Maybe the solution, then, is to bump it up to 2 or 3, but that is a change that is not taken lightly and requires planning before implementation.

Rich
------------------------------------------------------------------------

Mike Cunningham wrote:
Still at 0

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rich Loeber
Sent: Monday, March 17, 2008 4:12 PM
To: Midrange Systems Technical Discussion
Subject: Re: more on Kerberos

Mike,

What password type do you have specified in the system values on i5/OS.
Types 2 and 3, I believe, will support mixed case passwords.

Rich Loeber
Kisco Information Systems
http://www.kisco.com

--------------------------------------------------------------------------

Mike Cunningham wrote:

I am getting closer to getting this to work between our Windows Kerberos server and i5OS. I think my current problem is related to mixed case passwords. Our Windows domain is setup to require the use of mixed case passwords so when I did the iSeries Navigator Wizard to setup Kerberos I used a mixed case password (e.g. not the real one but something like Kt639hJ). When I issue the command kinit -k krbsvr400/system.pct.edu@xxxxxxx<mailto:krbsvr400/system.pct.edu@xxxxxxx>
I get an EUVF06016E Password not correct error If I leave the -k off and issue the command
Kinit krbsvr400/as400adm.pct.edu@xxxxxxx<mailto:krbsvr400/as400adm.pct.edu@xxxxxxx>
And then enter the mixed case password I get a valid ticket issued

Does anyone know for sure if the i5OS half of this process can't deal with mixed case passwords? We do not have long passwords enabled for normal signon and there is nothing in the Kerberos manual that I can find that says mixed case passwords are not allowed


This thread ...

Follow-Ups:
Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].