Re: iSeries & Active Directory

[Jim Oberholtzer <midrangel@xxxxxxxxxx>]

"Any idea why?"

A) It runs in IBM i rather than MS Windoze  (spelling intentional)  Why 
not use an inferior server that costs extra money and is less stable to 
do what you already paid for in IBM i?

B)  (the real reason) The user interface for AD is better and easier 
than the interface on the IBM i directory server.  Furthermore there are 
integration points for AD into other OEM products that make it easier.

If you do not already have AD running I would preferentially use the IBM 
i Directory server until integration with other products becomes a problem.

BTW:  iDevCloud runs all the DNS, DHCP, etc on IBM i quite happily with 
full redundancy and recoverability.  We don't need a Directory server at 
this point or we would use the IBM i version.

Jim Oberholtzer
CEO/Chief Technical Architect
Agile Technology Architects, LLC


On 3/1/2011 11:49 AM, hockchai Lim wrote:
> Thanks Jim.
>
> You've also mentioned "IBM i has a built in kerberos  server if you choose
> to use it (almost no one does)".  Any idea why?  Is it becuase of security
> risk, system resources (may be it require a dedicated system i...), or...?