Re: want to allow easy home access to iSeries

While I've no problem with the other suggestions, why not get a VPN that
integrates with your company's user store? Our VPN uses our Windows Active
Directory accounts for authentication. There's nothing to juggle other than
putting the users in the VPN group in AD.

We use Cisco but I'm sure there are plenty of others with that capability.

On Fri, Feb 18, 2011 at 5:10 AM, Luke Gerhardt <lgerhardt@xxxxxxxxx> wrote:

Instead of juggling scores of VPN accounts, I am now tasked with looking
into setting up our iSeries to allow home access with *minimal*
installation or configuration of the end users' system.

I've tried setting up tn5250j as a Java applet on a web server on the
system, but keep getting a Java error regarding security, at which point
it leaves me with a gray screen only. I feel like I'm close
there...but...it's just not finishing. That seems like the ideal method
so far, as it requires only having Java installed and browsing to our
site. I'm just testing in locally right now, and there is no SSL set up
on that webserver as yet. The error I get is "PKIX path validation
failed". I get it three times and then it blows up and dies. :(

I'm also considering forwarding a port to allow SSL secured telnet out
of our firewall and having the end users install tn5250j. I don't like
that we would then be responsible to hand-hold them through installing
software, but if I can't get the applet method to work, then I need to
do something.

Installing iSeries Access is not a workable solution for us in this case.

Thoughts from others who have walked this path before?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.