Re: want to allow easy home access to iSeries

[John Jones <chianime@xxxxxxxxx>]

While I've no problem with the other suggestions, why not get a VPN that
integrates with your company's user store?  Our VPN uses our Windows Active
Directory accounts for authentication.  There's nothing to juggle other than
putting the users in the VPN group in AD.

We use Cisco but I'm sure there are plenty of others with that capability.

On Fri, Feb 18, 2011 at 5:10 AM, Luke Gerhardt <lgerhardt@xxxxxxxxx> wrote:

> Instead of juggling scores of VPN accounts, I am now tasked with looking
> into setting up our iSeries to allow home access with *minimal*
> installation or configuration of the end users' system.
>
> I've tried setting up tn5250j as a Java applet on a web server on the
> system, but keep getting a Java error regarding security, at which point
> it leaves me with a gray screen only.  I feel like I'm close
> there...but...it's just not finishing.  That seems like the ideal method
> so far, as it requires only having Java installed and browsing to our
> site.  I'm just testing in locally right now, and there is no SSL set up
> on that webserver as yet.  The error I get is "PKIX path validation
> failed".  I get it three times and then it blows up and dies.  :(
>
> I'm also considering forwarding a port to allow SSL secured telnet out
> of our firewall and having the end users install tn5250j.  I don't like
> that we would then be responsible to hand-hold them through installing
> software, but if I can't get the applet method to work, then I need to
> do something.
>
> Installing iSeries Access is not a workable solution for us in this case.
>
> Thoughts from others who have walked this path before?
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.