On 2/29/2012 3:27 PM, Dana Mitchell wrote:
I'm working on a simple REXX/SDSF/CGI exec to display output from selected
STC's via browser and HTTP server on z/OS 1.11. I can get it to partially
work, but there seems to be some inconsistencies in the way userid's are
handled.
If I run a REXX CGI with the ISFEXEC WHO command it shows as running with the
ID that the web server is running under, not my ID that I used to sign on when
the browser asked for credentials.
Further, the output of ISFEXEC WHO shows the web server's ID, but it shows
GRPNAME=ISFUSER which is the catch-all least powerful group in ISFPRMxx, *not*
the group that the web server's ID should be placed into. If I log onto TSO
using the web server's ID and issue WHO, it shows the proper GRPNAME group
assigned.
Has anyone done much work in this area and solved these sorts of probems?
Dana
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
Hi
We are using the REXX/CGI with HTTP intensively, (I don't have ISFEXEC
WHO), but I think it depend on your userid, how the HTTPD server configured
You are probably running under the HTTP server's userid.
From our httpd.conf :
Protection IMW_Admin {
ServerId IMWEBSRV_Administration
AuthType Basic
PasswdFile %%SAF%%
Mask WEBADM,webadm
}
Protection CGI_Admin {
ServerId CGI_Administration
AuthType Basic
PasswdFile %%SAF%%
UserID %%CLIENT%%
Mask All
}
Protect /admin-bin/* IMW_Admin WEBADM
Protect /Docs/admin-bin/* IMW_Admin WEBADM
Protect /reports/* IMW_Admin WEBADM
Protect /Usage* IMW_Admin WEBADM
Protect /cgi-bin/* CGI_Admin
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
