Re: iSeries & Active Directory

Thanks Jim.

You've also mentioned "IBM i has a built in kerberos  server if you choose
to use it (almost no one does)".  Any idea why?  Is it becuase of security
risk, system resources (may be it require a dedicated system i...), or...?




"Jim Oberholtzer" <midrangel@xxxxxxxxxx> wrote in message
news:mailman.31604.1299000172.2702.midrange-l@xxxxxxxxxxxx...

EIM -  Entity Identity Mapper
SSO - Single Sign on

Once you enable SSO on your machine you will have single sign on from
which ever kerberos server you choose.  Most use Active Directory.

It is available and works at V5R4

So the answer to your question is yes.

Jim Oberholtzer
CEO/Chief Technical Architect
Agile Technology Architects, LLC


On 3/1/2011 10:48 AM, hockchai Lim wrote:

Not familiar with EIM/SSO at all, so forgive me...

Note: We have iseries under V5R4 OS.

So can I set out iseries up to use MS window login to gain EIM ID and
then
no longer need to provide user ID and password when using client access
to
logon to iseries?



"Jim Oberholtzer"<midrangel@xxxxxxxxxx>  wrote in message
news:mailman.31590.1298995638.2702.midrange-l@xxxxxxxxxxxx...

 If you are referring to IBM i, no it is all built in.  If you are
 referring to Active Directory and other associated tools, you buy
those
 from the OEM vendor of choice.

 IBM i has a built in kerberos  server if you choose to use it (almost
no
 one does) so your cost could be zero assuming you already have IBM i.

 Jim Oberholtzer
 CEO/Chief Technical Architect
 Agile Technology Architects, LLC


 On 3/1/2011 9:33 AM, hockchai Lim wrote:

 One does need to pay for EIM and SSO products, right?


 <GKern@xxxxxxxxxxxxxxxx>   wrote in message
 news:mailman.31458.1298927019.2702.midrange-l@xxxxxxxxxxxx...

 >    We consulted with Patrick Botz who helped us set up EIM and
SSO.
 >
 >    He was very helpful and knowledgeable, and reasonably
priced.
 >
 >    Regards, Jerry
 >
 >    Gerald Kern - Information Technology
 >    Programming Supervisor
 >    IBM Certified RPG IV Developer
 >    Lotus Notes/Domino 8.0.1 Administrator
 >    The Toledo Clinic, Inc.
 >    4235 Secor Road
 >    Toledo, OH 43623
 >    Phone 419-479-5535
 >    gkern@xxxxxxxxxxxxxxxx
 >

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.