Configure iSeries Access for Windows applications to use Kerberos authentication

Based on your single signon objectives, all users in the Order Receiving Department must use Kerberos to authenticate before they can use iSeries™ Navigator to access iSeries A and iSeries B. Therefore, you need to configure iSeries Access for Windows® to use Kerberos authentication.To configure iSeries Access for Windows applications to use Kerberos authentication, follow these steps:
Note: Each of your users needs to perform all of these steps on their own PC.
  1. Log on to the Windows (R) 2000 domain by signing in to the PC.
  2. In iSeries Navigator on the PC, right-click iSeries A and select Properties.
  3. On the Connection page, select Use Kerberos principal name, no prompting. This will allow iSeries Access for Windows connections to use the Kerberos principal name and password for authentication.
  4. A message is displayed that indicates you need to close and restart all applications that are currently running for the changes to the connection settings to take effect. Click OK. Then, end and restart iSeries Navigator.
  5. Repeat these steps for iSeries B.
Parent topic: Scenario: Enable single signon for i5/OS
Previous topic: Test EIM identity mappings
Next topic: Verify network authentication service and EIM configuration