Re: i5/OS Single Logon -- DOMINO400

We've only installed the Single Sign-On via the actual client install, so 
I can't say anything about the trouble you had with the installation.

Regarding switching to a different ID, I do that all the time here.  My 
administrator and my user IDs have different passwords, and when I switch 
from one to the other, I get the error screen and then I get the password 
prompt.  How are you switching IDs?  Are you just using File - Security - 
Switch ID?  Or do you have a location document with the ID's path listed 
on the advanced tab?  I think they have both worked for me, but one might 
work better for you than the other.  I prefer using the Location documents 
myself since it takes care of the mail file, too.

Patrick



GKern@xxxxxxxxxxxxxxxx 
Sent by: domino400-bounces+ptrapp=nex-tech.com@xxxxxxxxxxxx
01/09/2006 02:14 PM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
domino400@xxxxxxxxxxxx
cc

Subject
Re: i5/OS Single Logon






I tried it this morning. 

First off, using the nnslinst.nsf on my server (R6.5.1) and detaching the 
slsetup.exe resulted in an error during the install. The error message was 

"Error - Unable to find Lotus Notes". Funny since LN has been on this pc 
for almost 5 years. So I downloaded the same nsf from an IBM FTP Site. 
This one did install without problem. I rebooted, logged on, opened notes 
and sure enough I wasn't prompted for a password. That was nice. I then 
started CA express sessions, and it did bypass the initial iSeries access 
logon prompt, and it went straight to the 5250 emulation sign on screens. 
That alone eliminated two instances of where I would normally enter my 
user id and/or password. 

Then I tried to switch users in Notes to the admin account. It failed with 

an error indicating the password didn't match. It didn't give me the 
option to enter another password either - so that squashes any hope for my 

using this since I, and the win network admin, are both notes admin and 
his network admin password is different that the notes admin password. 
(Since we share notes admin duty but not windows admin duty - we can't 
have the same passwords for obvious reasons - and for hipaa reasons too.) 

It would be nice if this application allowed you to specify which user 
id's are single signon candidates, and which should bypass sso.

So the proof of concept was somewhat acceptable. The only other problem is 

that not all of our users have windows and iseries profiles with the same 
value. So that means either changing the iseries profiles and assuming the 

baggage associated with that (IMO - unacceptable) or doing a name change 
of the windows network users and also then cleaning up all the associated 
details such as shares, network storage etc... and I'm not the windows guy 

so I don't know what's involved from the windows perspective regarding 
that. 

But this does make a good case for instituting a policy that windows 
logons and iseries profiles should be the same for all future employees. 

Regards, Jerry

Gerald Kern - MIS Project Leader
Lotus Notes/Domino Administrator
IBM Certified RPG IV Developer
The Toledo Clinic, Inc.
4235 Secor Road
Toledo, OH 43623-4299
Phone 419-479-5535
gkern@xxxxxxxxxxxxxxxx
*****
This email message, including any attachments, is for the sole use of the 
intended recipient(s) and may contain confidential and privileged 
information. Any unauthorized review, use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please contact the 
sender by reply email and destroy all copies of the original message.
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.