ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzakh_5.4.0.1/rzakhpropagatescenario_propagateiserisatobandc.htm

99 lines
7.5 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Propagate system settings from the model system (iSeries A) to iSeries B and iSeries C" />
<meta name="DC.Relation" scheme="URI" content="rzakhscenmc.htm" />
<meta name="DC.Relation" scheme="URI" content="rzakhpropagatescenario_createasystemgroup.htm" />
<meta name="DC.Relation" scheme="URI" content="rzakhpropagatescenario_configurenasoniseriesd.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzakhpropagatescenario_propagateiserisatobandc" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Propagate system settings from the model system (iSeries A) to iSeries
B and iSeries C</title>
</head>
<body id="rzakhpropagatescenario_propagateiserisatobandc"><a name="rzakhpropagatescenario_propagateiserisatobandc"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Propagate system settings from the model system (iSeries A) to iSeries
B and iSeries C</h1>
<div><div class="section">The Synchronize Functions wizard in iSeries™ Navigator allows you to propagate
system settings, like a network authentication service configuration, to multiple
endpoint systems. Complete these tasks to propagate the network authentication
service configuration to the target systems:</div>
<ol><li class="stepexpand"><span>In iSeries Navigator,
expand <span class="menucascade"><span class="uicontrol">Management Central (iSeriesMC1)</span> &gt; <span class="uicontrol">System Groups</span></span>.</span></li>
<li class="stepexpand"><span>Right-click <span class="uicontrol">MyCo system group</span> and select <span class="menucascade"><span class="uicontrol">System Values</span> &gt; <span class="uicontrol">Synchronize Functions</span></span>. This launches the <span class="uicontrol">Synchronize Functions Wizard</span>.</span></li>
<li class="stepexpand"><span>On the <span class="uicontrol">Welcome</span> page, review the information
about the Synchronize Functions wizard, and click <span class="uicontrol">Next</span>.
The <span class="uicontrol">Welcome</span> page lists the functions that you can choose
to synchronize later in the wizard. </span> <div class="note"><span class="notetitle">Note:</span> When you propagate network
configuration service configuration among servers, sensitive information like
passwords are sent across the network. You should use SSL to protect this
information, especially if it is being sent outside your Local Area Network
(LAN). See <a href="../rzain/rzainmc.htm">Scenario:
Secure all connections to your Management Central server with SSL</a> for
details.</div>
</li>
<li class="stepexpand"><span>On the <span class="uicontrol">Model System</span> page, select <span class="uicontrol">iSeries
A</span> as the model system, and click <span class="uicontrol">Next</span>. </span> This model system will be used as a base for synchronizing the network
authentication service configuration to other systems.</li>
<li class="stepexpand"><span>On the <span class="uicontrol">Target Systems and Groups</span> page, select <span class="uicontrol">MyCo
system group</span>. Click <span class="uicontrol">Next</span>.</span></li>
<li class="stepexpand"><span>On the <span class="uicontrol">What to Update </span> page, select <span class="uicontrol">Network
Authentication Service (Kerberos)</span>. Click <span class="uicontrol">Verify configuration</span>.
After the configuration has been verified, click <span class="uicontrol">Next</span>.</span> <div class="note"><span class="notetitle">Note:</span> If the verification of the network authentication service does
not complete successfully, then there may be a problem with the network authentication
service configuration on the model system. To recover from this error, you
must check the configuration on the model system, fix the configuration and
then return to Step 2 in these instructions. </div>
</li>
<li class="stepexpand"><span>On the <span class="uicontrol">Network Authentication Service</span> page,
select <span class="uicontrol">i5/OS Kerberos Authentication</span> and enter <samp class="codeph">iseriesa123</samp> in
the <span class="uicontrol">Password</span> and <span class="uicontrol">Confirm password</span> fields.
Click <span class="uicontrol">Next</span>.</span> <div class="note"><span class="notetitle">Note:</span> This password is used
for the keytab entry on each target system. If your security policy requires
a different password on each system, then you can skip this step. Instead,
after you complete this wizard, you can <a href="rzakhkkeytab.htm#rzakhkkeytab">manually</a> add
the keytab entries to individual systems and enter a different password for
each system.</div>
</li>
<li class="stepexpand"><span>On the <span class="uicontrol">Summary</span> page, verify that the appropriate
settings are listed on this page. Click <span class="uicontrol">Finish</span>.</span></li>
<li class="stepexpand"><span>By default, a dialog box is displayed that indicates the Synchronize
Functions task has started. However, if you have changed the default setting,
this dialog box is not displayed. Click <span class="uicontrol">OK</span>.</span></li>
<li class="stepexpand"><span>The <span class="uicontrol">Synchronize Functions Status</span> dialog
box is displayed. Verify that the task has completed successfully.</span> The
task completed successfully on all the endpoint systems except iSeries D.
Since iSeries D
is a i5/OS™ Version
5 Release 2, it does not support the Synchronize Functions wizard.<p>To recover
from this error, you must manually configure network authentication service
on iSeries D
so that it matches the configuration on the model system (iSeries A).</p>
</li>
</ol>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzakhscenmc.htm" title="Use the following scenario to become familiar with the prerequisites and objectives for propagating your network authentication service configuration across multiple systems.">Scenario: Propagate network authentication service configuration across multiple systems</a></div>
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzakhpropagatescenario_createasystemgroup.htm">Create a system group</a></div>
<div class="nextlink"><strong>Next topic:</strong> <a href="rzakhpropagatescenario_configurenasoniseriesd.htm">Configure network authentication service on iSeries D</a></div>
</div>
</div>
</body>
</html>