Re: proper authorities for *http startup

We restart the web server (along with our other system processes after an 
IPL) using a start up job running under a user profile with *allobj 
authority.
 
Greg Oziemkiewicz


-----Original Message-----
From: "Jim Franz" <franz400@xxxxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Date: Wed, 20 Sep 2006 14:53:41 -0400
Subject: Re: [WEB400] proper authorities for *http startup


still failing, but diff file.
Security audit journal says QPGMR (profile the startup jobd runs under)
has (AF) auth failure to /www/xxxx/conf/httpd.conf
Same HTP8029
The startup job does STRTCPSVR  *HTTP   HTTPSVR(XXXX '-vv')
On other V5r3 systems never had to auth qpgmr to any of these files.
Am comparing to another working system and public and qtmhhttp and qtmhhtp1
have same authority.
Same cume and groups at V5r3 on both systems.
Reviewed doc User profiles and required authorities for HTTP Server (V5R3)
in Info Center but it doesn't talk about auth to start server, except as 
"webmaster"
and using the http server wizard.

Does qpgmr need specific auth to anything but to use cmd STRTCPSVR??

jim

----- Original Message ----- 
From: "Greg Oziemkiewicz" <goziemkiewicz@xxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Wednesday, September 20, 2006 11:44 AM
Subject: Re: [WEB400] proper authorities for *http startup

QTMHHTTP & QTMHHTP1 need to have *RWX authority to /tmp

Greg Oziemkiewicz


-----Original Message-----
From: "Jim Franz" <franz400@xxxxxxxxxxxx>
To: <WEB400@xxxxxxxxxxxx>
Date: Wed, 20 Sep 2006 10:16:51 -0400
Subject: [WEB400] proper authorities for *http startup


I am looking for some doc or info to the correct authorities
for various ifs objects to start an apache instance with
the qstrup pgm at ipl (strtcpsvr *http). Receiving error HTP8029. Several
IBM docs discuss HTP8029, but each has a different
solution. I don't want too much authority on these objects,
and want public *exclude, but doc

http://www-1.ibm.com/support/docview.wss?uid=nas1167ba57248aaed3a86256df9004adef7

says to give *public  *rwx with all authority to /tmp directory  !!!!!
The apache instance is processing both static html and
cgi (rpgle). V5R3 and V5R4 (two machines).

jim franz
-- 
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.
-- 
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.