Testing network authentication service configuration on System A

 

Now that you have completed the network authentication service configuration tasks for System A, you need to test that your configuration works correctly. You can do this by requesting a ticket granting ticket for the System A principal name.

To test the network authentication service configuration, follow these steps:

Ensure that you have created a home directory for your i5/OS® user profile before performing this procedure.

  1. On a command line, enter QSH to start the Qshell Interpreter.

  2. Enter keytab list to display a list of principals registered in the keytab file. In this scenario, krbsvr400/systema.myco.com@MYCO.COM should display as the principal name for System A.

  3. Enter kinit -k krbsvr400/systema.myco.com@MYCO.COM. If this is successful, then the kinit command is displayed without errors.

  4. Enter klist to verify that the default principal is krbsvr400/systema.myco.com@MYCO.COM.
Now that you have tested the network authentication service configuration, you can create an EIM identifier for John Day.

 

Parent topic:

Scenario: Creating a single signon test environment
Previous topic: Creating home directory for John Day on System A
Next topic: Creating an EIM identifier for John Day