Re: Synchronized Passwords accross IBM i & Active Directory

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

Buzz

I found it very interesting - when you have time - heh - take a look at 
the tutorial that I cited at developerworks - back a few posts.

There are actually EIM APIs for systems other than IBM i - it is built 
around LDAP - in fact, the IBM Directory Server (and LDAP server) is 
where all the EIM info goes.

But there doesn't appear to be anyone obviously using EIM in other 
products or platforms.

Regards
Vern

On 4/4/2014 8:29 AM, Buzz Fenner wrote:
> On Thu, 03 Apr 2014 16:19:18, Vernon Hamberg wrote:
>
> > EIM and SSO is not new software - it is all on the system already and
> > has been since at least V5R2.
> > It is all configuration - and that would involve some dollars, due to
> > time, at least.
> > EIM is nicely described as a mapping from Windows user names to IBM i
> > user names - they don't have to be the same, nor do the passwords need
> > to be the same - once authenticated by Windows AD, IBM i trusts the
> > Active Directory server, so you are let in the door at Joe's Pool Hall
> > and Emporium.
> > Synchronizing becomes a non-issue.
> Vern, I did not know that EIM was bundled with the OS. Time constraints will
> probably rule out
> using it, but it sure looks interesting from what I'm reading at the
> InfoCenter. Thanks!
>
> --
> Buzz