Re: RPG program - Kerberos Authentication

Our product is installed at several customer sites but most of them will be using IBM i Access for Windows or ACS emulator

As there could be other applications running on our customer’s IBM i server, we are unsure if they will be ready to share the krbsrv400 SPN and it’s corresponding key stored in the keytab file. So we are trying to create a new SPN and keytab file for our product so that we can secure our product access key

On Mar 31, 2020, at 4:24 PM, Steinmetz, Paul via RPG400-L <rpg400-l@xxxxxxxxxxxxxxxxxx> wrote:

What are you using for your 5250 emulator.
The emulator should have a connection setting, which would include Kerberos.

Also, you would do the entire Kerberos setup, a little tedious.
Involves running several setups.

Paul

-----Original Message-----
From: RPG400-L <rpg400-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rajesh Ravindran
Sent: Tuesday, March 31, 2020 4:20 PM
To: RPG programming on IBM i <rpg400-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: RPG program - Kerberos Authentication

Sorry probably I forgot to mention this earlier, I already got the GSS API documentation from IBM website but it looks like to enable Kerberos authentication it requires client and server components.
In case of logging into IBM i server, 5250 emulator running on client PC acts as the client component, communicates with KDC and gets the Kerberos service ticket which is then passed on to the IBM i server

As our application is RPG based green screen application we don’t have any client component running on every local PC so I am trying to understand how to connect to KDC and get the service ticket for our application

On Mar 31, 2020, at 2:39 PM, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:

https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/apis/krb5lis
t.htm

Charles

On Tue, Mar 31, 2020 at 12:10 PM Jon Paris <jon.paris@xxxxxxxxxxxxxx> wrote:

You could either invoke Java methods or - more efficiently - find the
C/C++ function interface and use that.

On Mar 31, 2020, at 1:26 PM, Justin Taylor <JUSTIN@xxxxxxxxxxxxx> wrote:

I know there are Java ways to do it, but I don't know about RPG (but

I've never looked).

-----Original Message-----
From: Rajesh Ravindran [mailto:rajesh.ravi@xxxxxxxxx]
Sent: Tuesday, March 31, 2020 11:37 AM
To: rpg400-l@xxxxxxxxxxxxxxxxxx
Subject: RPG program - Kerberos Authentication


We have RPG based application running on IBM i and it has its own
user

authentication module based on username and password, we want to
enable Kerberos authentication for our RPG green screen application.
Are there any references on how to obtain Kerberos Service Ticket
using RPG program

Please note we have already enabled Kerberos authentication for IBM
i

server login using NAS and EIM setup. As our product customers won’t
have separate IBM i user profile for each user (shares same IBM i
user profile for all users) we are trying to map the windows domain
username which is unique for each user to our application username

--
This is the RPG programming on IBM i (RPG400-L) mailing list To post
a message email: RPG400-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related

questions.

Help support midrange.com by shopping at amazon.com with our
affiliate

link: https://amazon.midrange.com

--
This is the RPG programming on IBM i (RPG400-L) mailing list To post
a message email: RPG400-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the RPG programming on IBM i (RPG400-L) mailing list To post a
message email: RPG400-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the RPG programming on IBM i (RPG400-L) mailing list To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com
--
This is the RPG programming on IBM i (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com