Re: Single Sign On - EIM configuration questions and troubleshooting

one thing I remember from the docs and setting this up a couple of times:
the DNS lookup is pretty important.
It says to make sure that you have the name exactly correct, and that it is
*case sensitive*
If you are getting the IP address back instead of the fqdn maybe you want
to check that part of the set up.

On Thu, Mar 2, 2017 at 8:19 AM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

I'm working on Single Sign On - EIM configuration
I'm creating a basic single sign-on configuration for Pencor06 with a
single user.

For references, using
IBM I Version 7.2 Security Single sign-on - rzamzpdf.pdf
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/
rzamz/rzamzpdf.pdf

IBM Software Technical Document 558590066 - Single Sign-On Configuration
http://www-01.ibm.com/support/docview.wss?uid=nas8N1012326

Historical document 319249546 - Troubleshooting Single Sign-on
http://www-01.ibm.com/support/docview.wss?uid=nas8N1016361

Work sheets completed.

1) I'm using the OpsNav EIM and Network Authentication Service
Configuration wizards.
Are these the best and current wizards to use?
I didn't a wizard option under IBM Navigator for I.

2) When testing the NAS configuration
QSH
keytab list

Principal: krbsvr400/10.X.XX.X@xxxxxxxxxx
Key version: 1
Key type: 56-bit DES
Entry timestamp: 2017/03/01-08:49:16

I did notice that the keytab list returned my iSeries IP instead of the
iSeries fully qualified domain name.
The example shows fully qualified domain name.
I'm not sure if this is an issue, as of yet.

kinit -k krbsvr400/10.x.xx.x@xxxxxxxxxx

Further states - If everything is set up correctly, the only thing
returned after the kinit -k command should be a $ prompt as seen in the
screenshot above.

EUVF06014E Unable to obtain initial credentials.
Status 0x96c73a06 - Client principal is not found in security
registry.

I'm not sure what the issue is at this point.

3) When exiting the wizard, EIM configuration in process.
Creating domain P06EIM

EIM configuration warning
Error occurred while creating domain P06EIM. Authentication error
occurred. Verify the the logon DN and password are correct.

The problem here is you can't continue without cancelling the wizard,
which turn loses the confug.
Must start from scratch.

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD