Re: EIM SSO expired password issues

[Charles Wilt <charles.wilt@xxxxxxxxx>]

As I understand it, a user profile using EIM SSO should be PASSWRD(*NONE)

You're kind of shooting yourself in the foot by trying to use EIM SSO for
just telnet.

https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_72/rzalv/rzalv_user_profiles.htm
"For typical users, you can change the password setting to *NONE so that no
password can be used with the user profile. "


Charles

On Wed, Aug 30, 2017 at 2:03 PM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

> We implemented EIM SSO earlier this year.
> Overall working well.
>
> Outstanding issues below.
>
> 1) Telnet connection configured as - Use Kerberos principal; no prompting.
> Telnet working fine, no password needed.
> iSeries password expires.
> Telnet connections continue to work even though password expired.
>
> Non-Telnet connections (mapped drives, ODBC for mail merges, etc,) fail
> due to expired password.
> User is NOT given a prompt to change their password.
> iSeries userprofile/password is different from Windows user/password.
>
> 2) New iSeries userprofile is created and configured for EIM SSO.
> Previous to EIM SSO, we set the password to match the profile, PWDEXP set
> *YES.
> User would get a prompt to change their password on first use.
> With EIM SSO, the prompt no longer occurs.
>
> For both issues,
> Any thoughts from the group for managing iSeries passwords when configured
> for EIM SSO.
>
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx
> http://www.pencor.com/
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: http://amzn.to/2dEadiD