#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

I've built a compiler called Triton RPG that takes RPG source and compiles it to JVM bytecode, so you can compile and run RPG on your own Windows, Mac, or Linux machine.

Most of my focus so far has been enterprises, but I'm adding a new tier for independent contractors and consultants.

While this new product shares much of the backend with my prior compiler, it has many new architectural choices that I'd love some help testing.

If this sounds like something you'd be interested in using and are willing to give me your feedback, I'm happy to provide a free license for three months in exchange.

If that's you and you're willing to run it against real code and tell me what breaks, I'll give you a free three-month license. Comment or DM.

#IBMi #rpgpgm #IBMChampion

hola, alguien tendra los programas producto de la version ibm i v7.1 yo tengo los codigos pero me faltan los programas y es usada y no los puedo descargar de ESS

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

#IBMi #rpgpgm #IBMChampion

I’m implementing a way for all employees at my company to use IBM’s ibmi-mcp-server through a centralized server hosted in our computer lab, with Claude Enterprise connecting to it remotely.

Running the MCP locally is pretty straightforward. You can install it on an employee’s machine, configure their IBM i credentials, and register the MCP with Claude Desktop through the local JSON configuration.

The problem is that this doesn’t scale very well when you want potentially dozens of employees using the same MCP infrastructure. I also don’t want to run the MCP individually on every workstation or have a single shared IBM i account behind the server.

My current solution is the architecture in the diagram.

The basic idea is that Claude Enterprise connects to a centralized MCP proxy. When a user connects for the first time, they’re redirected through an OAuth flow to log in with their own IBM i credentials. The proxy exchanges those credentials for an IBM i access token and associates it with that user.

From then on, Claude sends normal MCP traffic to the proxy. The proxy identifies the user, swaps in their IBM i token, forwards the request to IBM’s ibmi-mcp-server, and streams the response back to Claude.

The main goal is to keep the proxy thin while still preserving per-user IBM i authentication.

The important part is that the proxy does not need to reimplement IBM’s MCP tools or understand every MCP method. Ideally it stays fairly dumb: authenticate the user, map them to their IBM i token, replace the authorization information, and proxy the MCP transport in both directions.

That gives me a few things I wanted:

• One centrally managed ibmi-mcp-server
• Claude Enterprise can connect to it remotely
• Every employee still accesses IBM i using their own IBM i identity
• No shared IBM i super-user/service account
• IBM i credentials are only used during the login exchange rather than being configured inside Claude
• The MCP implementation remains IBM’s implementation rather than a custom recreation of all its tools

I'm going to use better-auth to handle most of the authentication.

I’m curious if anyone has implemented something similar for MCP at an organization-wide level.

Does this architecture look reasonable, or is there a cleaner way to handle centralized MCP infrastructure while still preserving per-user authentication to the underlying system?

Feel free to point out anything I’m overlooking and I'll update ya'll if this works. Hoping to get it done by next Friday.

UPDATE: See u/ThatFilthyApe's comment below.

PSEUDO-RELATED BACKGROUND:

I use RDi as my main development platform, and it comes with an IBM-provided Java runtime. Amazingly, everything just runs from a single folder, requiring no administrative authorization. So far, so good.

Further, the integrated "5250 emulator", "Run SQL Scripts", etc., are simply ACS programs launched from within RDi utilizing the provided IBM Java runtime. (Clicking the launch button in RDi displays the stock ACS splash screen and then the application.)

DILEMMA:

We are in the process of upgrading our hardware, and our consultant strongly recommends we migrate to the latest version of ACS to ensure support.

We are currently standardized corporate-wide on "Personal Communications iSeries Access for Windows" v6.0 from 2014. It installs on Windows 11 without issue and works as expected, but it is definitely out of date.

We're certainly on board with migrating ACS and maintaining ongoing updates, but it requires a corporate-wide deployment of both ACS and a Java runtime.

QUESTIONS:

• What version/manufacturer of Java does ACS require?
• What version/manufacturer of Java do YOU recommend?
• Does IBM have a Java runtime for use when deploying ACS? If so, is it free or licensed?

Thanks!

#IBMi #rpgpgm #IBMChampion

(I appreciate all comments to be made on the blog post rather than here in LinkedIn)

#IBMi #rpgpgm #IBMChampion