Re: Reusing User ID and Password with Zend i5_Program_Call

[Scott <scottgcampbell@xxxxxxxxx>]

Shannon,

I responded on the Zend forums and thought I'd copy that response here.

Here is what I'm doing, not sure if it is the best but it is what I'm 
doing.

I use a generic login for all of the connections to the 400. This login 
has the initial menu set to *SIGNOFF.
When a user enters a username/password I call an RPG program passing 
these as parameters. In the RPG program I call QSYGETPH to see if the 
combination is valid, if it is I set a flag and store it in the session, 
along with the username discarding the password (this wouldn't work if 
your object security required the specific user to connect). I also 
check the number of invalid password attempts before checking the 
password so the user cannot disable themselves from the web login (I 
didn't want to have to deal with re-setting accounts disabled this way.) 
by calling QSYRUSRI.

You could however store the username and password in the session which 
will be stored on the IFS. This may or may not be a concern depending on 
how your IFS is secured (or not secured :-) ).

I'm not sure if that answers your question. If not let me know what 
needs clarification or an example.

Scott

Shannon ODonnell wrote:
> Here's my scenario:
>
>  
>
> I have the user log in with their i5 user id/password with a PHP script.
>
>  
>
> I then take the user to a new page, and I have them enter a search string.
> I take that search string and I pass it to an RPG program using
> i5_Program_Call.   Now...as you know,  the i5_Program_Call requires the user
> to log in first, that is, the php page needs to establish a connection to
> the server before doing a i5_program_call.  
>
>  
>
> But in this case, the user logged in on a previous php page which, since
> this is basically all stateless, the iSeries and the PHP server know nothing
> about.  
>
>  
>
> I do not want to force the user to log in again on this page to do their
> search, and I don't want to store that user ID and password in the PHP
> script either.  So how can I accomplish this?
>
>  
>
> What does the rest of the community do to reuse the id and password with PHP
> like this?
>
>  
>
> Shannon O'Donnell
>
>