Hi,
Found this in the archive....
My question, does anyone know if there is a V6R1 PTF to add AES support? SI43034 is V5R4 and the APAR doesn't mention any other PTFs.
Thanks
Adam Driver
IBM Certified Systems Administrator - System i
Consultant - Infrastructure Technician
Exacta Corporation
608.661.6697 ext 2581
adriver@xxxxxxxxxxxx<mailto:adriver@xxxxxxxxxxxx>
Please consider your environmental responsibility before printing this e-mail.
Check to see what encryption is being used. If the AD server is 2008 R2, chances are it is trying to use encryption that is not supported on the IBM i. See PTF SI43034. Make sure you have all the encryption types either supported or turned off.
Windows 7 uses AES encryption instead of DES by default. Without the PTF, IBM i does not support AES. Your users that are not experiencing problems most likely have DES configured.
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects
On 10/12/2011 8:59 AM, gkern@xxxxxxxxxxxxxxxx wrote:
We've been using Kerberos authentication for awhile now, and I have one
user running windows 7 pro, who has been configured to use kerberos with
both our Production and Test partitions.
Ever since the switch to kerberos was made for this one user, when
starting a 5250 or iNav, his log on to the Production system takes 30-45
seconds, while log on to Test is instant.
As soon as the Production signon is changed to not use kerberos, the log
on process returns to instant sign on.
I have four other users running windows 7 pro, all using iSeries Access
6.1 and none of them exhibit this behavior.
Anyone with any idea why only one user when connecting to only one
partition would experience such a slow down in the sign on process?
Thanks, Jerry
Gerald Kern - Information Technology
Programming Supervisor
IBM Certified RPG IV Developer
Lotus Notes/Domino 8.0.1 Administrator
The Toledo Clinic, Inc.
4235 Secor Road
Toledo, OH 43623
Phone 419-479-5535
gkern@xxxxxxxxxxxxxxxx
[Like us on Facebook!]<
http://on.fb.me/t7A5KE>
- WEA Trust Confidentiality Notice -
This electronic mail message and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. Dissemination, forwarding, printing, or copying of this electronic mail without the consent of the sender is strictly prohibited. If you are not the intended recipient or the person responsible for delivering the electronic mail to the intended recipient, be advised that you have received this electronic mail in error; please immediately notify the sender by return mail.
midrange.com
