Plan network authentication service

Before implementing network authentication service or a Kerberos solution on your network it is essential to complete the necessary planning tasks.

To plan network authentication service and a Kerberos implementation, you will need to gather the appropriate information about the systems and users on your network. Several planning work sheets have been provided to help you to configure network authentication service in your network.

Note: Many different Kerberos authentication solutions exist and can be used in your enterprise. This information will focus on planning an iSeries™ implementation and considerations when using network authentication service with a Kerberos server configured in Microsoft^® Windows^® Active Directory or i5/OS™ PASE.

For information about setting up a Kerberos server in Microsoft Windows Active Directory, see Microsoft Windows 2000 help Link outside the Information center

The following IBM^® IBM e(logo) server

platforms support Kerberos authentication. For information about platform-specific Kerberos implementation see the following sources:

pSeries^®
- IBM Network Authentication Service AIX^®, Linux^®, and Solaris Administrator's and User's Guide.
- IBM Network Authentication Service AIX, Linux, and Solaris Application Development Reference.
  Note: You can find this documentation in the AIX 5L™ Expansion Pack and Bonus Pack CD.
zSeries^®
- z/OS^® Security Server Network Authentication Service

Use these tasks to help you plan network authentication service.

Plan realms
Understanding your enterprise can help you plan for realms in your environment.
Host name resolution considerations
Ensure that Kerberos authentication and host name resolution work properly with your Kerberos enabled applications by verifying that your PCs and your iSeries servers resolve the same host name for the system on which the service application resides.

Parent topic: Plan