Not sure, but I would think Mac can hook into active directory since it's just another LDAP directory under the windows moniker.
This seems to make me believe it is automatic:
http://training.apple.com/pdf/wp_integrating_active_directory_ml.pdf
FYI, I notice you mentioned having to change network security policy... There was a later IBM i patch (see below) that makes it so you don't have to lessen your windows / active directory security just to accomidate the IBM i. (meaning you no longer have to use the old, broken DES_* algorithms which were deprecated years ago in later versions of Windows and active directory).
Fix Release Description
--------- --------- ----------------------------
SI42919 V7R1 Adds AES & RC4 encryption support (krb)
SI42957 V6R1 " "
SI43034 V5R4 " "
SI43918 V7R1 Updates KRB5 header file in QSYSINC
SI43919 V6R1 " "
SI43920 V5R4 " "
-----Original Message-----
From: Justin Taylor [mailto:JUSTIN@xxxxxxxxxxxxx]
Sent: Wednesday, December 10, 2014 2:59 PM
To: MIDRANGE-L (midrange-l@xxxxxxxxxxxx)
Subject: EIM & Mac
Has anyone actually set up IBM's Enterprise Identity Mapping (EIM) on Mac? We've used EIM since about '08 but only on Windows. For Win7, the setup is simple. Just:
--Go into Local Security Policy => Security Options => Network security: Configure encryption types allowed for Kerberos --Check DES_CBC_CRC, DES_CBC_MD5, RC4_HMAC_MD5, AES128_HMAC_SHA1 & AES256_HMAC_SHA1 --Reboot & Presto!
But Mac? I haven't a clue.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
midrange.com
