Re: Weird Kerberos sign on behavior with iSeries Access 6.1

[Jim Oberholtzer <midrangel@xxxxxxxxxx>]

Check to see what encryption is being used.  If the AD server is 2008 
R2, chances are it is trying to use encryption that is not supported on 
the IBM i.  See PTF SI43034.  Make sure you have all the encryption 
types either supported or turned off.

Windows 7 uses AES encryption instead of DES by default.  Without the 
PTF, IBM i does not support AES.    Your users that are not experiencing 
problems most likely have DES configured.

Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects


On 10/12/2011 8:59 AM, GKern@xxxxxxxxxxxxxxxx wrote:
> We've been using Kerberos authentication for awhile now, and I have one
> user running windows 7 pro, who has been configured to use kerberos with
> both our Production and Test partitions.
>
> Ever since the switch to kerberos was made for this one user, when
> starting a 5250 or iNav, his log on to the Production system takes 30-45
> seconds, while log on to Test is instant.
>
> As soon as the Production signon is changed to not use kerberos, the log
> on process returns to instant sign on.
>
> I have four other users running windows 7 pro, all using iSeries Access
> 6.1 and none of them exhibit this behavior.
>
> Anyone with any idea why only one user when connecting to only one
> partition would experience such a slow down in the sign on process?
>
> Thanks, Jerry
>
> Gerald Kern - Information Technology
> Programming Supervisor
> IBM Certified RPG IV Developer
> Lotus Notes/Domino 8.0.1 Administrator
> The Toledo Clinic, Inc.
> 4235 Secor Road
> Toledo, OH 43623
> Phone 419-479-5535
> gkern@xxxxxxxxxxxxxxxx