Test EIM identity mappings

Now that you have created all the associations that you need, you must verify that EIM mapping lookup operations return the correct results based on the configured associations. For this scenario, you must test the mappings used for the identifier associations for each of the administrators and you must test the mappings used for the default registry policy associations. To test the EIM mappings, follow these steps:

Test mappings for John Day

To test that identifier mappings work as expected for John Day, follow these steps:

  1. In iSeries™ Navigator, expand iSeries A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.
    Note: You may be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:
    1. User type: Distinguished name
    2. Distinguished name: cn=administrator
    3. Password: mycopwd
      Note: Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.
  2. Right-click MyCoEimDomain and select Test a mapping....
  3. On the Test a mapping dialog box, specify or Browse... to select the following information, and click Test:
    1. Source registry: MYCO.COM
    2. Source user: jday
    3. Target registry: ISERIESA.MYCO.COM
    Results will display in the Mapping found portion of the page, as follows:
    For these fields See these results
    Target user JOHND
    Origin EIM Identifier: John Day
  4. Click Close.
  5. Repeat these steps but select ISERIESB.MYCO.COM for the Target registry field. Results will display in the Mapping found portion of the page, as follows:
    For these fields See these results
    Target user DAYJO
    Origin EIM Identifier: John Day

    Test mappings for Sharon Jones

    To test the mappings used for the individual associations for Sharon Jones, follow these steps:

  6. In iSeries Navigator, expand iSeries A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.
    Note: You may be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:
    1. User type: Distinguished name
    2. Distinguished name: cn=administrator
    3. Password: mycopwd
      Note: Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.
  7. Right-click MyCoEimDomain and select Test a mapping....
  8. On the Test a mapping dialog box, specify or Browse... to select the following information, and click Test:
    1. Source registry: MYCO.COM
    2. Source user: sjones
    3. Target registry: ISERIESA.MYCO.COM
    Results will display in the Mapping found portion of the page, as follows:
    For these fields See these results
    Target user SHARONJ
    Origin EIM Identifier: Sharon Jones
  9. Click Close.
  10. Repeat these steps but select ISERIESB.MYCO.COM for the Target registry field. Results will display in the Mapping found portion of the page, as follows:
    For these fields See these results
    Target user JONESSH
    Origin EIM Identifier: Sharon Jones

    Test mappings used for default registry policy associations

    To test that mappings work as expected for the users in the Order Receiving Department, as based on the policy associations that you defined, follow these steps:

  11. In iSeries Navigator, expand iSeries A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.
    Note: ou may be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:
    1. User type: Distinguished name
    2. Distinguished name: cn=administrator
    3. Password: mycopwd
      Note: Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.
  12. Right-click MyCoEimDomain and select Test a mapping....
  13. On the Test a mapping dialog box, specify or Browse... to select the following information, and click Test:
    1. Source registry: MYCO.COM
    2. Source user: mmiller
    3. Target registry: ISERIESA.MYCO.COM Results will display in the Mapping found portion of the page, as follows:
      For these fields See these results
      Target user SYSUSERA
      Origin Registry policy association
  14. Click Close.

    To test the mappings used for the default registry policy association that maps your users to the SYSUSERB profile on iSeries B, follow these steps:

  15. In iSeries Navigator, expand iSeries A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain
    Note: You may be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:
    1. User type: Distinguished name
    2. Distinguished name: cn=administrator
    3. Password: mycopwd
      Note: Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.
  16. Right-click MyCoEimDomain and select Test a mapping....
  17. On the Test a mapping dialog box, specify or Browse... to select the following information, and click Test:
    1. Source registry: MYCO.COM
    2. Source user: ksmith
    3. Target registry: ISERIESB.MYCO.COM
    Results will display in the Mapping found portion of the page, as follows:
    For these fields See these results
    Target user SYSUSERB
    Origin Registry policy association
  18. Click Close. If you receive messages or errors that indicate problems with your mappings or with communications, see Troubleshoot EIM to help you find solutions to these problems.
Parent topic: Scenario: Enable single signon for i5/OS
Previous topic: Enable registries to participate in lookup operations and to use policy associations
Next topic: Configure iSeries Access for Windows applications to use Kerberos authentication