This article is now available in our new Knowledge Base: IBM i Apache HTTP - Server Authentication using IBM i user profiles
Overview
IBM HTTP Server for IBMi includes the IBM HTTP Server (powered by Apache).
The IBM HTTP Server for IBMi includes a rich collection of enhancements and features for a secure connection and a rich set of security features and services that pertain to the goals of authentication, authorization, integrity, confidentiality, and auditing.
Instructions
Authentication using IBMi OS user profiles
IBMi OS user profiles can be used for authentication. The advantage of this implementation is that is does not require you to perform additional configuration steps or to maintain a separate user database.
User profiles with limited capabilities and no sign on access, and *SECOFR class users (although this practice is highly discouraged), can be used for this purpose. Users with limited capabilities may require additional permissions settings:
Grant IBM i user profiles permissions to access PHP when using Basic Authentication
Note: Access validation through IBMi OS user profiles is the simplest and under certain circumstances, least secure way to restrict access to your data. While acceptable in non-critical environments, we do not recommend this kind of authentication alone on public networks such as the Internet, where its simple Base64 encoding and the use of actual user profiles and passwords can compromise the security of your system.
A good choice for protecting your data is to use data encryption with SSL and TLS.
The easiest way to manage the IBM HTTP Apache is through IBM Web Administration for IBMi also known as *ADMIN server running on port 2001. (i5_Server_IP:2001)
IBM HTTP Server (httpd.conf)
#
Listen *:10080
DocumentRoot /www/zendsvr6/htdocs
NameVirtualHost 10.1.1.47:10080
<VirtualHost 10.1.1.47:10080>
ServerName ZendVH.com
DocumentRoot /www/zendsvr6/htdocs
<Directory /www/zendsvr6/htdocs>
Order Allow,Deny
Allow From all
</Directory>
<Location />
ProfileToken On
AuthType Basic
AuthName "IBMi OS User Profile"
Require valid-user
PasswdFile %%SYSTEM%%
order deny,allow
Allow from all
</Location>
</VirtualHost
Result
IBM HTTP Server for IBMi secure connection relaying on the system user profiles feature and a Web Administration forIBMi OS that provides a full function GUI interface for configuring and managing many Web technologies, With IBM HTTP Server for i you can quickly and easily establish a Web presence and get started on the road to working the Web for business.
Related Links:
Comments