RE: [EXTERNAL] Re: AS400 Object

We are not creating new profiles with the generic user/pass

We have a web application where the user logins with their own as/400 userid and password.
We use the AS400 object created with the generic profile to validate the business user profile trying to login to the application , another use case is invoking an RPG program from Java where we need an AS400 object to make the program call.

Dilip Nair

Director, IT
[cid:[email protected]]
Phone: 631-777-5234
Cell    : 631-433-7907

From: JAVA400-L <[email protected]> On Behalf Of Jim Oberholtzer
Sent: Tuesday, August 20, 2024 10:43 AM
To: Java Programming on and around the IBM i <[email protected]>
Subject: Re: [EXTERNAL] Re: AS400 Object

Maybe I'm dense (probably so) but if the user calling this function has an IBM i profile and is creating a new one, then the user calling the function should be able to provide a valid password the API could validate. The Java Project as I quickly
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
ZjQcmQRYFpfptBannerEnd

Maybe I'm dense (probably so) but if the user calling this function has an

IBM i profile and is creating a new one, then the user calling the function

should be able to provide a valid password the API could validate.  The

Java Project as I quickly looked at it, stores and retrieves environment

variables.  Cool, yes, but to store a password that enables one to create

other user profiles, I wonder about the wisdom of that .



--

Jim Oberholtzer

Chief Technical Architect

Agile Technology Architects





On Tue, Aug 20, 2024 at 9:29 AM Jack Woehr via JAVA400-L <

[email protected]<mailto:[email protected]>> wrote:



> Check out the dotenv-java project https://urldefense.com/v3/__https://github.com/cdimascio/dotenv-java__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6rdmspID$<https://urldefense.com/v3/__https:/github.com/cdimascio/dotenv-java__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6rdmspID$>

>

>

> ________________________________

> From: JAVA400-L <[email protected]<mailto:[email protected]>> on behalf of Nair,

> Dilip <[email protected]<mailto:[email protected]>>

> Sent: Tuesday, August 20, 2024 8:24 AM

> To: Java Programming on and around the IBM i <[email protected]

> >

> Subject: RE: [EXTERNAL] Re: AS400 Object

>

> [You don't often get email from [email protected]<mailto:[email protected]>. Learn why

> this is important at https://urldefense.com/v3/__https://aka.ms/LearnAboutSenderIdentification__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6nvA32Xr$<https://urldefense.com/v3/__https:/aka.ms/LearnAboutSenderIdentification__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6nvA32Xr$> ]

>

> CAUTION: This email originated from outside of the organization. Do not

> click links or open attachments unless you recognize the sender and know

> the content is safe.

>

> Thanks for the quick response

>

> We would like to secure the password used to create the AS400 object.

> This is what we do

> AS400  sys = new AS400(system , genericuser ,password)

>

> Sys.validatesignon(username , userpassword)

>

> Password for the creating the sys object is hardcoded and would like to

> take it off the code..

>

> Dilip Nair

> --

> This is the Java Programming on and around the IBM i (JAVA400-L) mailing

> list

> To post a message email: [email protected]<mailto:[email protected]>

> To subscribe, unsubscribe, or change list options,

> visit: https://urldefense.com/v3/__https://lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6sRvBzTj$<https://urldefense.com/v3/__https:/lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6sRvBzTj$>

> or email: [email protected]<mailto:[email protected]>

> Before posting, please take a moment to review the archives

> at https://urldefense.com/v3/__https://archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6vx_lv9Y$<https://urldefense.com/v3/__https:/archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6vx_lv9Y$>.

>

--

This is the Java Programming on and around the IBM i (JAVA400-L) mailing list

To post a message email: [email protected]<mailto:[email protected]>

To subscribe, unsubscribe, or change list options,

visit: https://urldefense.com/v3/__https://lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6sRvBzTj$<https://urldefense.com/v3/__https:/lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6sRvBzTj$>

or email: [email protected]<mailto:[email protected]>

Before posting, please take a moment to review the archives

at https://urldefense.com/v3/__https://archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6vx_lv9Y$<https://urldefense.com/v3/__https:/archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!eEMUUdiHJv31l9Q12xc_I0eOYjsi_uNRH6FlH-0e8e7-4FB2vDrUT2yRb0POk4H4q8nhaYHwuVZV6CuB9-Fm6vx_lv9Y$>.

Please consider the environment before printing this email.

E-mail messages may contain viruses, worms, or other malicious code. By reading the message and opening any attachments, the recipient accepts full responsibility for taking protective action against such code. Henry Schein is not liable for any loss or damage arising from this message.

The information in this email is confidential and may be legally privileged. It is intended solely for the addressee(s). Access to this e-mail by anyone else is unauthorized.
-- 
This is the Java Programming on and around the IBM i (JAVA400-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/java400-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/java400-l.