Configure network authentication service on iSeries D

You need to configure network authentication service on iSeries™ D so that it matches the configuration settings on iSeries A.

Note: Any and all passwords used within this scenario are for example purposes only. They should not be used during an actual configuration.

To configure network authentication service, complete the following steps:

In iSeries Navigator, expand iSeries D > Security .
Right-click Network Authentication Service and select Configure to start the configuration wizard.
Note: After you have configured network authentication service, this option will be Reconfigure.
Review the Welcome page for information about what objects the wizard creates. Click Next.
On the Specify realm information page, enter MYCO.COM in the Default realm field and select Microsoft Active Directory is used for Kerberos authentication. Click Next.
On the Specify KDC information page, enter kdc1.myco.com for the name of the Kerberos server for this realm in the KDC field and enter 88 in thePort field. Click Next.
On the Specify password information page, select Yes to configure iSeries D to point to the password server configured for the default realm. The password server allows principals to change passwords on the Kerberos server and has already been configured. Enter kdc1.myco.com in the Password server field. The password server has the default port of 464. Click Next.
On the Select keytab entries page, select i5/OS Kerberos Authentication. Click Next.
On the Create i5/OS keytab entry page, enter and confirm a password. For example, iseriesd123. Click Next.
Optional: On the Create batch file page, select No.
On the Summary page, review the network authentication service configuration details. Click Finish.