RE: SSO and Novell -- was EIM

[Patrick Botz <botz@xxxxxxxxxx>]

You're welcome...

By "SSO stuff," what I meant was "single sign-on."  By Single sign-on I
mean a number of things, but one of them is how you use the windows and/or
Novell authentication mechanism (which for windows 2k/3k domains is
something called Kerberos) to sign on to OS/400. In a way that allows you
to ignore the OS/400 password...

The SSO support provided by OS/400 in V5R2 is based on Kerberos for
authentication and something called EIM that allows you map from the
Windows ID in a kerberos ticket to the appropriate OS/400 user profile
(whether it is the same name in both places or not).

There is no extra cost for this function. It comes with base OS/400. Lots
of people have implemented it.

I'll send you the info.

Patrick Botz
Senior Technical Staff Member
eServer Security Architect
(507) 253-0917, T/L 553-0917
email: botz@xxxxxxxxxx




Thank you Mr. Botz,
I've not gotten into EIM as much as I'd like.  Dunno what makes up the
pieces, nor which are extra-cost vs. "free".  'Scuse my ignorance, but what
is "SSO stuff"??  (And I wouldn't mind presentation if you get a chance,
but
dunno when I'd get around to DOing this stuff, which is usually when I get
a
chance to investigate things more thoroughly (sp?).)

| -----Original Message-----
| [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Patrick Botz

| Since I am in development and this SSO stuff is free