Re: RPG program - Kerberos Authentication

Hi

You say you have set up Kerberos authentication - with EIM. And you want to map Windows principles to your application user names.

You also just do that with EIM. You set up an "application" set of rules in EIM. I did this several years ago with an application we had at a previous employer.

You do not need at all to go into getting the ticket and all - IBM i has already done that for you, why do it again?

You will likely need to use EIM (not Kerberos) APIs to see if there is an EIM association between the Windows principle and your app's user. Something like that!

Much easier, however, than what you are trying to do, IMHO.

HTH
Vern

On 3/31/2020 4:29 PM, Rajesh Ravindran wrote:

-----Original Message-----
From: Rajesh Ravindran [mailto:rajesh.ravi@xxxxxxxxx]
Sent: Tuesday, March 31, 2020 11:37 AM
To: rpg400-l@xxxxxxxxxxxxxxxxxx
Subject: RPG program - Kerberos Authentication


We have RPG based application running on IBM i and it has its own
user

authentication module based on username and password, we want to
enable Kerberos authentication for our RPG green screen application.
Are there any references on how to obtain Kerberos Service Ticket
using RPG program

Please note we have already enabled Kerberos authentication for IBM
i

server login using NAS and EIM setup. As our product customers won’t
have separate IBM i user profile for each user (shares same IBM i
user profile for all users) we are trying to map the windows domain
username which is unique for each user to our application username

--