ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahl_5.4.0.1/rzahltip5.htm

54 lines
3.4 KiB
HTML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-09-06" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<title>iSeries NetServer security: Guest versus non-Guest</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<a name="tip5"></a>
<h2 id="tip5">iSeries NetServer security: Guest versus non-Guest</h2>
<p>When using iSeries NetServer&trade;, normal iSeries user profiles and passwords apply.
By default, only users with valid iSeries user profiles and passwords can access
resources on the iSeries. Windows 2000, Windows XP, and Windows Server 2003 offer
the option to select a different userid. If the passwords do not match, you
will see a password window. Windows will optionally remember the password.</p>
<p>An iSeries user profile is disabled from using iSeries NetServer when the
user has tried to access iSeries NetServer a number of times with an incorrect password.
An iSeries system value name, QMAXSIGN, specifies how many unpermitted access
attempts disable a user profile. The Windows operating system will try access
again when denied. So it may appear that the QMAXSIGN limit is reached before
the number of times actually tried by the client. If the user profile does
become disabled for iSeries NetServer, you can use one of several methods to re-enable
the user profile. See <a href="rzahlsecurityman.htm#reenable">Enable a disabled user profile</a> for more information.</p>
<p>If a user profile is not found that matches the userid that is used to
access iSeries NetServer, you may use an optionally configurable guest user profile.
This guest, created by the iSeries administrator who has *SECADM special authority,
should only have a password if guest print sharing is being used, and must
not have any special authorities. The guest user profile allows iSeries file
and print sharing by users who otherwise would not require an iSeries user profile.</p>
<a name="wq117"></a>
<div class="notetitle" id="wq117">Note:</div>
<div class="notebody">The guest user profile must have a password if it is to be used
for accessing print shares because the Network Print Server requires one.</div>
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>