Regarding item 1 below,
I found the wizard options in IBM Navigator for I
Network, All Tasks, EIM
Security, All Tasks, NAI
They were sort of hidden.
There are other EIM and NAI options above all tasks, not where the wizards are located.
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Wednesday, March 01, 2017 2:19 PM
To: 'Midrange Systems Technical Discussion'
Subject: Single Sign On - EIM configuration questions and troubleshooting
I'm working on Single Sign On - EIM configuration
I'm creating a basic single sign-on configuration for Pencor06 with a single user.
For references, using
IBM I Version 7.2 Security Single sign-on - rzamzpdf.pdf
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/rzamz/rzamzpdf.pdf
IBM Software Technical Document 558590066 - Single Sign-On Configuration
http://www-01.ibm.com/support/docview.wss?uid=nas8N1012326
Historical document 319249546 - Troubleshooting Single Sign-on
http://www-01.ibm.com/support/docview.wss?uid=nas8N1016361
Work sheets completed.
1) I'm using the OpsNav EIM and Network Authentication Service Configuration wizards.
Are these the best and current wizards to use?
I didn't a wizard option under IBM Navigator for I.
2) When testing the NAS configuration
QSH
keytab list
Principal: krbsvr400/10.X.XX.X@xxxxxxxxxx
Key version: 1
Key type: 56-bit DES
Entry timestamp: 2017/03/01-08:49:16
I did notice that the keytab list returned my iSeries IP instead of the iSeries fully qualified domain name.
The example shows fully qualified domain name.
I'm not sure if this is an issue, as of yet.
kinit -k krbsvr400/10.x.xx.x@xxxxxxxxxx
Further states - If everything is set up correctly, the only thing returned after the kinit -k command should be a $ prompt as seen in the screenshot above.
EUVF06014E Unable to obtain initial credentials.
Status 0x96c73a06 - Client principal is not found in security registry.
I'm not sure what the issue is at this point.
3) When exiting the wizard, EIM configuration in process.
Creating domain P06EIM
EIM configuration warning
Error occurred while creating domain P06EIM. Authentication error occurred. Verify the the logon DN and password are correct.
The problem here is you can't continue without cancelling the wizard, which turn loses the confug.
Must start from scratch.
Thank You
_____
Paul Steinmetz
IBM i Systems Administrator
Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071
610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home
psteinmetz@xxxxxxxxxx
http://www.pencor.com/
midrange.com
