RE: Windows 2K3 Active Directory using AS400 DNS

It has nothing to do with EIM.  EIM is just a mapping of user identities in
different registries.  It also has nothing to do with Kerberos as it is just
used for authentication.  When you create a Windows Domain in needs to
publish services that Windows is able to provide in SRV records in DNS. 

This is the set of steps to enable dynamic updates (from Infocenter)

DNS indicates that a zone is dynamic when objects are defined in the
allow-update statement. To configure the allow-update option, follow these
steps: 

1) In iSeries Navigator, expand your iSeries server --> Network --> Servers
--> DNS. 
2) In the right pane, right-click your DNS server and select Configuration. 
3) In the DNS Configuration window, expand Forward Lookup Zone or Reverse
Lookup Zone. 
4) Right-click the primary zone you want to edit and select Properties. 
5) In the Primary Zone Properties page, click the Options tab. 
6) On the Options page, expand Access Control --> allow-update. 
7) DNS uses an address match list to verify authorized updates. To add an
object to the address match list, select an address match list element type
and click Add... You can add an IP Address, IP Prefix, Access Control List,
or Key. 
8) When you have finished updating the address match list, click OK to close
the Options page.

Kurt

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rich.Frye@xxxxxxxxx
Sent: Monday, February 28, 2005 3:48 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Windows 2K3 Active Directory using AS400 DNS

Greetings all, 

I have setup an IXS with Windoze 2003 Active Directory. (Something that I 
have to do).  I have enabled Dynamic DNS on my 400 and allow it to perform 
incremental to the Active Directory secondary DNS server.

The problem that I have is when I attempt to add another server / new 
workstation to the Active Directory, I receive an error message that the 
Domain Controller is not available.  The help states that the SRV record 
is not in DNS.

>From the research that I have done, I need to setup Kerberos on the 400 
and set the KDC server on Windoze. 

Has anyone had any issues like this before?  How did you get DDNS on the 
400 to work with Microcrap, through EIM?

Thanks in advance, 
Richard A. Frye
Software Consulting Hardware, Inc.
(877) 936-9829 (Office)
(513) 936-0128 (Fax)
Rich.Frye@xxxxxxxxx
IBM Certified System Administrator - Lotus Notes and Domino 6/6.5
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.