|
> From: Todd Bryant > > I see. So, just so I completely clear, they are not authenticating against > 400 profiles, they are using bsd user accounts, in the case of the one > running FreeBSD? That makes sense. I was wondering how one would get past > this limitation. That's exactly correct, Todd. They use a standard authentication list in FreeBSD. They then use the PSC/400 security exit program to convert that user ID into an iSeries user profile (the exit program also lets you check things like remote IP address). This allows them to use long names and passwords without messing with their iSeries settings, and also to avoid having iSeries profiles and passwords out in the wild. As Mr. Morris points out, in the realm of single signon, which is currently a hot-and-getting-hotter topic, the de jure standard right now is Kerberos. Joe
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.