site using an ID we 
assigned to them and it is their account number. I can't use a number
as a 
user profile on the 400, can I?
If I could do that, then I would just create each one of these as a
usrprf 
and let that be my validation.
I would really like to do that and place each report in the users
folder, 
but then there are 2000 folders (2000 is a pretty static number), would

that be an issue on the IFS??
They are small reports, most are one page. So I don't believe that
space 
would be a problem and each user would never have more than 4 reports 
which would always be overwritten each night or week or month. 

Not real sure where I want to go from here.......

    Dave Reiher
    System Analyst
    Prairie Farms Dairy - Corporate
    Ph: 217.854.2547 ext. 254
    dreiher@xxxxxxxxxxxxxxxx 



"Dave Odom" <Dave.Odom@xxxxxxxxxxxx> 
Sent by: web400-bounces+dreiher=prairiefarms.com@xxxxxxxxxxxx 
08/29/2005 03:39 PM
Please respond to
Web Enabling the AS400 / iSeries <web400@xxxxxxxxxxxx>


To
<web400@xxxxxxxxxxxx>
cc

Subject
Re: [WEB400] User Authentication






Dave,

Perhaps I'm missing something but if you're working with the iSeries,
why wouldn't you just use the user profiles of the iSeries when they
logon to the Web front end?   I also assume the reports your
application
is running for them are reports from a query tool or application
running
on the iSeries.   If that is the case, why wouldn't you create an
authorization table/matrix to query to provide the name of the report
to
display on their web screen as well as authentication. 

Dave Odom
Arizona 

>>> DReiher@xxxxxxxxxxxxxxxx 8/29/2005 12:21:29 >>>
I am going to have a web site where users can access reports specific
to 
them.
There are anywhere from 1500 to 2000 users. How would be the
recommended 
way to store the usernames and passwords on the partition i have
running 
WebSphere?
Currently they exist in an external DB file on the 400, should I just 
write something to hit that file when they try to login?

Regardless of the answer to this, it will lead me to my next question.
I 
am really just going to need a simple login page and then a page 
displaying links to the 4 different reports specific to the user. I
know 
it is nothing elaborate, but where could I find some resources on how
to 
do this? Believe me, if it were MS .NET I could slap it together in 30

seconds, but I am new to the WS ide and java, any help would be 
appreciated.

Thanks!
    Dave Reiher
    System Analyst
    Prairie Farms Dairy - Corporate
    Ph: 217.854.2547 ext. 254
    dreiher@xxxxxxxxxxxxxxxx