Re: Synchronized Passwords accross IBM i & Active Directory

[DrFranken <midrange@xxxxxxxxxxxx>]

This is precisely what EIM and Kerberos are about.  Dump your IBM i 
Passwords completely (except for admins) and just use the one in Windows.

If you truly need everyone to be able to sign on independently to IBM i 
without using any windows workstations then this is likely not the right 
solution for you.

        - Larry "DrFranken" Bolhuis

www.frankeni.com
www.iDevCloud.com
www.iInTheCloud.com

On 4/2/2014 3:37 PM, Buzz Fenner wrote:
> All,
>
>
>
> Looking to create a new process to facilitate password change on our i &
> Windows domain. Until recently, we were on a Model 520 that housed two IXS
> cards. On one of those cards was our W2K3 DC. With the help of User
> Enrollment on the i, we sync'd up account passwords; a user account on the i
> took care of performing password maintenance on the DC.
>
>
>
> Fast forward to today with a new server and no more Windows integration; I
> have to redo that process. Just wondering how other folks have addressed the
> problem!
>
>
>
> --
>
> Buzz Fenner
>
> Business Systems Analyst/Systems Administrator
>
> City Water & Light
>
> 870.930.3374 | 870.219.5229
>
> bfenner@xxxxxxxxxxxxxxxx