Complete the configurations for network authentication service and EIM on iSeries B and iSeries C

Although the Synchronize Functions wizard propagates most of the configuration that you need for a single signon environment, you still need to perform some additional tasks to complete your single signon configuration on iSeries™ Navigator B and iSeries Navigator C.

These are the tasks you need to perform on iSeries B and iSeries C, depending on how you designed your single signon environment:

  1. Add i5/OS™ service principals to the Kerberos server.
  2. Create a home directory for each of your users.
  3. Test network authentication service.
  4. Create EIM identifiers for your users.
  5. Create source associations and target associations for the EIM identifiers.
  6. (Optional) Create policy associations.
  7. (Optional) Enable the registries to participate in lookup operations and to use the policy associations.
  8. Test the EIM mappings.
  9. (Optional) Configure iSeries Access for Windows® applications to use Kerberos.
  10. Verify network authentication service and EIM configuration.

Use the Enable single signon for i5/OS scenario as a guide as you complete the configurations on iSeries B and iSeries C. This scenario provides step-by-step instructions for completing all the tasks required for single signon.

You have now completed the tasks required to propagate the EIM and network authentication service configurations from iSeries A to iSeries B and iSeries C.

Parent topic: Scenario: Propagate network authentication service and EIM across multiple systems
Previous topic: Propagate system settings from the model system (iSeries A) to iSeries B and iSeries C
Next topic: Configure network authentication service and EIM on the V5R2 or later system, iSeries D