Authentication User Storage


You have two choices to make when you are setting up authentication: what kind of file to store users in and the user password storage mode.

What Kind of File to Store Users In

You can choose to store users in database files or stream files. This choice can be made separately for each user file (e.g. you can have one user stream file and one user database file for the same server). Remember that if performance is a concern, you can protect one area (or set of areas) with a stream file while protecting another area (or areas) with a database file. You choose the type of file to store users in with the Authentication User File configuration value. To migrate stream files into database files, you can use the MIGWWWUSR command.

User Password Storage Mode

The way that user passwords are stored (for authentication only, not for Webulator/400) changed starting with Web Server/400 version 1.3. The Web Server can be configured to use either the new mode or the old mode (for backward compatibility). The new mode is called Normalized while the old mode is called Compatible. This mode is set through the Authentication Password Storage configuration value. If this value is not present (as it will not be in cases where an older server has been upgraded but are using the same configuration files), the default mode will be Compatible. When a new server is installed, the configuration files that are installed with it will specify Normalized mode.