RE: Directory Entry ussage

Rob,

That would be nice, life would be simplier.
Our Windows accounts do not match our iSeries accounts.
They can't because a single Windows user may have 5 iSeries users, depending on the user's requirements.

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Friday, September 09, 2016 11:12 AM
To: Midrange Systems Technical Discussion
Subject: RE: Directory Entry ussage

We use IBM Secure Identity Manager to create, disable, and delete id's (and to sync passwords) for IBM i, Notes and Windows.
When it creates or deletes an IBM i id we just have it do the same with directory entries.
We just don't care if they are an admin or not. Life is simpler this way.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: "Jim Oberholtzer" <midrangel@xxxxxxxxxxxxxxxxx>
To: "'Midrange Systems Technical Discussion'"
<midrange-l@xxxxxxxxxxxx>
Date: 09/09/2016 11:02 AM
Subject: RE: Directory Entry ussage
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Another one is RTVDSKINF. As Larry pointed out there are a number of
commands that will blow smoke if the directory entry does not exist.

What I do is match up the list of profiles to the directory entries and
make
sure it's a one to one correlation. Then when a profile is removed, the
directory entry goes with it.

--
Jim Oberholtzer
Agile Technology Architects


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob
Berendt
Sent: Friday, September 09, 2016 9:37 AM
To: Midrange Systems Technical Discussion
Subject: Re: Directory Entry ussage

Confirmed
STRNFSSVR SERVER(*ALL)
User not enrolled in system distribution directory.
File system error occurred. Error number 3498.


Rob Berendt