Re: Adopted authority with SSL_Init

The same comment applies regarding the ifs: adopted authority doesn't work with ifs objects.

Grant the user at least RX rights to "/QIBM/USERDATA/ICSS/CERT/SERVER/DEFAULT.KDB" or perform a profile swap to a profile that does have rights to it.

-----Original Message-----
From: c400-l-bounces-Zwy7GipZuJhWk0Htik3J/[email protected] [mailto:c400-l-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]] On Behalf Of [email protected]
Sent: Monday, February 10, 2014 12:44 PM
To: [email protected]
Cc: c400-l-Zwy7GipZuJhWk0Htik3J/[email protected]
Subject: Re: [C400-L] Adopted authority with SSL_Init

Mark,

Thanks for the quick reply.

 

Please disregard C vs CL comparison statement in the previous email. 

The problem seems to be specific with SSL_Init call.

The following code works when called by a user with *ALLOBJ special
authority:

  memset((char *)&sslinit2, 0x00, sizeof(sslinit2));

  sslinit2.keyringFileName = "/QIBM/USERDATA/ICSS/CERT/SERVER/DEFAULT.KDB";

  sslinit2.keyringPassword = NULL;

  sslinit2.cipherSuiteList = NULL;

  sslinit2.cipherSuiteListLen = 0;

 rc = SSL_Init(&sslinit2);

 

But it doesn't work when a user with no special authority runs the code from a program set as User = *OWNER.

 

Thanks

Boris.

 

From: Mark S Waterbury [mailto:[email protected]]
Sent: Monday, February 10, 2014 1:55 PM
To: [email protected]
Subject: Re: [C400-L] Adopted authority [PRIVATE REPLY]
Importance: High

 

Boris:
    >>>---> private reply off-list <---<<<

How do you know that "the C program doesn't get the owner's *ALLOBJ authority."?

What exactly are you trying to do in this C program that needs this authority?  Can you give an example, or provide some sample code?  Perhaps you can "cut and paste" some code from that C program? -- you can change any object names etc. in the source code so as not to reveal disclose any confidential information, etc.)

The more you can tell me about what you are trying to do and why, the better I may be able to advise you on how to proceed.

Hope that helps,

Mark S. Waterbury

> On 2/10/2014 1:38 PM, [email protected] wrote:

Is there anything specific to defining a C program adopted authority?
I have a C program with User = *OWNER. A user with no special authority calls the C program but the C program doesn't get the owner's *ALLOBJ authority. I have a similar CL program set to the same User = *OWNER and does get the owner's authority. 
 
Thanks
Boris.
 

 

--
This is the Bare Metal Programming IBM i (AS/400 and iSeries) (C400-L) mailing list To post a message email: C400-L-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/c400-l
or email: C400-L-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives at http://archive.midrange.com/c400-l.

-- 
This is the Bare Metal Programming IBM i (AS/400 and iSeries) (C400-L) mailing list
To post a message email: C400-L-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/c400-l
or email: C400-L-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/c400-l.