Set up iSeries for user enrollment

When you install NetWare Enhanced Integration, a default QNETWARE user profile is created with *NONE for a password. You need to change the QNETWARE profile so it can log in to the NDS trees on which iSeries users are to be enrolled.

To set up your iSeries system for user enrollment:

• If you did not already do so (described in Enable iSeries to automatically start authenticated connections), set the Retain Server Security (QRETSVRSEC) system value to 1. This speeds up user access by having iSeries retain security information such as passwords, which are needed to authenticate users' access to NetWare. However, if you choose not to let iSeries store passwords, you can still enroll iSeries users on NetWare.
• Set the password for QNETWARE on iSeries.

  If you used the same password for the QNETWARE user objects on most or all of the NDS trees, use the same password for QNETWARE on iSeries.

  To set the password for the QNETWARE profile, enter:

    CHGUSRPRF USRPRF(QNETWARE) PASSWORD(password)

  Note that you cannot enable the QNETWARE profile; iSeries intercepts and ignores attempts to change the profile to an enabled state. If QNETWARE is enrolled on NetWare, you also cannot set the password for QNETWARE to *NONE. If you do, the QNETWARE user profile automatically disables the QNETWARE user object on NetWare; then user enrollment cannot proceed.

• To extend QNETWARE profile changes, including passwords, to the NDS trees on which you enroll iSeries users, use the CHGNWSUSRA command (described in Enroll iSeries users on NetWare). Specify the NDS trees that should receive the profile changes or use the value *NWSA to refer to network server attributes that you defined.
• If you want to enroll iSeries users on NDS trees to which the QNETWARE profile changes were not propagated in the previous step, use the ADDNTWAUTE command. Use this command to create authentication entries for the QNETWARE profile on those NDS trees.

  You also might choose this option if you want to have different passwords for QNETWARE on the various NDS trees.

  To create an authentication entry for the QNETWARE user profile that has a password of OWNER in NDS tree TREE1 in NDS context MAIN, you would enter:

  ADDNTWAUTE SVRTYPE(*NDS) NDSTREE(TREE1) 
  USRPRF(QNETWARE) PASSWORD(OWNER)
   NDSCTX(MAIN)  

  To create a NetWare authentication entry for the QNETWARE user object, which has a password of OWNER in SERVER1, you would enter:

  ADDNTWAUTE SVRTYPE(*NETWARE3) SERVER(SERVER1) 
  USRPRF(QNETWARE) PASSWORD(OWNER)

  For more information, see Manage NetWare server connections and authentication.