RE: ifs mapped drive issue

Rob,

Where does the ISIM get installed?
How does it integrate with Active Directory?

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Monday, July 10, 2017 8:10 AM
To: Midrange Systems Technical Discussion
Subject: RE: ifs mapped drive issue

We enforce matching user id's and matching passwords between IBM i and Windows.
I have to laugh at all the people who think that this is a bad thing because they fear Windows security yet they allow plain 5250 without SSL into their systems. Any network sniffer (or even STRCMNTRC) can easily figure out their IBM i passwords.
People who enforce differences remind me of Dilbert's "Mordac, preventer of Information Services".

We use IBM's Secure Identity Manager (ISIM) formerly known as IBM's Tivoli Identity Manager (ITIM). If you change your Windows password it automatically sends it to all lpars of IBM i. We also run at QPWDLVL=3.
This allows large passwords with upper and lower case letters. Read the Knowledge Center carefully before you change this.
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/rzarl/rzarlplanpwdchg.htm
And, if you do, I'd go straight from 0 to 3. Anything in between is a waste of time and will frustrate the heck out of you.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Justin Taylor <JUSTIN@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 07/07/2017 04:56 PM
Subject: RE: ifs mapped drive issue
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Matching usernames with different passwords has always been a problem. You
"might" get by mapping a drive and using the option to specify different
credentials. For the username, put {ibm_i_hostName}\{username}, and use
your IBMi password.

We tend to avoid matching usernames. The few people who have them just
match passwords, which is a dance to satisfy password rules on both sides.


Good luck,



-----Original Message-----
From: Smith, Mike [mailto:Mike_Smith@xxxxxxxxxxxxxxxx]
Sent: Friday, July 07, 2017 3:41 PM
To: Midrange Systems Technical Discussion (midrange-l@xxxxxxxxxxxx)
<midrange-l@xxxxxxxxxxxx>
Subject: ifs mapped drive issue

I am testing the use of mapped drives to our IFS.

I have set up a shortcut on a Virtual Desktop.

If my network id and ibm I password are the same, I have no issues, If my
network id and ibm I ID are different, I have no issues.

However if my network id and my ibm I password are not the same I cannot
get connected.

I get a 'Windows Security' prompt to enter user id and password but
receive 'Network password is not correct' After a couple attempts at
this my Netserver userid becomes disabled.

If I try to use the network password I get 'Access is denied'.

Any idea what might be going on here.

I've done some searching and found some references to the issue, but no
resolutions.

THanks




NOTICE: This message, including any attachment, is intended as a
confidential and privileged communication. If you have received this
message in error, or are not the named recipient(s), please immediately
notify the sender and delete this message.