RE: EIM and QNTC

For QNTC, it's either matching user/passwords or EIM.

Google gave this link for the error you listed.
https://www-01.ibm.com/support/docview.wss?uid=nas8N1014971

I've set up EIM once, back in 2008, so I don't have a lot of experience in the actual setup.



-----Original Message-----
From: Gad Miron [mailto:gadmiron@xxxxxxxxx]
Sent: Friday, July 05, 2019 3:08 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: RE: EIM and QNTC

Thanks Rob, Justin


I had an expert looking at this issue and was told that SSO is required for QNTC to skip the the password sync.
He then proceeded with configuring Kerberos on out test machine .
(I know that a script for creating special kerberos users in the domain was successfully executed)

testing it with System i Navigator (the old c/s version) resulted with a message
"CYBSY1012 - Kerberos service principal not found for system ACTEST."

I was hoping there was a way to bypass the Kerberos-SSO issue but (if I understood correctly) it seems there is no such way.

Gad

EIM itself doesn?t require remote password management. I still have a
password for the reasons you mentioned. However, to use EIM & QNTC
together, it is required. Here?s a snippet from the IBM doc, ?The
user's IBM i user profile must have the local password management
(LCLPWDMGT) parameter set to *NO.?

https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_73/ifs/rzaaxn
tkerb.htm


One caveat about EIM & QNTC is that it can have problems with very
long running 5250 jobs, and batch jobs. This issue is around Kerberos
ticket expiration. IBM maintains this isn?t a bug, so I submitted an RFE.
http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=1
31534

-