User profiles and required authorities for HTTP Server

This topic provides information about user profiles and required authorities for the IBM® HTTP Server for i Web server.

The QTMHHTTP user profile is the default user profile of HTTP Server. This user profile is referred to as the server user profile. The server user profile must have read and execute authority to the directory path of the server root directory. If you are using the Create New HTTP Server wizard, the default server root path is /www/server_name/, where server_name is the name of the HTTP Server.

The server user profile must have read, write, and execute authority to the directory path where the log files are stored. If you are using the Create New HTTP Server wizard, the default path is /www/server_name/logs/, where server_name is the name of the HTTP Server. The log files could include any access, script, or rewrite logs. These logs may or may not be configured to be stored in the /www/server_name/logs/ directory. Since log files could potentially contain sensitive information, the security of the configuration and log files should be fully considered. The path of the configuration and log files should only be accessible by the appropriate user profiles.

The QTMHTTP1 user profile is the default user profile that HTTP Server uses when running CGI programs. This user profile must have read and execute authority to the location of any CGI program. User QTMHHTTP requires *RWX (write) authority to directory '/tmp'.

You can optionally specify that the QTMHHTTP or QTMHHTP1 user profile swap to another user profile as long as that user profile has the required authorities. For more information, see UserID.

  • *RX authority for root directory ("/ ") and directory "/www", including all subdirectories in the path
  • *RWX authority for directory "/www/server_name/"
Note: Granting *ALLOBJ authority to any server user profile is not recommended.