Re: Make IWS use a specific profile

On Oct 22, 2021, at 4:33 PM, Jon Paris <Jon.Paris@xxxxxxxxxxxxxx> wrote:

I just had this issue with an SQL based service Jim but when I specified the user profile at the service level it worked fine. I still default for the server itself.


Jon Paris

On Oct 22, 2021, at 1:48 PM, Nadir Amra <amra@xxxxxxxxxx> wrote:

Hi,
I just tried this, and I found the job in QUSRWRK, and assuming you did
"wrkactjob sbs(qusrwrk) ", I put option "5=Work with" on the job and then
option 1 (Display job status attributes) I see:

Current user profile . . . . . . . . . . . : AMRA
Job user identity . . . . . . . . . . . . . : AMRA

So if you are having problem you should see if there is anything in the
job log.



"WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx> wrote on 10/22/2021 08:46:52
AM:

From: "Jim Oberholtzer" <midrangel@xxxxxxxxxxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"

<web400@xxxxxxxxxxxxxxxxxx>

Date: 10/22/2021 08:47 AM
Subject: [EXTERNAL] Re: [WEB400] Make IWS use a specific profile
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>

I'll open a case. I did specify the user specifically, so something is

not

right. As a matter of note, most of the issues I'm having all started
with the last PTF groups/TR. So it's something in there that's caused

it

to go off track.

--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects

On Thu, Oct 21, 2021 at 6:10 PM Nadir Amra <amra@xxxxxxxxxx> wrote:

When you deploy a web service, you have the ability to indicate the

user

profile the web service should run under.

You can change the user profile for deployed web services by going to

the

Security tab after clicking on the Properties button for a web

service.

Note that any user profile you specify must give *USE access to the

web

services SERVER user profile.

If you still cannot get this to work, assuming you are on latest HTTP
group, open a PMR/ticket.

"WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx> wrote on 10/21/2021

02:32:10

PM:

From: "Jim Oberholtzer" <midrangel@xxxxxxxxxxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"

<web400@xxxxxxxxxxxxxxxxxx>

Date: 10/21/2021 02:32 PM
Subject: [EXTERNAL] [WEB400] Make IWS use a specific profile
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>

Folks:

I have an IWS server hosting a REST web service. Work Active Job

shows

the

web jobs running under a user profile created for that purpose.

WEBSVR.

WEBSVR has authority to all the appropriate stuff but nothing else.

When the Web service is called, the user profile that is actually

used

is

QUSER not WEBSVR. We found this out after banging our heads against

rocks

all morning trying to figure out why we could run the program

manually

and

all was well (our profile) , and the web service always failed (with
QUSER). Now we know.

How do I make IWS use the profile we gave it for incoming

transactions?

--

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: INVALID URI REMOVED

u=https-3A__lists.midrange.com_mailman_listinfo_web400&d=DwICAg&c=jf_iaSHvJObTbx-

siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=Bli_FPf6QjDwgcOAxQKf8xfhyeTAvk4waDqWlGFDpx8&s=KaQX1ibFPyexLppQ9NQ0UQ46MfQr_RiyIs3ca3_7EnE&e=

or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at INVALID URI REMOVED

u=https-3A__archive.midrange.com_web400&d=DwICAg&c=jf_iaSHvJObTbx-
siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=Bli_FPf6QjDwgcOAxQKf8xfhyeTAvk4waDqWlGFDpx8&s=1NrsOCyF9BMivkbtZ6jr8cymBPHV9lgSULqoZhHJkOQ&e=

.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing

list

To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: INVALID URI REMOVED

u=https-3A__lists.midrange.com_mailman_listinfo_web400&d=DwICAg&c=jf_iaSHvJObTbx-

siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=Bli_FPf6QjDwgcOAxQKf8xfhyeTAvk4waDqWlGFDpx8&s=KaQX1ibFPyexLppQ9NQ0UQ46MfQr_RiyIs3ca3_7EnE&e=

or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at INVALID URI REMOVED
u=https-3A__archive.midrange.com_web400&d=DwICAg&c=jf_iaSHvJObTbx-
siA1ZOg&r=1i-jGlz0-JTK1aLHcsU-

ew&m=Bli_FPf6QjDwgcOAxQKf8xfhyeTAvk4waDqWlGFDpx8&s=1NrsOCyF9BMivkbtZ6jr8cymBPHV9lgSULqoZhHJkOQ&e=

.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.