Before you begin using iSeries™ Navigator to propagate the configuration on a model system to target systems, complete these planning work sheets.
All answers should be Yes before you proceed with propagating network authentication service.
| Prerequisite work sheet | Answers | ||||
|---|---|---|---|---|---|
| Is your i5/OS® V5R3 (5722-SS1), or later, for the following systems:
| Yes | ||||
| Have you applied the latest program temporary fixes (PTFs)? | Yes | ||||
| Is OS/400® V5R2 (5722-SS1), or later, running on System D? | Yes | ||||
| For System D, have you applied the latest program temporary fixes (PTFs), including the following fixes?
| |||||
| Are the following options and licensed programs installed on all your System i™ models?
| Yes | ||||
| Is iSeries Access for Windows (5722-XE1) installed on the administrator's PC? | Yes | ||||
| Is iSeries Navigator installed on the administrator's PC?
| Yes | ||||
| Have you installed the latest IBM® eServer™ iSeries Access for Windows service pack? See iSeries Access for the latest service pack. | Yes | ||||
| Do you have *SECADM, *ALLOBJ, and *IOSYSCFG special authorities? | Yes | ||||
| Do you have one of the following systems acting as the Kerberos server? If yes, specify which system.
|
| Answers | |
|---|---|
| What is the name of the system group? | MyCo system group |
| What systems will be included in this system group? | System B, System C, System D |
| What functions do you plan to propagate to this system group? | Network authentication service |
| For which services do you want to create keytab entries?
| i5/OS Kerberos Authentication |
| What are the service principal names for the systems to which you want to propagate configuration? |
krbsvr400/systema.myco.com@MYCO.COM
|
| What are the passwords that are associated with each of these principals? |
The password for the principals for Systems A, B, and C will be systema123. The password for the principal for System D will be systemd123. |
| What is the fully qualified host name for each System i platform? |
systema.myco.com
|
| What is the name of the Windows 2000 domain? A Windows 2000 domain is similar to a Kerberos realm. Microsoft Active Directory uses Kerberos authentication as its default security mechanism. MYCO.COM | |
| Questions | Answers | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| What is the name of the Kerberos default realm to which your System i platform belongs? A Windows 2000 domain is similar to a Kerberos realm. Microsoft Active Directory uses Kerberos authentication as its default security mechanism. MYCO.COM
| Are you using Microsoft Active Directory?
| Yes
| What is the Kerberos server for this Kerberos default realm? What is the port on which the Kerberos server listens?
|
| KDC: kdc1.myco.com
This is the default port for the Kerberos server. Do you want to configure a password server for this default realm? If yes, answer the following questions:
| What is the name of the password server for this Kerberos server?
Yes
| Password server: kdc1.myco.com
This is the default port for the password server. For which services do you want to create keytab entries?
|
i5/OS Kerberos Authentication
| What is the password for your i5/OS service principals?
| systemd123 | |