WEBPUBLOG (JANUS DEFINE parameter): Difference between revisions

From m204wiki
Jump to navigation Jump to search
mNo edit summary
mNo edit summary
Line 1: Line 1:
{{DISPLAYTITLE:WEBPUBLOG}}
<span class="pageSubtitle"><section begin="desc" />Forces 'real' login for public URLs.<section end="desc" /></span>
<span class="pageSubtitle"><section begin="desc" />Forces 'real' login for public URLs.<section end="desc" /></span>


WEBPUBLOG is a parameter on [[JANUS DEFINE]], which defines and sets characteristics of a Janus port. See the [[JANUS DEFINE#parmlist|List of JANUS DEFINE parameters]].
<var>WEBPUBLOG</var> is a parameter on [[JANUS DEFINE]], which defines and sets characteristics of a Janus port. See the [[JANUS DEFINE#parmlist|List of JANUS DEFINE parameters]].


This parameter indicates that a "real" login should be done for the WEBUSER userid for public URLs. The "real" login will be a trusted login so passwords will not be required from end-users, but the WEBUSER userid '''must''' be defined in CCASTAT or to the external authorizer (RACF, ACF2 or Top Secret) if WEBPUBLOG is specified for a port. If WEBPUBLOG is '''not''' specified, the WEBUSER userid will be logged on for public URLs whether or not it is defined in CCASTAT or to an external authorizer, and it will be given UPRIV 0 (default user privileges).  
This parameter indicates that a "real" login should be done for the WEBUSER userid for public URLs. The "real" login will be a trusted login so passwords will not be required from end-users, but the WEBUSER userid '''must''' be defined in CCASTAT or to the external authorizer (RACF, ACF2 or Top Secret) if <var>WEBPUBLOG</var> is specified for a port. If <var>WEBPUBLOG</var> is '''not''' specified, the WEBUSER userid will be logged on for public URLs whether or not it is defined in CCASTAT or to an external authorizer, and it will be given UPRIV 0 (default user privileges).  


WEBPUBLOG can be used if even public logins should be logged by an external authorizer (as a matter of policy), or if non-standard privileges are to be assigned to the public user. Use caution if assigning any privileges to the WEBUSER userid, since this can be a potential security exposure. WEBPUBLOG might also be used to take advantage of the improved monitoring and auditing capabilities made possible by the <var>[[WEBLOGHOLD (JANUS DEFINE parameter)|WEBLOGHOLD]]</var> parameter.  
<var>WEBPUBLOG</var> can be used if even public logins should be logged by an external authorizer (as a matter of policy), or if non-standard privileges are to be assigned to the public user. Use caution if assigning any privileges to the WEBUSER userid, since this can be a potential security exposure. <var>WEBPUBLOG</var> might also be used to take advantage of the improved monitoring and auditing capabilities made possible by the <var>[[WEBLOGHOLD (JANUS DEFINE parameter)|WEBLOGHOLD]]</var> parameter.  


<var>[[WEBPL (JANUS DEFINE parameter)|WEBPL]]</var> is a synonym for WEBPUBLOG.  
<var>[[WEBPL (JANUS DEFINE parameter)|WEBPL]]</var> is a synonym for <var>WEBPUBLOG</var>.  


Valid only for WEBSERV ports.
Valid only for WEBSERV ports.

Revision as of 21:17, 28 February 2012

<section begin="desc" />Forces 'real' login for public URLs.<section end="desc" />

WEBPUBLOG is a parameter on JANUS DEFINE, which defines and sets characteristics of a Janus port. See the List of JANUS DEFINE parameters.

This parameter indicates that a "real" login should be done for the WEBUSER userid for public URLs. The "real" login will be a trusted login so passwords will not be required from end-users, but the WEBUSER userid must be defined in CCASTAT or to the external authorizer (RACF, ACF2 or Top Secret) if WEBPUBLOG is specified for a port. If WEBPUBLOG is not specified, the WEBUSER userid will be logged on for public URLs whether or not it is defined in CCASTAT or to an external authorizer, and it will be given UPRIV 0 (default user privileges).

WEBPUBLOG can be used if even public logins should be logged by an external authorizer (as a matter of policy), or if non-standard privileges are to be assigned to the public user. Use caution if assigning any privileges to the WEBUSER userid, since this can be a potential security exposure. WEBPUBLOG might also be used to take advantage of the improved monitoring and auditing capabilities made possible by the WEBLOGHOLD parameter.

WEBPL is a synonym for WEBPUBLOG.

Valid only for WEBSERV ports.

References

See: List of Janus commands | List of JANUS DEFINE parameters.