Last time we tried to use EIM was back on V5R4. That did not end well and we abandoned the process. I think the problem was on the windows admin side. Now we are at V7R1 and have had 100% turnover of the windows admins. Is EIM at V7R1 essentially the same as it was on V5R4?
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of DrFranken
Sent: Wednesday, April 02, 2014 4:22 PM
To: Midrange Systems Technical Discussion
Subject: Re: Synchronized Passwords accross IBM i & Active Directory
This is precisely what EIM and Kerberos are about. Dump your IBM i Passwords completely (except for admins) and just use the one in Windows.
If you truly need everyone to be able to sign on independently to IBM i without using any windows workstations then this is likely not the right solution for you.
- Larry "DrFranken" Bolhuis
On 4/2/2014 3:37 PM, Buzz Fenner wrote:
Looking to create a new process to facilitate password change on our i
& Windows domain. Until recently, we were on a Model 520 that housed
two IXS cards. On one of those cards was our W2K3 DC. With the help of
User Enrollment on the i, we sync'd up account passwords; a user
account on the i took care of performing password maintenance on the DC.
Fast forward to today with a new server and no more Windows
integration; I have to redo that process. Just wondering how other
folks have addressed the problem!
Business Systems Analyst/Systems Administrator
City Water & Light
870.930.3374 | 870.219.5229
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l