# Natural RPC Server and EntireX Security

**URL:** <https://techcommunity.softwareag.com/t/natural-rpc-server-and-entirex-security/59594>\
**Category:** Forum\
**Tags:** Mainframe-Integration, EntireX\
**Created:** [February 20, 2006, 4:45pm UTC](https://techcommunity.softwareag.com/t/natural-rpc-server-and-entirex-security/59594 "2006-02-20T16:45:59Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![David\_Sanders](https://avatars.discourse-cdn.com/v4/letter/d/2bfe46/32.png) [@David\_Sanders](https://techcommunity.softwareag.com/u/David_Sanders)\
**Post date:** [February 20, 2006, 4:45pm UTC](https://techcommunity.softwareag.com/t/natural-rpc-server-and-entirex-security/59594/1 "2006-02-20T16:45:59Z")

</div>

I need some advice on configuring a Natural RPC Server to run with EntireX security. My Server fails to register with Broker as I have not supplied the correct credentials. Here is an extract from the Broker log file:

W01/USRSEC 2006-02-20 10:58:22.879 ETBD0286 Diagnostic Values:  
Stubs say no password was supplied  
W01/SECLOGN 2006-02-20 10:58:22.879 ETBE0146 Access denied by Security Facility  
W01/SECLOGN 2006-02-20 10:58:22.879 ETBD0296 Additional information:  
User ID… ukds  
Token…  
Physical Uid… 20205043554B44532D2D30303030303935382D2D3030303031334334  
Error code … 0x0000015E  
Error text … Bad UserID detected, access denied

The only place I can find to set a user id id is SRVUSER in Natparms and any value I try seems to fail. Is this correct or does it have to be set elsewhere? How is the password passed to Broker?

I am also unclear about how Broker maintains a list of valid users?

Thanks in advance,  
David Sanders

---

<div class="post-metadata">

**Author:** ![Douglas\_Kelly](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/douglas_kelly/32/102_2.png) [@Douglas\_Kelly](https://techcommunity.softwareag.com/u/Douglas_Kelly)\
**Post date:** [February 21, 2006, 7:21pm UTC](https://techcommunity.softwareag.com/t/natural-rpc-server-and-entirex-security/59594/2 "2006-02-21T19:21:08Z")

</div>

1. Broker contacts the local security environment where Broker is running for authentication. On the mainframe, this is typically RACF or ACF2 that authenticates the userid/password. On Windows, the Windows login is used - either a domain login (domain\user) or a local user account can be used.
2. password can be supplied from the STACK by executing a SYSEXT routine (check the USR107\* and USR207\* routines - I think it is USR2071P). If running on the mainframe, trusted user can be used instead of supplying the password.

---

<div class="post-metadata">

**Author:** ![David\_Sanders](https://avatars.discourse-cdn.com/v4/letter/d/2bfe46/32.png) [@David\_Sanders](https://techcommunity.softwareag.com/u/David_Sanders)\
**Post date:** [March 3, 2006, 3:20pm UTC](https://techcommunity.softwareag.com/t/natural-rpc-server-and-entirex-security/59594/3 "2006-03-03T15:20:43Z")

</div>

Hi Douglas,

Thanks for the pointer. User exit USR2072 is the one to use for setting the password for registering a Natural RPC server with Broker. I created a copy in my application library and changed it to use a hardcoded password.

For the record, here is what I had to do elsewhere:

Natparm for Natural RPC Server:

- set SRVUSER to the userid used for logon
- set STARTUP to the password user exit program (USR2071P or customised version)
- set INIT-LIB to SYSEXT (if USR2071P used above)

EntireX Runtime:

- set the exx-use-security and exx-encryption-level for the xmms element in xml-init.xml:  

Client Applications calling web services:

- Add the user id and password to the web service url:  
…?exx-userID=RPCUSER&exx-password=RPC
- This worked with an ASP client and a Natral program using the REQUEST DOCUMENT statement.

There may be better ways of doing this but the above does work.

Regards,  
David Sanders

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [April 2, 2021, 2:39pm UTC](https://techcommunity.softwareag.com/t/natural-rpc-server-and-entirex-security/59594/4 "2021-04-02T14:39:56Z")

</div>


