Re: User profile

Hi Mike

Go to http://www.botzandassociates.com - he has an offering for a quick SSO installation.

A Windows admin who doesn't know Kerberos? Well, I suppose - but Kerberos is what Windows authentication uses, after all - the Active Directory server becomes the key distribution center for Kerberos.

But just as IBM calls its Kerberos support Network Authentication Service, MS had to use some different name - because MIT doesn't let anyone use the work Kerberos in their product or application names - they can in documentation, however.

Good luck!
Vern

On 12/17/2015 10:33 AM, Mike Cunningham wrote:

Drawing a blank on Pat's company. I did talk with him years ago about EIM and SSO but we never got it to work (I think our issue was a Windows admin who was not experienced in Kerberos), and want to try this again.

Mike Cunningham
PA College of Technology

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Paul Nelson
Sent: Thursday, December 17, 2015 11:11 AM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: RE: User profile

Better yet, hire Pat to set it up for you.

Paul Nelson
Cell 708-670-6978
Office 409-267-4027
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Vernon Hamberg
Sent: Thursday, December 17, 2015 10:09 AM
To: Midrange Systems Technical Discussion
Subject: Re: User profile

Just to throw a crazy idea out there - think about setting up single-sign-on with the Kerberos support on IBM i. You can even try it for just one person - there's an SSO 101 article on Developerworks.

This assumes you are on a Windows network with authentication to an Active Directory server.

The benefits?
1. No stickies under the keyboard with passwords 2. No calls to help desk to re-enable users - estimates up to 40% reduction in calls to help desk

You can learn more at http://www.botzandassociates.com/

Regards
Vern

On 12/17/2015 8:44 AM, Hoteltravelfundotcom wrote:

We get a lot of users who forget their passwords, either because they
are not using the ibm i for months at a time, or normal ennui like mind set.
We thus get many help desk requests to reenable.

I would like to know, if I can get a notification that someone's
Userid has become disabled. If not this, can a REPORT be made that
will show those with disabled pw.

I looked at dspusrprf with outfile but it does not show the enabled

status.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.