Hi,

I have a html page, test.htm, with a link in it that points to a fex,test.fex
When test.htm opens up, it asks for login/pwd authentication which is being done against a RACF database on MVS.
test.htm resides on the webfocus client, on the webserver. test.fex resides on the reporting server - both on z/os

test.htm is protected and has a protect directive in httpd.conf file and therefore when it is opened, it requires login/pwd authentication.

httpd.conf file looks like this:

ServerRoot /xx/yy10.name.com/...
Port 1111 #

Protection RACF_Logon {
ServerId RACF_PROTECT
UserID %%CLIENT%%
PasswdFile %%zzz%%%
Authtype Basic
Mask All
ACLOverride Off
}

Protect /xx/* RACF_Logon %%CLIENT%% #


I am unable to determine how to capture the userid and pass it to the fex.


Thanks.

This message has been edited. Last edited by: Kerry,

go to your webfocus admin console
look at diagnostics
and then at http request info
and see what varibles you're seeing passed.
then ask whoever is in charge of whatever sec pkg your site uses and ask what to expect. (eg. site minder using active directory, etc etc)

I have this in my site.wfs on the webfocus client.

IBI_REPORT_USER = &REMOTE_USER
IBI_REPORT_USER (pass)

This is returning EDASQL10 instead of the user_id.

Any ideas?

Have you enabled IWA on your windows server?
(integrated windows authentication)
that's what creates the &REMOTE_USER

Hi Susannah,
How would i turn IWA on?
I am using IBM webserver and Websphere. Would i still need to enable IWA?

Thanks!

that's an IIS thing...
don't know about websphere

Would it be possible for you to do the following:

1) Go to your test page and authenticate.

2) Go to the following web page on your WebFOCUS Client:
/ibi_apps/wfsysinf.jsp

It is typical for the userid to be passed in REMOTE_USER, I believe even in RACF. As a result its kind of odd you're getting that other userid if that is not what you're authenticating with.

Where are you seeing the userid EDASQL10?

Are you seeing that if you run a report:
-TYPE &REMOTE_USER

1. I logged into my home page with my logon credentials and then went to the http://xxx.abc.com:1111/ibi_apps/wfsysinf.jsp page and i see that REMOTE_USER is showing as null.

2. I have the following in my site.wfs file

IBI_REPORT_USER = &REMOTE_USER                        
<SET> IBI_REPORT_USER (pass)  

and in my edasprod.prf file i have this

-SET &&USERID=CNCTUSR('A30');

and then in my report when I do
-TYPE &&USER_ID I am seeing EDASQL10

in the site.wfs file, instead of REMOTE_USER, If I use HTTP_HOST, SERVER_NAME, REMOTE_HOST, REMOTE_ADDRESS,SERVER_SOFTWARE - all these information are coming through except REMOTE_USER.

Does the userid you are using to log in show as any variable on the wfsysinf.jsp page?

If not, then it seems your web server is not
passing the userid.

quote:

EDASQL10

I am not sure if this will answer your question but at least it is a start. Check the IBI website and documentation for techniques.

http://techsupport.information...om/sps/20242025.html - Automatically authenticate Logon

Also I wasn't sure if you were trying to use a generic ID or use an individual ID and password.

Remember &&UserId is Global, &UserId is Local variable. Hope this helps somewhat.

dlogan,
I too feel that the webserver is not passing the userid. Any other way I can verify this?

Rhonda,
I am doing the same thing. trying to set REMOTE_USER in IBI_REPORT_USER (instead of a hard coded id). The REMOTE_USER is not coming through.That's the problem.

The wfsysinf.jsp page will reflect back all HTTP Header variables that are set.

As a result if you're not seeing the userid in there, then its not being passed by the Reporting Server.

An HTTP Header variable is pretty much the only way that a web server has to pass a variable like that. It can theoretically pass a session variable, but this is not really standard.

So, does the webserver neeed to be configured to pass the REMOTE_USER variable?

If you want the userid to be available, the web server needs to be configured to pass the userid.

The standard field to pass it in is REMOTE_USER, but you can get at the variable in any variable its passed to.