Just to be clear, in Explorer this address prompts for authentication:
\\my_ibmi\share
After you install iACS and configure it for Kerberos, in Explorer this address opens without authentication:
\\my_ibmi\share
That doesn't seem right. Is it possible that someone's entering credentials between the two steps I listed above? Does the NetServer show the Windows or IBMi user names? You can check that in Navigator by searching for "Sessions".
-----Original Message-----
From: Rob Berendt [mailto:rob@xxxxxxxxx]
Sent: Monday, July 01, 2019 2:36 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: EIM and NetServer
We are setting up EIM for NetServer for two main reasons.
One: Avoid the user getting prompted for user id and password.
Two: Avoid having to load any form of iACS or it's predecessors.
These are executive type users who do not access IBM i data directly either through 5250, browser, etc. They only have a user id on that system to get to the share defined for them in the IFS.
However, if I try to
File:\\myibmi<File://myibmi>
I get prompted for user id and password, even after I set them up in EIM.
The only way I found around this was to load iACS, create a system configuration for that lpar of IBM i and tell it to connect using Kerberos. Again, I'd rather not have to load software such as iACS on to the computer for these users.
Sure I could run it as a share, thumb drive, etc, however I also don't want to create a system configuration either.
Is there some way in Windows I can tell that to open that share using Kerberos?
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
midrange.com
