Re: Security between IIS and iSeries Apache server?

We had moved the files back to the IFS and where using a URL link because there seemed to be a large response time issue when running the larger files through the web service streaming method. Our web services use Zend...PHP...and XML but seem to be slow with any volumn of data.
Doug

-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Kevin Turner
Sent: Friday, May 29, 2015 11:50 AM
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Security between IIS and iSeries Apache server?

You'd be better off streaming the file (pdf or whatever) to the browser rather than providing a URL that links directly to the IFS. If you already have a mechanism for your .net app to obtain information from the ibmi via web services, then it can obtain the file in the same way and stream the content back to the browser. You can then do whatever security checks you want in your app.

On 29 May 2015, at 20:13, Doug Darden <Doug.Darden@xxxxxxxxxxxxxxxx> wrote:

We are running a .Net interface but use the iSeries for all the data and business logic using Web Services which support the .Net. (Basically a .Net interface to our steady and true iSeries platform) When we create a file (like .pdf or .csv) to give to the users we move it to the IFS then send a URL address to .NET which then uses Apache Web Server on the iSeries to show the file.

We are having a problem with security that we need to figure out. The .NET IIS server is the web piece that runs the front end. When it executes the URL to get the data file from the iSeries we need the IIS server to pass user credentials to Apache so that we have user security for access to the IFS file. Right now we have to set permissions on the iSeries to Public *Read so they can access the file.

Does anyone know how to call a URL from a MicroSoft IIS server that is pointing at an iSeries IFS directory using Apache on the iSeries, and send user credentials so security is locked down to the IIS user and iSeries permissions?

Thanks,
Doug Darden



This e-mail message is for the sole purpose of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
mailing list To post a message email: WEB400@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.


___________________________________________
This email has been scanned by iomartcloud.
http://www.iomartcloud.com/

________________________________

NOTICE: The information in this electronic mail transmission is intended by CoralTree Systems Ltd for the use of the named individuals or entity to which it is directed and may contain information that is privileged or otherwise confidential. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or by telephone, so that the sender's address records can be corrected.



--------------------------------------------------------------------------------


CoralTree Systems Limited
Company Registration Number 5021022.
Registered Office:
12-14 Carlton Place
Southampton
Hampshire
SO15 2EA
VAT Registration Number 834 1020 74.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at http://archive.midrange.com/web400.

This e-mail message is for the sole purpose of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.