Test network authentication service configuration on iSeries A

Now that you have completed the network authentication service configuration tasks for iSeries™ A, you need to test that your configuration works correctly. You can do this by requesting a ticket granting ticket for the iSeries A principal name.

To test the network authentication service configuration, follow these steps:
Note: Ensure that you have created a home directory for your i5/OS™ user profile before performing this procedure.
  1. On a command line, enter QSH to start the Qshell Interpreter.
  2. Enter keytab list to display a list of principals registered in the keytab file. In this scenario, krbsvr400/iseriesa.myco.com@MYCO.COM should display as the principal name for iSeries A.
  3. Enter kinit -k krbsvr400/iseriesa.myco.com@MYCO.COM. If this is successful, then the kinit command is displayed without errors.
  4. Enter klist to verify that the default principal is krbsvr400/iseriesa.myco.com@MYCO.COM.
Now that you have tested the network authentication service configuration, you can create an EIM identifier for John Day.
Parent topic: Scenario: Create a single signon test environment
Previous topic: Create home directory for John Day on iSeries A
Next topic: Create EIM identifier for John Day