RE: EIM and QNTC

Thanks Rob, Justin


I had an expert looking at this issue and was told that SSO is required
for QNTC
to skip the the password sync.
He then proceeded with configuring Kerberos on out test machine .
(I know that a script for creating special kerberos users in the domain was
successfully executed)

testing it with System i Navigator (the old c/s version) resulted with a
message
"CYBSY1012 - Kerberos service principal not found for system ACTEST."

I was hoping there was a way to bypass the Kerberos-SSO issue but (if I
understood correctly)
it seems there is no such way.

Gad

EIM itself doesn?t require remote password management. I still have a
password for the reasons you mentioned. However, to use EIM & QNTC
together, it is required. Here?s a snippet from the IBM doc, ?The user's
IBM i user profile must have the local password management (LCLPWDMGT)
parameter set to *NO.?

https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_73/ifs/rzaaxntkerb.htm


One caveat about EIM & QNTC is that it can have problems with very long
running 5250 jobs, and batch jobs. This issue is around Kerberos ticket
expiration. IBM maintains this isn?t a bug, so I submitted an RFE.
http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=131534

-