Re: EIM / LDAP

[Patrick Botz <botz@xxxxxxxxxx>]

If you are at V5R3, you need to install the AC3 crypto LPP (no charge, but 
you may have to order it).  This is a pre-req for pre-V5R4 systems.

The only windows user account that you needed to change to "Use DES 
encryption" was the windows user account you created to represent your 
i5/OS system (i.e. the one created for the krbsvr400 service principal, 
etc.).




Patrick Botz


Security Architecture Consulting & Implementation

IBM Systems and Technology Group Lab Services 

mail: botz@xxxxxxxxxx

phone: 507.253.0917 / mobile: 507.250.5644



ibm.com/servers/eserver/services



midrange-l-bounces@xxxxxxxxxxxx wrote on 04/30/2007 09:22:04 AM:

> > In the AD Admin GUI, find the user accounts for the iSeries system.
>
> This confuses me--do you mean the profiles created by the wizard for the 

> iSeries principles (kbrsvr400, etc) or the Windows user profiles that 
will 
> be mapped to iSeries profiles?  In either case, I selected all users and 

> enabled DES encryption across the board.  It did not appear to be 
checked 
> for anyone.
>
>
> > Display the properties.  Under the account tab in the scroll window on 

> the 
> > bottom half of the page, find the "Use DES encryption" check box.  It 
> > should be checked. If not, check it.  Then try the tests again. 
>
> I still fail with my own user id, EUVF06014E Unable to obtain initial 
> credentials  - Status 0x96c73a0e - Encryption type is not supported. 
I've 
> double checked our PTF levels, which look pretty good:
> PTF Group             Level  Status 
> SF99540                7107  Installed
> SF99539                  42  Installed
> SF99504                  10  Installed
> SF99347                   6  Installed
> SF99323                  11  Installed
> SF99316                   3  Installed
> SF99315                   6  Installed
> SF99291                   7  Installed
> SF99143                   1  Installed
> SF99114                   8  Installed
>
> > From here I'm going to see if there any single PTFs related to 
encryption 
> that I don't have loaded.