Re: EIM SSO expired password issues

As I understand it, a user profile using EIM SSO should be PASSWRD(*NONE)

You're kind of shooting yourself in the foot by trying to use EIM SSO for
just telnet.

https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_72/rzalv/rzalv_user_profiles.htm
"For typical users, you can change the password setting to *NONE so that no
password can be used with the user profile. "


Charles

On Wed, Aug 30, 2017 at 2:03 PM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

We implemented EIM SSO earlier this year.
Overall working well.

Outstanding issues below.

1) Telnet connection configured as - Use Kerberos principal; no prompting.
Telnet working fine, no password needed.
iSeries password expires.
Telnet connections continue to work even though password expired.

Non-Telnet connections (mapped drives, ODBC for mail merges, etc,) fail
due to expired password.
User is NOT given a prompt to change their password.
iSeries userprofile/password is different from Windows user/password.

2) New iSeries userprofile is created and configured for EIM SSO.
Previous to EIM SSO, we set the password to match the profile, PWDEXP set
*YES.
User would get a prompt to change their password on first use.
With EIM SSO, the prompt no longer occurs.

For both issues,
Any thoughts from the group for managing iSeries passwords when configured
for EIM SSO.

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD