Re: password synch

David if it is password synch that you truly want - we are the developers of 
such a product.   As others have mentioned SSO with EIM is one way to go (in 
fact we also have utilities to populate EIM) but it depends whether the current 
scope of EIM may not address all of platforms and applications you need better 
password processing on.

We have a solution which is purely OS/400 based (part of our DetectIT Security 
Suite) and we also have an enterprise (multi platform) version called AxcessIT. 
 If you are interested in either you can find out more at:

http://www.safestone.com/products/axcessit_password_manager_overview.php

and

http://www.safestone.com/solutions/password_pain_relief.php


Regards 

Martin A Norman 
Technical Services
Safestone Technologies 
mnorman@xxxxxxxxxxxxxxxx 
1-800-558-3544 

Safestone: a new simplicity

This email and/or attachments are privileged and confidential and intended 
solely for the addressee. If you are not the intended recipient, please notify 
us immediately. Disclosure, distribution or copying of this email other than by 
the addressee is strictly prohibited. The company does not warrant that the 
information is free of a virus or any other defect that may affect the 
recipient's computer system and it is your responsibility to scan attachments 
(if any).

------------------------------
message: 6
date: Wed, 1 Mar 2006 10:03:27 -0500
from: "David Charmatz" <dncfriedmans@xxxxxxxxx>
subject: password synch
I read some archive posts and didn't really see any reponses to this....
We currently have an LPARed V5R3 system. The problem is the overhead keeping 
users and their password synched up. Which leads me into the following 
question: We are setting up a HATS application to use a web browser for users 
to access the 400. We have set up a single partition to act as the host and are 
using a pass through (menu option) to the other partitions. The problem here is 
that the user has to enter their password on the intial login to the the host 
server, and then again to the production server. In a perfect environment, 
users passwords would be synched up from the initial setup, however, this isn't 
a per4fect environment. Is there anyway to keep base 400 user profiles syched 
up between partitions without manual intervention? My initial thought on this 
would be to use a single login environment using kerberos to synch up the 
passwords. Has anyone attempted this?
On a similar note, we have shared drives setup on our 400 which end users use 
to upload files. The problem here is that in order to access these shared 
drives, client access requires (at least on our system) the Windows user name 
and password to be identical to the AS400 user name and passowrd which also 
creates a lot of overhead each times a user is required to switch either their 
AS400 or Windows password. Assuming I don't setup a single login enviroment, is 
there anyway around this?
Thanks,
David Charmatz

------------------------------