Re: Security on NFS mounts.

Unless the Windows users are using biometrics, such as a fingerprint
reader on their laptop, won't they still log on to their PC's with their
password so we will still have the 'lost or forgotten password' issue?

I don't believe that ACS will use Windows credentials so they will still
need to log on to 5250. No bypass signon. Therefore can't change them to
*NONE. (What a HUGE step backward!) I wonder if someone submitted that
as a RFE if IBM would answer that in any way other than 'get off of 5250'?

We actually did this awhile ago. Used the fingerprint reader. Eliminated
passwords for many users in both Windows and IBM i. We thought that was a
requirement for some medical devices we were making. Had it all rolled
out and working. When the medical issue was resolved it was all
abandoned. This was prior to ACS.

Looked at some software to help manage Kerberos but at $15/user we figured
we could get some monkey to key the updates for cheaper than that. "Oh
but we have all these cool reports!" "Nice, but I am looking for a
product to do ..."


Rob Berendt