Question

How is crossover access functioning ?

Answer

An FTP user signs on to his system with e.g.user name FTPGUEST and password FTP2004.

User FTPGUEST does not exist within OS/400. The final user will be defined within PCSACC/400.

A crossover access allows an FTP server access to your iSeries without having the FTP user to know the password of an OS/400 user profile.

In contrary to Anonymous access with an eMail address, the crossover access is based on a password for an IP address.

As the FTP user does not know the password of FTP, he will not be able to misuse the connection for TELNET. Even trying will not be successful as FTP does not have a password.

User FTPGUEST only is defined within PCSACC/400. No user profile exists within OS/400.

User FTP must have a user profile within OS/400, the password should be *NONE and it should be enabled. FTP has to be defined with its access authorities within PCSACC/400.

Which steps need to be performed in order to use OS/400 user FTP, the FTP user for crossover access is FTPGUEST and password FTP2004 shall be valid for IP address 172.16.1.27.

1. Step

User profile FTP will be created within OS/400 without password.

 back to top

2. Step

command key F9 = New user, the display for: 'Adding new user' will be called.

 back to top

Name FTPGAST, description and record type 6 = *CROSS are being entered.

 back to top

 back to top

Then scroll to the third page. The field for IP access control already is set to value 2.

With the new record type 6 = *CROSS, the program identifies the desired CROSSOVER functionality. Controlling of the IP address is mandatory, Therefore, the field is already set to value 2 and can not be changed anymore.

Value 3 as with PCSACC/400 V3R2M08 is no longer required. The user will be added with F9.

 back to top

3. Step

The maintenance program for IP addresses can be called via option I.

 back to top

On the 3rd user page, IP address maintenance can be called via the IP button.

 back to top

The format: Adding of IP addresses can be called via command key F9.

 back to top

 back to top

IP address, password of user FTPGUEST and the OS/400 target user profile FTP can be specified and added via F9.

Following IP addresses are valid.

172.16.1.4
172.16.1.*
172.16.*.*
172.*.*.*
*.*.*.*

A weekly calender (http://www.pcsacc400.com/First/Q011.htm) can be specified in the IP address record.

 back to top

4. Step

Signon is being performed with FTPGUEST and password FTP2004. The FTP user is now signed on within OS/400 although user profile FTP does not have a password.

 back to top