RE: iSeries Security Enterprise Identity Mapping. Vendor Y/N ?

It's running somewhere in the network. It can be on an iSeries, but doesn't
have to be.

Brief details. EIM consists of an EIM Domain controller which is basically
just an LDAP server, and a set of APIs. These APIs are wrappers around LDAP
client APIs. We have tried to hide as much of LDAP as we possibly could. We
have configuration wizards for EIM and Kerberos. You manage the EIM data
via Ops Nav. Under the network tab, there is a new folder, Enterprise
Identity Mapping. In addition, we have integrated the Ops Nav user profile
management in with EIM so when you create, delete, change, a user through
Ops Nav you have an option of creating/changing/removing an EIM association
between the user profile identity and an EIM identifier. When you delete a
user profile, the operating system will automatically remove any EIM
associations for that user profile.

Each platform will provide a platform specific view of the EIM data. The
previous info is the iSeries specific view. Tivoli also plans to provide a
product to manage info in EIM from the enterprise point of view.

Patrick Botz
Senior Software Engineer
eServer Security Architect
(507) 253-0917, T/L 553-0917
email: botz@us.ibm.com




                      "Andy
                      Nolen-Parkhouse"          To:       
<midrange-l@midrange.com>
                      <aparkhouse@attbi.        cc:
                      com>                      Subject:  RE: iSeries Security  
Enterprise Identity Mapping. Vendor Y/N ?
                      Sent by:
                      midrange-l-admin@m
                      idrange.com


                      05/01/2002 10:44
                      AM
                      Please respond to
                      midrange-l





Patrick,

Thanks for the details.  It's always frustrating to get an early
announcement and know that the technical documentation is not
necessarily together yet.  Your response puts a good picture the brief
mention we've already have.  We'll try to be patient.

You mentioned that many of the various signons related to OS/400 and its
file serving interfaces will interface with EIM.  You did not mention
where the EIM server was actually running.  Is it running on OS/400 or
is it available somewhere on the network?  If it is on the network, what
platform is it running under?

Regards,
Andy Nolen-Parkhouse

> Subject: Re: iSeries Security Enterprise Identity Mapping. Vendor Y/N
?

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.