Hi Rob, why did you change from EIM to IBM Tivoli Identity Manager? How can I learn what the config is for Tivoli and how much Tivoli costs? I have at least 1 solution that runs on Windows too but I'd like to see if the solution can run on iSeries. Also, if you're running Tivoli on V7 did you have any issues with that?
Thanks, Frank
-----Original Message-----
From: rob <rob@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Sun, Feb 26, 2012 7:43 pm
Subject: RE: Software for signons on iSeries and network
Actually we used EIM. And it worked quite well for us. I don't recall
here being a 'charge' for it on the i.
ob Berendt
-
roup Dekko
ept 1600
ail to: 2505 Dekko Drive
Garrett, IN 46738
hip to: Dock 108
6928N 400E
Kendallville, IN 46755
ttp://www.dekko.com
From: "Shannon ODonnell" <sodonnell@xxxxxxxxxxxxxxxxxxxxxxxxx>
o: "'Midrange Systems Technical Discussion'"
midrange-l@xxxxxxxxxxxx>,
ate: 02/26/2012 01:55 PM
ubject: RE: Software for signons on iSeries and network
ent by: midrange-l-bounces@xxxxxxxxxxxx
What's the price-range on iSeries to achieve EIM?
A recurring problem we have all seen with solutions like this is that they
re priced so high their use becomes prohibitive.
-----Original Message-----
rom: midrange-l-bounces@xxxxxxxxxxxx [
ailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of DrFranken
ent: Sunday, February 26, 2012 12:44 PM
o: Midrange Systems Technical Discussion
ubject: Re: Software for signons on iSeries and network
You need single sign-on along with Enterprise Identity Mapping. This
apability eliminates IBM i passwords completely (except for admins).
he very short course is that IBM i and your active directory are
onnected allowing the kerberose ticket present in your Windows session to
e passed through IBM i to active directory for validation. The UserID
ent back to IBM i from active directory is then correlated with that in
IM and that is the user ID used on IBM i. Thus you do not need the same
serID on Windows and IBM i, you have no password on i at all, and as a
esult changing your windows password doesn't have any affect whatever on
our IBM i signon because that's the only password you have.
- Larry "DrFranken" Bolhuis
On 2/26/2012 1:36 PM, fbocch2595@xxxxxxx wrote:
Hi Folks, we’re looking for software that will authenticate iSeries
ignons against our active directory, and keep them in sync with a users
etwork password. In other words allowing automatic signon via the
etwork password, AND keep them in sync. The net outcome would be so that
hen a user changes their network password it would also change their 400
assword.
Your thoughts on this?
Thanks, Frank
-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
ist To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
nsubscribe, or change list options,
isit:
http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
oment to review the archives at
http://archive.midrange.com/midrange-l.
-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
ist
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit:
http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t
http://archive.midrange.com/midrange-l.
midrange.com
