Mike,
1st, download and print the redbook "Windows-based Single Signon and the
EIM Framework". Make sure you document ALL your settings...
You will have to set up EIM on the System i.
Chapter 7 shows the step by step of the wizards to get you configured.
Setting up Kerberos will not mess with any user profile id's or
passwords.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Tuesday, April 03, 2007 8:03 AM
To: Midrange Systems Technical Discussion
Subject: Kerberos for Client Access signon
We recently had to setup a Kerberos server for Active Directory to allow
authentication from a purchased application. Since we now have that
working I am investigating using Kerberos to authenticate iSeries users
connecting using Client Access. The only function we currently use (with
a few exceptions) is PC5250 for telnet access (display and printer). I
do not need EIM as the only thing I want to do is use a common
userid/password (the Active Directory one) to authenticate to the
iSeries, although I do not want to have all users authenticate this way.
ITS staff with high level access to the iSeries I would like to have use
different passwords. Has anyone done this? Are there any pitfalls? Can I
configure Kerberos on the iSeries and not mess any of my current users
up?
Thanks
midrange.com
