Re: IFS mapped drive issues

[Charles Wilt <charles.wilt@xxxxxxxxx>]

Why would a user need multiple accounts?  There's only one user, you should
need only one account.

I could kind of see a QSECOFR class user having two...but that's about it.

Charles


On Wed, Jun 5, 2013 at 12:28 AM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>wrote:

> One Windows  user may have 3,4,5,6 iSeries accounts, they cannot match. We
> run many different apps, each requiring separate accounts for login.
> If we had only one iSeries app, I agree, they could then match.
> I setup and tested Enterprise Identity Mapping (EIM) along with Kerberos,
> again, if we only had one app, this could work.
>
> I am going to revisit Net Use, see if I can it to work for IFS
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:
> midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
> Sent: Tuesday, June 04, 2013 11:34 PM
> To: Midrange Systems Technical Discussion
> Subject: RE: IFS mapped drive issues
>
> <snip>
> None of our Windows accounts equal our iSeries accounts.
> </snip>
> I disagree with this philosophy.  Both Windows, and IBM i, should have
> their security taken seriously.  Critical data is stored on both.  Done
> right, then it's no great risk to have them be the same.  Done REALLY right
> and it could actually be MORE secure to have them the same.  Like SSO with
> biometrics.
>
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
> to:  2505 Dekko Drive
>           Garrett, IN 46738
> Ship to:  Dock 108
>           6928N 400E
>           Kendallville, IN 46755
> http://www.dekko.com
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
> moment to review the archives at http://archive.midrange.com/midrange-l.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.