Re: Web service HTTP Basic Authentication - where to start from?

If talking about integrated web services server, see chapter[1] in
admin and programing guide on security. There is an example. The link to
programming guide is at end of web page.

[1] https://www.ibm.com/support/pages/node/633935


"WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx> wrote on 04/28/2020 12:14:50
PM:

From: Justin Taylor <JUSTIN@xxxxxxxxxxxxx>
To: "WEB400 (web400@xxxxxxxxxxxxxxxxxx)" <web400@xxxxxxxxxxxxxxxxxx>
Date: 04/28/2020 12:15 PM
Subject: [EXTERNAL] Re: [WEB400] Web service HTTP Basic
Authentication - where to start from?
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>

I it use for my REST services only. I don't serve any directories.

Do you want use IBMi users? If so, there's an "IBM i user profiles"
option you can use instead of a validation list.



-----Original Message-----
From: Maria Lucia Stoppa [mailto:mlstoppa@xxxxxxxxx]
Sent: Tuesday, April 28, 2020 10:45 AM
To: RPG programming on IBM i <rpg400-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Web service HTTP Basic Authentication - where to start

from?

@Justin
I tried it and as far as I could tell it works for directories only,
which is not my case; also, users in validation list are not IBM i
user profiles, just internet users with a name and a password.


Il giorno mar 28 apr 2020 alle ore 17:27 Justin Taylor
<JUSTIN@xxxxxxxxxxxxx> ha scritto:

I have Apache configured to use a Validation List. In IBM Web
Administration for i for the server -> Security -> Authentication.
Under "User authentication method", "Internet users in validation
lists" is checked and my validation list object is listed in the

"Validation list"

box.

HTH




-----Original Message-----
From: Maria Lucia Stoppa [mailto:mlstoppa@xxxxxxxxx]
Sent: Tuesday, April 28, 2020 12:59 AM
To: RPG programming on IBM i <RPG400-L@xxxxxxxxxxxxxxxxxx>
Subject: Web service HTTP Basic Authentication - where to start from?

Hi all,

I hope you are all fine.

I am working on a project (Vue front-end and Ibm i as DB server via
REST
API) and I would like the REST APIs to answer only after successful
user authentication.

I know very little about basic authentication: I know REST API must be

called with login information set in the headers, but I can't figure
out how to configure the web service HTTP instance to accept it and,
most of all, how these information will be checked against user
profile security on IBM i.

I am reading "IBM HTTP Server for i" reference, but so far nothing has

come up to my attention.

Can you suggest me readings, or examples, or any other resource that
may help me to get into it?

I would like to know a bit more on the subject before paying for a

course.

Thank you.


--

Maria Lucia Stoppa
mlstoppa@xxxxxxxxx

--
This is the RPG programming on IBM i (RPG400-L) mailing list To post a

message email: RPG400-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: https://urldefense.proofpoint.com/v2/url?

u=https-3A__lists.midrange.com_mailman_listinfo_rpg400-2Dl&d=DwICAg&c=jf_iaSHvJObTbx-

siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=xnpEaknncCJJklDyNpMutSHxCXOO88eQSOWcq3XYXUM&s=yDcxu61psm03El0FBNBR04OCkKkhMbkN4JgIuu74tUs&e=

or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://urldefense.proofpoint.com/v2/url?

u=https-3A__archive.midrange.com_rpg400-2Dl&d=DwICAg&c=jf_iaSHvJObTbx-
siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=xnpEaknncCJJklDyNpMutSHxCXOO88eQSOWcq3XYXUM&s=5sTOoHKdHXs8AlZn2CES8bBe15VTYG2B8J1_VrKpQmE&e=

.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://urldefense.proofpoint.com/v2/url?

u=https-3A__amazon.midrange.com&d=DwICAg&c=jf_iaSHvJObTbx-
siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=xnpEaknncCJJklDyNpMutSHxCXOO88eQSOWcq3XYXUM&s=pkMokrLwu5vySgaVaNiN6raYp33-

f52QAZLtpOm7_vU&e=

--

Maria Lucia Stoppa
mlstoppa@xxxxxxxxx

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing

list

To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://urldefense.proofpoint.com/v2/url?

u=https-3A__lists.midrange.com_mailman_listinfo_web400&d=DwICAg&c=jf_iaSHvJObTbx-

siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=xnpEaknncCJJklDyNpMutSHxCXOO88eQSOWcq3XYXUM&s=0lfZeMISlgapIsrdz1jxhWs1o8rH5rUKIqFOpNQf3wU&e=

or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://urldefense.proofpoint.com/v2/url?
u=https-3A__archive.midrange.com_web400&d=DwICAg&c=jf_iaSHvJObTbx-
siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=xnpEaknncCJJklDyNpMutSHxCXOO88eQSOWcq3XYXUM&s=q5x_EyAXFmD9nrdsRr8ei2IHobT0BRGKID6EP1K8o4g&e=

.