Re: Adopted authority with SSL_Init

Mark,

Thanks for the quick reply.

 

Please disregard C vs CL comparison statement in the previous email. 

The problem seems to be specific with SSL_Init call.

The following code works when called by a user with *ALLOBJ special
authority:

  memset((char *)&sslinit2, 0x00, sizeof(sslinit2));

  sslinit2.keyringFileName = "/QIBM/USERDATA/ICSS/CERT/SERVER/DEFAULT.KDB";

  sslinit2.keyringPassword = NULL;

  sslinit2.cipherSuiteList = NULL;

  sslinit2.cipherSuiteListLen = 0;

 rc = SSL_Init(&sslinit2);

 

But it doesn't work when a user with no special authority runs the code from
a program set as User = *OWNER.

 

Thanks

Boris.

 

From: Mark S Waterbury [mailto:[email protected]] 
Sent: Monday, February 10, 2014 1:55 PM
To: [email protected]
Subject: Re: [C400-L] Adopted authority [PRIVATE REPLY]
Importance: High

 

Boris:
    >>>---> private reply off-list <---<<<

How do you know that "the C program doesn't get the owner's *ALLOBJ
authority."?

What exactly are you trying to do in this C program that needs this
authority?  Can you give an example, or provide some sample code?  Perhaps
you can "cut and paste" some code from that C program? -- you can change any
object names etc. in the source code so as not to reveal disclose any
confidential information, etc.)

The more you can tell me about what you are trying to do and why, the better
I may be able to advise you on how to proceed.

Hope that helps,

Mark S. Waterbury

> On 2/10/2014 1:38 PM, [email protected] wrote:

Is there anything specific to defining a C program adopted authority?
I have a C program with User = *OWNER. A user with no special authority
calls the C program but the C program doesn't get the owner's *ALLOBJ
authority. I have a similar CL program set to the same User = *OWNER and
does get the owner's authority. 
 
Thanks
Boris.
 

 

-- 
This is the Bare Metal Programming IBM i (AS/400 and iSeries) (C400-L) mailing list
To post a message email: C400-L-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/c400-l
or email: C400-L-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/c400-l.