We run many reports outside the MRE environment. We have a need to identify who is running what report. Is there a method to get the windows ID so it can be added to the select statement? I tried the GETUSER but this just return SYSTEM. I've been scanning the knowledge base but no success.

Thanks for the help,
Jim

This message has been edited. Last edited by: Kerry,

Jim you want to research "IWA", integrated windows authentication, and the &REMOTE_USER variable. Its something you enable on your wintel server, and edit your site.wfs to pass to you.(i think its the site.wfs, i may be mis-remembering)

At summit 2k7 the then-security guy, Jim Thorstad, gave a talk/lab on windows authentication, and you can get that handout from ibi.

The snippet of code below will give you the user id which the person connects to the WF reporting server with -- I think this will give you the user id you are trying to obtain.

 
-SET &UID = CNCTUSR('A8');

Jim susannah is absolutely correct. What you have available to you in a windows server environment is totally dependant on the security mechanisms that you have enforced on
your HTTP server and or application server depending on whether you are using an HTTP/app server configuration i.e. Apache or IIS and tomcat or a standalone installation using an app server only, and also what on what security method you are using on the WebFocus server, i.e. OPSYS, DBMS, PTH or LDAP.

IWA only works if you are using IIS as part of your installation and only if you have Allow Anonymous disabled.

REMOTE_USER also only works if allow Anonymous is disabled.

As susannah says you need to export what ever variable you use REMOTE_USER or IBIC_user via site.wfs for it to be available as a variable in the WebFocus session.

All the information required can be found in the security documentation DN4500790.1208
which can be downloaded from IBs doc library.

Using GETUSER( and CNCTUSER( only work providing you have sorted out the HTTP/App server and the WebFocus server security.

in the site.wfs and/or ibicommand.wfs you could add this in the file:

REMOTE_USER=&WF_REMOTE_USER
REMOTE_USER(PASS)

quote:

ibicommand.wfs

Not for a long time. The only .wfs script file that should be modified by
anything other than the system is site.wfs, and that should be done via
the administration console otherwise it requires a restart of your WebFOCUS
server and your http and application servers.

john,
are you saying that edits to the site.wfs
via the console does NOT require a restart of anything?

susannah, that is correct. If you edit the site.wfs thru the WebFOCUS Administrator Console (Configure, Custom Settings) when to save it the web application picks up the new settings without having to restart anything. But be careful as such if you put something wrong in there you could cause a problem and not be able to relogin to the console. Speaking from experiance. then you have to restart things after fixing the site.wfs file.