RE: IFS mapped drive issues

["Steinmetz, Paul" <PSteinmetz@xxxxxxxxxx>]

Each app has its own environment (security, libraries, outqs, jobds, jobqs), all controlled by unique userprofiles.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: Wednesday, June 05, 2013 8:10 AM
To: Midrange Systems Technical Discussion
Subject: Re: IFS mapped drive issues

Why would a user need multiple accounts?  There's only one user, you should need only one account.

I could kind of see a QSECOFR class user having two...but that's about it.

Charles


On Wed, Jun 5, 2013 at 12:28 AM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>wrote:

> One Windows  user may have 3,4,5,6 iSeries accounts, they cannot 
> match. We run many different apps, each requiring separate accounts for login.
> If we had only one iSeries app, I agree, they could then match.
> I setup and tested Enterprise Identity Mapping (EIM) along with 
> Kerberos, again, if we only had one app, this could work.
>
> I am going to revisit Net Use, see if I can it to work for IFS
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:
> midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
> Sent: Tuesday, June 04, 2013 11:34 PM
> To: Midrange Systems Technical Discussion
> Subject: RE: IFS mapped drive issues
>
> <snip>
> None of our Windows accounts equal our iSeries accounts.
> </snip>
> I disagree with this philosophy.  Both Windows, and IBM i, should have 
> their security taken seriously.  Critical data is stored on both.  
> Done right, then it's no great risk to have them be the same.  Done 
> REALLY right and it could actually be MORE secure to have them the 
> same.  Like SSO with biometrics.
>
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 
> Mail
> to:  2505 Dekko Drive
>           Garrett, IN 46738
> Ship to:  Dock 108
>           6928N 400E
>           Kendallville, IN 46755
> http://www.dekko.com
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, 
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take 
> a moment to review the archives at http://archive.midrange.com/midrange-l.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, 
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take 
> a moment to review the archives at 
> http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.