× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. March 2017

Single Sign On - EIM configuration questions and troubleshooting

I'm working on Single Sign On - EIM configuration
I'm creating a basic single sign-on configuration for Pencor06 with a single user.

For references, using
IBM I Version 7.2 Security Single sign-on - rzamzpdf.pdf
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/rzamz/rzamzpdf.pdf

IBM Software Technical Document 558590066 - Single Sign-On Configuration
http://www-01.ibm.com/support/docview.wss?uid=nas8N1012326

Historical document 319249546 - Troubleshooting Single Sign-on
http://www-01.ibm.com/support/docview.wss?uid=nas8N1016361

Work sheets completed.

1) I'm using the OpsNav EIM and Network Authentication Service Configuration wizards.
Are these the best and current wizards to use?
I didn't a wizard option under IBM Navigator for I.

2) When testing the NAS configuration
QSH
keytab list

Principal: krbsvr400/10.X.XX.X@xxxxxxxxxx
Key version: 1
Key type: 56-bit DES
Entry timestamp: 2017/03/01-08:49:16

I did notice that the keytab list returned my iSeries IP instead of the iSeries fully qualified domain name.
The example shows fully qualified domain name.
I'm not sure if this is an issue, as of yet.

kinit -k krbsvr400/10.x.xx.x@xxxxxxxxxx

Further states - If everything is set up correctly, the only thing returned after the kinit -k command should be a $ prompt as seen in the screenshot above.

EUVF06014E Unable to obtain initial credentials.
Status 0x96c73a06 - Client principal is not found in security registry.

I'm not sure what the issue is at this point.

3) When exiting the wizard, EIM configuration in process.
Creating domain P06EIM

EIM configuration warning
Error occurred while creating domain P06EIM. Authentication error occurred. Verify the the logon DN and password are correct.

The problem here is you can't continue without cancelling the wizard, which turn loses the confug.
Must start from scratch.

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/



As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.