Server logon exit point

This exit point allows server access based on the originating session's address. It also allows you to specify an initial working directory that is different from those that are in the user profile.

When you add an exit program to the exit point, the server calls the logon exit program each time a user attempts to log on. The exit program sets the return code output parameter to indicate whether the server will continue the logon operation. Alternate return code settings are available for processing the logon, and initializing directory information.

The iSeries™ exit point for FTP server logon is:

QIBM_QTMF_SVR_LOGON

These are the three exit point formats available:

• The TCPL0100 exit point format allows this basic logon control:
  • Ability to accept or reject a logon
  • Control of the user profile, password, and current library
• The TCPL0200 exit point format provides additional parameters to control the logon process, including:
  • Ability to set the working directory to any directory on the system.
  • Ability to return application-specific information
  • Ability to control encryption of FTP data sent to and received from the FTP client.
• The TCPL0300 exit point format extends the TCPL0200 format, so you can use i5/OS™ enhanced password support and the additional parameters to enable CCSID processing for password and directory name fields. In addition, when the user for the session has been authenticated with a client certificate, the exit program receives the client certificate.

Server logon exit program for anonymous FTP

For anonymous FTP, write the server logon program to perform the following functions:

• Accept logons from user ID ANONYMOUS
• Request an e-mail address as a password. It is customary to require a 'valid e-mail address' for the password. The term is misleading because the exit program only verifies if there is an '@' symbol in the middle of a string of alphanumeric characters. That too is customary. This is why it is important to log the user's IP address.
• Check for the @ symbol in the password string.
• Force ANONYMOUS users to your public access library only. See return code 3 of parameter 8 for TCPL0200 Format).

What your program should include:

• Exception handling
• Debugging
• Logging
  • Log the IP address and e-mail address (sent as a password) of the FTP requester.

Is there an exit program time-out feature?

There is no time-out for FTP exit programs. If the exit program has an error or exception that it cannot handle, the FTP server will abort the session.

QTCP needs authority

When the application calls the FTP server logon exit program, the FTP server job is running under the QTCP user profile.

Make sure that QTCP has sufficient authority to access and write to any log files or other satellite files associated with the exit programs.

Example programs

Example programs are available to help you set up anonymous FTP on your server. These examples are for illustration purposes. They do not contain enough features to run on a production machine as is. You can use these samples as a starting point to build your own programs. By copying portions of the code from the samples, you can add them to programs that you write yourself. It is recommended that you run the sample programs on a system other than your production system.