ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaef_5.4.0.1/rzaefsec0.htm

56 lines
3.3 KiB
HTML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-09-06" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="keywords" content="when QRETSVRSEC=0, enrollment, user, QRETSVRSEC=0" />
<title>Enroll users when iSeries does not store passwords</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<a name="sec0"></a>
<h4 id="sec0">Enroll users when iSeries does not store passwords</h4><a id="idx112" name="idx112"></a><a id="idx113" name="idx113"></a>
<p>By default iSeries has a system value set that prevents storing passwords
with authentication entries. You can change this system value to enable iSeries to
keep passwords (as described in <a href="rzaefqret.htm#qret">Enable iSeries to automatically start authenticated connections</a>). If you prefer not to
have iSeries store passwords for security reasons, you can still enroll iSeries users
to NetWare.</p>
<p><span class="bold">To enroll users when iSeries does not store passwords:</span></p>
<ol type="1">
<li>Make sure that QNETWARE has a NetWare <a href="rzaefauthenentry.htm#authenentry"> authentication
entry</a> for each NDS tree on which you want to enroll iSeries users.</li>
<li>Define the NDS trees on which to enroll the iSeries profile by using
the CHGNWSUSRA command (described in <a href="rzaefcusra.htm#cusra">Enrolling users.)</a>
<p>Enrollment delays until iSeries temporarily accesses the profile's
password.</p></li>
<li>To start enrollment, do one of the following:
<ul>
<li>Have the iSeries user sign on to iSeries.</li>
<li>Have an iSeries user with *SECADM authority set the profile's password
by using the CHGUSRPRF command.</li>
<li>Have the iSeries user change the profile's password by using the CHGPWD
command.</li></ul>
<p>The iSeries profile attributes are propagated to NetWare. If a NetWare object
with this name does not exist, one is created with the same name as the iSeries profile.
If a NetWare object with this name does exist, it is updated with iSeries profile
changes. An authentication entry is not created.</p></li></ol>
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>