79 lines
5.2 KiB
HTML
79 lines
5.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="task" />
|
||
|
|
<meta name="DC.Title" content="Complete the configurations for network authentication service and EIM on iSeries B and iSeries C" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamzsynchconfig.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamzpropagatesystemsettings.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamzconfigurenetworkauthentication.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzamzcompletetheconfigurationsfornetwork" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Complete the configurations for network authentication service and
|
||
|
|
EIM on iSeries B
|
||
|
|
and iSeries C</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzamzcompletetheconfigurationsfornetwork"><a name="rzamzcompletetheconfigurationsfornetwork"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Complete the configurations for network authentication service and
|
||
|
|
EIM on iSeries B
|
||
|
|
and iSeries C</h1>
|
||
|
|
<div><div class="section"><p>Although the Synchronize Functions wizard propagates most of the
|
||
|
|
configuration that you need for a single signon environment, you still need
|
||
|
|
to perform some additional tasks to complete your single signon configuration
|
||
|
|
on <span class="keyword">iSeries™ Navigator</span> B and <span class="keyword">iSeries Navigator</span> C.</p>
|
||
|
|
<p>These are the tasks
|
||
|
|
you need to perform on <span class="keyword">iSeries</span> B
|
||
|
|
and <span class="keyword">iSeries</span> C, depending on
|
||
|
|
how you designed your single signon environment:</p>
|
||
|
|
</div>
|
||
|
|
<ol><li><span>Add <span class="keyword">i5/OS™</span> service
|
||
|
|
principals to the Kerberos server.</span></li>
|
||
|
|
<li><span>Create a home directory for each of your users.</span></li>
|
||
|
|
<li><span>Test network authentication service.</span></li>
|
||
|
|
<li><span>Create EIM identifiers for your users.</span></li>
|
||
|
|
<li><span>Create source associations and target associations for the EIM
|
||
|
|
identifiers.</span></li>
|
||
|
|
<li><span>(Optional) Create policy associations.</span></li>
|
||
|
|
<li><span>(Optional) Enable the registries to participate in lookup operations
|
||
|
|
and to use the policy associations.</span></li>
|
||
|
|
<li><span>Test the EIM mappings.</span></li>
|
||
|
|
<li><span>(Optional) Configure <span class="keyword">iSeries</span> Access
|
||
|
|
for Windows<sup>®</sup> applications
|
||
|
|
to use Kerberos.</span></li>
|
||
|
|
<li><span>Verify network authentication service and EIM configuration.</span></li>
|
||
|
|
</ol>
|
||
|
|
<div class="section"><p>Use the <a href="rzamzenablessoos400.htm">Enable
|
||
|
|
single signon for i5/OS</a> scenario as a guide as you complete the
|
||
|
|
configurations on <span class="keyword">iSeries</span> B
|
||
|
|
and <span class="keyword">iSeries</span> C. This scenario
|
||
|
|
provides step-by-step instructions for completing all the tasks required for
|
||
|
|
single signon.</p>
|
||
|
|
<p>You have now completed the tasks required to propagate
|
||
|
|
the EIM and network authentication service configurations from <span class="keyword">iSeries</span> A
|
||
|
|
to <span class="keyword">iSeries</span> B and <span class="keyword">iSeries</span> C.</p>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamzsynchconfig.htm" title="This scenario demonstrates how to use the Synchronize Functions wizard in iSeries™ Navigator to propagate a single signon configuration across multiple systems in a mixed OS/400® release environment. Administrators can save time by configuring single signon once and propagating that configuration to all of their systems, instead of configuring each system individually.">Scenario: Propagate network authentication service and EIM across multiple systems</a></div>
|
||
|
|
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzamzpropagatesystemsettings.htm" title="Put your short description here; used for first paragraph and abstract.">Propagate system settings from the model system (iSeries A) to iSeries B and iSeries C</a></div>
|
||
|
|
<div class="nextlink"><strong>Next topic:</strong> <a href="rzamzconfigurenetworkauthentication.htm">Configure network authentication service and EIM on the V5R2 or later system, iSeries D</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|