Re: Software for signons on iSeries and network

[DrFranken <midrange@xxxxxxxxxxxx>]

You need single sign-on along with Enterprise Identity Mapping.  This 
capability eliminates IBM i passwords completely  (except for admins).  
The very short course is that IBM i and your active directory are 
connected allowing the kerberose ticket present in your Windows session 
to be passed through IBM i to active directory for validation. The 
UserID sent back to IBM i from active directory is then correlated with 
that in EIM and that is the user ID used on IBM i.  Thus you do not need 
the same userID on Windows and IBM i, you have no password on i at all, 
and as a result changing your windows password doesn't have any affect 
whatever on your IBM i signon because that's the only password you have.

    - Larry "DrFranken" Bolhuis

On 2/26/2012 1:36 PM, fbocch2595@xxxxxxx wrote:
> Hi Folks, we’re looking for software that will authenticate iSeries signons against our active directory, and keep them in sync with a users network password.  In other words allowing automatic signon via the network password, AND keep them in sync.  The net outcome would be so that when a user changes their network password it would also change their 400 password.
>
> Your thoughts on this?
>
>
> Thanks, Frank