FTP user authorization ?

[fraydey]

How to create authorization to ftp user.
I need to give him authority to one and the ONLY library.
I was thinking about authorization lists but in this case I have to add this lists to all obiects in the system.
It's a little shame but I really forgot how can I give him authorization like this.

[tomholden]

Re: FTP user authorization ?

you can use an FTP EXIT program and "lock down" so that they can only access what you want them to. with the exit program you can code it to allow access based on user profile etc. the exit program will apply to all users however and you'll have to deal with your needs accordingly.

to apply your exit point programs for FTP you'll have to add them to the registration information:

this one is triggered when an FTP subcommand is issued after authentication

Exit point:   QIBM_QTMF_SERVER_REQ     Format:   VLRQ0100   
                                                            
Type options, press Enter.                                  
  1=Add   4=Remove   5=Display   10=Replace                 
                                                            
              Exit                                          
            Program     Exit                                
Opt          Number     Program        Library              
                                                            
                  1     FTPEXIT        QGPL

This is the server log in / authentication exit point:

Exit point:   QIBM_QTMF_SVR_LOGON      Format:   TCPL0200     
                                                              
Type options, press Enter.                                    
  1=Add   4=Remove   5=Display   10=Replace                   
                                                              
              Exit                                            
            Program     Exit                                  
Opt          Number     Program        Library                
                                                              
                  1     FTPLOGIN       QGPL

using this method gives you more control over what happens with any FTP requests. the FTPEXIT and FTPLOGIN programs are attached.

[DeadManWalks]

Re: FTP user authorization ?

fraydey, are you saying that your system has all objects with *Public *All, is so yikes. If not then the profile that you create can be given *all to just the lib that you want and *Public *Exclude will automatically take care of the rest.

[fraydey]

Re: FTP user authorization ?

My system is O.K. belive me *PUBLIC doesn't have *ALL
And unfortunately I can't *EXCLUDE *PUBLIC from this library. *PUBLIC has to be *USE - application issue. In this case your scenario wouldn't work.
But thanks for help.
What I have to do I have to give one user authority to one and the only library in the system to FTP files from this library.
User - user has initial menu - signo off that he cant log on to the system can only FTP files.
I also want to restict posibility cd, mkdir etc; commands for this user.

[tomholden]

Re: FTP user authorization ?

My system is O.K. belive me *PUBLIC doesn't have *ALL
And unfortunately I can't *EXCLUDE *PUBLIC from this library. *PUBLIC has to be *USE - application issue. In this case your scenario wouldn't work.
But thanks for help.
What I have to do I have to give one user authority to one and the only library in the system to FTP files from this library.
User - user has initial menu - signo off that he cant log on to the system can only FTP files.
I also want to restict posibility cd, mkdir etc; commands for this user.

the exit programs i posted actually does monitor and reject change directory that is outside of the user's home directory.

[fraydey]

Re: FTP user authorization ?

Tomholden
Thanks for your help. I try to play with exitpoints, but my problem is I've never do it before. That is the reason why I'm still looking for other possibility. I'll do the exit points too .
Thanks again

[fraydey]

Re: FTP user authorization ?

O.K. Finally I find out the easier way to do it.
I just gave him as CURLIB, library he need and revoke his authority to any FTP command except send/receive file.
Tomholden I'll play with exitpoints to be more secure.
Thanks for help.