Re: Import User Profiles from the i? -- MIDRANGE-L

If you have a Windows Active Directory, then yes you are running Kerberos.

Charles

On Thu, Apr 30, 2009 at 3:11 PM, Adam West <adamster@xxxxxxxxx> wrote:

We are not running Kerberos.

--- On Thu, 4/30/09, Mark S. Waterbury <mark.s.waterbury@xxxxxxx> wrote:

From: Mark S. Waterbury <mark.s.waterbury@xxxxxxx>
Subject: Re: Import User Profiles from the i?
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Date: Thursday, April 30, 2009, 5:30 PM

Hi, Adam:

With EIM and SSO, the user IDs do not have to "match" ... you define to
EIM what AS/400 user profile "matches" which Windows user ID, and once
you define this association, a person signs-on to their PC and once they
have "authenticated" they get a Kerberos token and when they attempt to
use any application that is enabled for "single sign-on" the token is
passed and accepted and the user gets right into that application
without having to "sign on" again, or be prompted for a userID and
password, etc.

And, it's not "all or nothing" -- you can set this up and then start
converting, by defining one user at a time to EIM/SSO.

Hope That Helps,

Mark

Adam West wrote:
Our AD administrator tells me that the userid's were set up one at a time and that they do not match our AS/400 user profiles.

--- On Thu, 4/30/09, tkreimer@xxxxxxxxxxxxxxx <tkreimer@xxxxxxxxxxxxxxx> wrote:

From: tkreimer@xxxxxxxxxxxxxxx <tkreimer@xxxxxxxxxxxxxxx>
Subject: RE: Import User Profiles from the i?
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Date: Thursday, April 30, 2009, 3:58 PM

Back to the AD idea, I haven't set this up myself (yet), but it was my
understanding that the point of EIM (Enterprise Identity Mapping) was to
map AS/400 profiles to AD, just for such purposes.

=====================
Tom Kreimer
Network Manager
Buckhorn Inc, Milford OH
(513)831-4403 opt 1, 237

From:
Adam West <adamster@xxxxxxxxx>
To:
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date:
04/30/2009 11:28 AM
Subject:
RE: Import User Profiles from the i?
Sent by:
midrange-l-bounces@xxxxxxxxxxxx

What I want to do is use AS/400 Userid's and Passwords to sign into
Infoview. I thought that there might be a way to import this information
from the AS/400 into the CMC somehow. I have read a little bit about using
LDAP from the 400 and managed to create the LDAP on the 400 but how do I
import this info into the CMS. I recently discarded the idea of Active
Directory because the user ids in AD are not always the same as on 400.

--- On Mon, 4/27/09, Walden H. Leverich <WaldenL@xxxxxxxxxxxxxxx> wrote:

From: Walden H. Leverich <WaldenL@xxxxxxxxxxxxxxx>
Subject: RE: Import User Profiles from the i?
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Date: Monday, April 27, 2009, 9:04 PM

Adam,

What do you mean by "import" them to SQLServer? Do you want to make
SQLServer logins w/the same name? You also mention AD, are you trying to
create AD users w/the same name? And if so, do you still need SQLServer
logins, or can you use integrated security? A little more background on
what you're trying to do may be helpful.

-Walden

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.