IBMi Apache HTTP - Server Authentication using IBMi user profiles

Follow

Overview

IBM HTTP Server for IBMi includes the IBM HTTP Server (powered by Apache).

The IBM HTTP Server for IBMi includes a rich collection of enhancements and features for a secure connection and a rich set of security features and services that pertain to the goals of authentication, authorization, integrity, confidentiality, and auditing.

 

Instructions

Authentication using IBMi OS user profiles

IBMi OS user profiles can be used for authentication. The advantage of this implementation is that is does not require you to perform additional configuration steps or to maintain a separate user database.
User profiles with limited capabilities and no sign on access, and *SECOFR class users (although this practice is highly discouraged), can be used for this purpose.  Users with limited capabilities may require additional permissions settings:

Grant IBM i user profiles permissions to access PHP when using Basic Authentication

Note: Access validation through IBMi OS user profiles is the simplest and under certain circumstances, least secure way to restrict access to your data. While acceptable in non-critical environments, we do not recommend this kind of authentication alone on public networks such as the Internet, where its simple Base64 encoding and the use of actual user profiles and passwords can compromise the security of your system.
A good choice for protecting your data is to use data encryption with SSL and TLS.

The easiest way to manage the IBM HTTP Apache is through IBM Web Administration for IBMi also known as *ADMIN server running on port 2001. (i5_Server_IP:2001)

 


IBM HTTP Server (httpd.conf)
#
Listen *:10080
DocumentRoot /www/zendsvr6/htdocs

NameVirtualHost 10.1.1.47:10080
<VirtualHost 10.1.1.47:10080>
   ServerName ZendVH.com
   DocumentRoot /www/zendsvr6/htdocs
  <Directory /www/zendsvr6/htdocs>
      Order Allow,Deny
      Allow From all
 </Directory>
<Location />
ProfileToken On
AuthType Basic
AuthName "IBMi OS User Profile"
Require valid-user
PasswdFile %%SYSTEM%%
order deny,allow
Allow from all
</Location>
</VirtualHost

 

Result

IBM HTTP Server for IBMi secure connection relaying on the system user profiles feature and a Web Administration forIBMi OS that provides a full function GUI interface for configuring and managing many Web technologies, With IBM HTTP Server for i you can quickly and easily establish a Web presence and get started on the road to working the Web for business.

 

Related Links:

IBM® HTTP Server for iSeries™

Have more questions? Submit a request

Comments

Powered by Zendesk