iSeries NetServer support for Kerberos v5 authentication

iSeries NetServer™ supports using Kerberos Version 5 (v5) for user authentication. In order to enable iSeries NetServer support for Kerberos v5 authentication, you must first have the iSeries Navigator Security option, Network authentication service, and Enterprise Identity Mapping (EIM) configured on the iSeries server.

Enable support for Kerberos v5 authentication

You are strongly encouraged to use the iSeries NetServer configuration wizard to enable support for Kerberos v5. The configuration wizard helps you configure the necessary services required for use with Kerberos v5. See iSeries NetServer configuration wizard for instructions on how to start the iSeries NetServer configuration wizard.

You may enable iSeries NetServer support for Kerberos v5 authentication through iSeries NetServer properties. However, you must also complete the Additional configuration requirements for Kerberos v5 authentication enablement.

If you fail to complete all of the configuration requirements, you will be unable to use iSeries NetServer once you restart the server.

1. In iSeries Navigator, expand Network> Servers> TCP/IP.
2. Right-click iSeries NetServer and select Properties.
3. On the Security tab, click the Next Start button.
4. On the Security Next Start dialog box, select one of the following authentication methods:
   • If you select Passwords/Network authentication, clients that do not support Kerberos or clients that do support Kerberos but are not currently participating in a Kerberos realm, use encrypted passwords to authenticate.
   • If you select Network authentication, all clients must use Kerberos to authenticate with the server. Therefore, only clients that support Kerberos v5 can connect to iSeries NetServer once this support is enabled. The following Windows clients do not support Kerberos v5:
     • Windows 95
     • Windows 98
     • Windows NT
     • Windows Me
5. Click OK.