56 lines
3.3 KiB
HTML
56 lines
3.3 KiB
HTML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="dc.language" scheme="rfc1766" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<meta name="dc.date" scheme="iso8601" content="2005-09-06" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow"/>
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="keywords" content="when QRETSVRSEC=0, enrollment, user, QRETSVRSEC=0" />
|
|
<title>Enroll users when iSeries does not store passwords</title>
|
|
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
|
|
<link rel="stylesheet" type="text/css" href="ic.css" />
|
|
</head>
|
|
<body>
|
|
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
|
|
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
|
|
|
|
|
|
<a name="sec0"></a>
|
|
<h4 id="sec0">Enroll users when iSeries does not store passwords</h4><a id="idx112" name="idx112"></a><a id="idx113" name="idx113"></a>
|
|
<p>By default iSeries has a system value set that prevents storing passwords
|
|
with authentication entries. You can change this system value to enable iSeries to
|
|
keep passwords (as described in <a href="rzaefqret.htm#qret">Enable iSeries to automatically start authenticated connections</a>). If you prefer not to
|
|
have iSeries store passwords for security reasons, you can still enroll iSeries users
|
|
to NetWare.</p>
|
|
<p><span class="bold">To enroll users when iSeries does not store passwords:</span></p>
|
|
<ol type="1">
|
|
<li>Make sure that QNETWARE has a NetWare <a href="rzaefauthenentry.htm#authenentry"> authentication
|
|
entry</a> for each NDS tree on which you want to enroll iSeries users.</li>
|
|
<li>Define the NDS trees on which to enroll the iSeries profile by using
|
|
the CHGNWSUSRA command (described in <a href="rzaefcusra.htm#cusra">Enrolling users.)</a>
|
|
<p>Enrollment delays until iSeries temporarily accesses the profile's
|
|
password.</p></li>
|
|
<li>To start enrollment, do one of the following:
|
|
<ul>
|
|
<li>Have the iSeries user sign on to iSeries.</li>
|
|
<li>Have an iSeries user with *SECADM authority set the profile's password
|
|
by using the CHGUSRPRF command.</li>
|
|
<li>Have the iSeries user change the profile's password by using the CHGPWD
|
|
command.</li></ul>
|
|
<p>The iSeries profile attributes are propagated to NetWare. If a NetWare object
|
|
with this name does not exist, one is created with the same name as the iSeries profile.
|
|
If a NetWare object with this name does exist, it is updated with iSeries profile
|
|
changes. An authentication entry is not created.</p></li></ol>
|
|
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
|
|
</body>
|
|
</html>
|