You can secure iSeries™ NetServer™ by controlling i5/OS® user profile authorities.
iSeries NetServer authenticates client files and print requests that are based on the user identity (user ID) and password that are used in the Windows® desktop logon. If an i5/OS user profile matches the Windows desktop client user ID, then the passwords are checked. If the passwords do not match, iSeries NetServer prompts the client to enter the correct one.
If the Windows user ID is longer than 10 characters (also the maximum length of the user profile name on the i5/OS operating system), then iSeries NetServer truncates the Windows user ID to 10 characters and attempts to match it with an i5/OS user profile. For example, an i5/OS user profile called ADMINISTRA can be created to match the Windows Administrator user without requiring guest support.
In order to access iSeries NetServer shared resources, clients might not need an i5/OS user profile that matches their Windows desktop user. iSeries NetServer can provide guest support for those clients that need only basic file and print services. This support is not automatically enabled.
To configure this support, follow these steps:
You need *IOSYSCFG and *SECADM special authorities to change the iSeries NetServer guest configuration. Changes take effect the next time iSeries NetServer is started. In addition, the guest user profile should not have any special authorities and should have access only to those i5/OS integrated file system directories and output queues that are used for basic file and print services.