Re: Single Sign On - EIM configuration questions and troubleshooting

[Evan Harris <auctionitis@xxxxxxxxx>]

one thing I remember from the docs and setting this up a couple of times:
the DNS lookup is pretty important.
It says to make sure that you have the name exactly correct, and that it is
*case sensitive*
If you are getting the IP address back instead of the fqdn maybe you want
to check that part of the set up.

On Thu, Mar 2, 2017 at 8:19 AM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

> I'm working on Single Sign On -   EIM configuration
> I'm creating a basic single sign-on configuration for Pencor06 with a
> single user.
>
> For references, using
> IBM I Version 7.2 Security Single sign-on - rzamzpdf.pdf
> https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/
> rzamz/rzamzpdf.pdf
>
> IBM Software Technical Document 558590066 -  Single Sign-On Configuration
> http://www-01.ibm.com/support/docview.wss?uid=nas8N1012326
>
> Historical document 319249546 - Troubleshooting Single Sign-on
> http://www-01.ibm.com/support/docview.wss?uid=nas8N1016361
>
> Work sheets completed.
>
> 1) I'm using the OpsNav EIM and Network Authentication Service
> Configuration wizards.
> Are these the best and current wizards to use?
> I didn't a wizard option under IBM Navigator for I.
>
> 2) When testing the NAS configuration
> QSH
> keytab list
>
> Principal: krbsvr400/10.X.XX.X@xxxxxxxxxx
>   Key version: 1
>   Key type: 56-bit DES
>   Entry timestamp: 2017/03/01-08:49:16
>
> I did notice that the keytab list returned my iSeries IP instead of the
> iSeries fully qualified domain name.
> The example shows fully qualified domain name.
> I'm not sure if this is an issue, as of yet.
>
> kinit -k krbsvr400/10.x.xx.x@xxxxxxxxxx
>
> Further states - If everything is set up correctly, the only thing
> returned after the kinit -k command should be a $ prompt as seen in the
> screenshot above.
>
> EUVF06014E Unable to obtain initial credentials.
>            Status 0x96c73a06 - Client principal is not found in security
> registry.
>
> I'm not sure what the issue is at this point.
>
> 3) When exiting the wizard, EIM configuration in process.
> Creating domain P06EIM
>
> EIM configuration warning
> Error occurred while creating domain P06EIM. Authentication error
> occurred. Verify the the logon DN and password are correct.
>
> The problem here is you can't continue without cancelling the wizard,
> which turn loses the confug.
> Must start from scratch.
>
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx
> http://www.pencor.com/
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: http://amzn.to/2dEadiD