RE: Question about IFS and password synchronization

Bill,

This can be done using EIM and Kerberos which (assuming you are on V5R2
or higher) you already own as part of OS/400.

Windows uses a slightly modified version of Kerberos to provide access
to systems within a domain.  You can add you System I to that Domain,
and have it use the same Kerberos tickets as it's authentication
methodology - essentially giving you single sign-on capability (which is
wayyyyyyy better than synchronization).

The setup is a little complicated, but once you have it in place, it
requires very little maintenance.

jte




--
John Earl, VP and Chief Technology Officer
PowerTech:   253-872-7788
Direct:          253-479-1408
John.Earl@xxxxxxxxxxxxx
 

 
First Annual PowerTech Customer User Group - iNSIGHT '07 -- March 4-6,
2007 in Las Vegas, NV
iNSIGHT '07 is the only conference focused on System i security and
compliance issues.  
Learn more! www.powertech.com/insight.asp
 
===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.
 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of bill.howie@xxxxxxxxxxxxxx
Sent: Thursday, January 25, 2007 12:18 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Question about IFS and password synchronization


Hello all........

I have a question that I have seen answered in the newsgroups before

but

not since the advent of Windows XP.  We have an application set up

that

archives our daily invoices to PDF files in a folder on the IFS.

Then,

when a user needs to access a past invoice, they have a Windows mapped
drive that points to this particular IFS folder.  Our problem is (and

I am

sure you can see where this is headed) when the user changes their

iSeries

password they cannot reconnect to the mapped drive without a reboot

and a

re-mapping of the drive.  In the past posts I have seen how this can

be

handled, but they were always within older versions of Windows.  Does
anyone have experience with how to handle this on Windows XP?

Alternatively, I know there is a way to set up Ops Nav with a shortcut

so

that the user could go right to the particular IFS directory.

However,

when you attempt to open one of the PDFs through Ops Nav, you get a
"program error occurred" dialog box.   Would Ops Nav be an alternative
that
would circumvent the password issue if I can figure out why I can't

open a

PDF through Ops Nav?  Does anyone know how to fix the Ops Nav error?

Any

help would be greatly appreciated.  Thanks.

Bill Howie
Programmer/Analyst
Information Technology Department
Coastal Pet Products, Inc.
Voice:  330-821-7363 x359
bill.howie@xxxxxxxxxxxxxx

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.