Lionel,

I have done a “conversion” of an ISPF App to a Web App (an ISPF App used by 
RACF Admins to Reset Passwords; to make it available to the Help Desk). I did 
it as a USS REXX CGI using HTTPS, so I could secure the authentication; but all 
the permissions needed to be embedded into the CGI Scripts (using Http Server 
configuration and USS File Sticky Bits). Very ugly (and not fun to debug the 
security aspects when things get mangled). All access and activity to the app 
needs to be logged by the App (as the real user is hidden from SAF by the Http 
Server & the  Sticky bits). 

So pretty messy, though in my case it meant I did not have to actually give the 
help desk personal any access beyond the app (because of the USERIDs at the 
shop, required SYSTEM SPECIAL and TSO Access); so it was actually the lesser of 
two evils.

So, unless it is a simple application access wise AND the CGI Scripts are 
relatively simple (you will need to re-write everything in CGI, PHP, or 
Java)that the ISPF App does); I would suggest using the zOSMF interface into 
ISPF. One version of the application, one version of the SAF rules, and SMF 
based logging make it much simpler and more secure.

That said, if you have something that any TSO/ISPF User would be able to 
access; I have some USS REXX CGIs & HTML Templates I used for the above App to 
get you started. I do not have the Apache httpd server configuration setup 
anymore (that is where you set up the CGI, https requirements, authentication 
process, …). If you want those, email me at the address in my signature and I 
will send you a zip of what I have (it is all ASCII as it is access under USS 
via the Apache httpd server, so no XMITs).

Al

> On 15 July 2020, at 15:52, Lionel B Dyck <[email protected]> wrote:
> 
> The thought is to not present an ISPF panel, which you could do using the
> zOSMF ISPF interface but to make it a true web interface.
> 
> Thx
> 
> 
> Lionel B. Dyck <sdg><
> Website: https://www.lbdsoftware.com
> 
> "Worry more about your character than your reputation.  Character is what
> you are, reputation merely what others think you are." - John Wooden
> 
> ...
> Lionel,
> 
> Isn't there an interface into TSO/ISPF via zOSMF Available w/zOS 2.3+?
> 
> 
>> On 15 July 2020, at 12:00, Lionel B Dyck <[email protected]
> <mailto:[email protected]>> wrote:
>> 
>> Does anyone have any advice on how to enable a current ISPF 
>> application to support a web interface?
>> 
>> 
>> 
>> Specifically:
>> 
>> 
>> 
>> 1.   User authentication
>> 2.   Present a web page similar to the current ISPF panel
>> 3.   Receive input from the web page
>> 4.   Return information to a web page
>> 
>> 
>> 
>> Thanks in advance
> 
> _______________


Al Ferguson       | mailto:[email protected]
Milwaukee, WI USA |   http://www.neptunescove.org

Dulcius ex Asperis


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to