IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
 View Only
  • 1.  Lost login to folder after password change in windows

    Posted Tue August 13, 2024 06:20 PM

    Hello,

    We have some folders located on the IBM i that we access from Windows workstations. People who need to access those folders have a drive mapped to them

    When their password expires on the IBM i, and they try to access their IFS shared folders, a message appears asking for a username and password. The problem is that there are 1200 users and when their password expires on the IBM i, they can no longer access the IBM i shared resources. Performing this task manually results in overwhelming the support area. Is there a way to automate this task, other than the option of having a user's password never expire, since auditing issues require it?



    ------------------------------
    Regards,

    Jorge Lee
    ------------------------------


  • 2.  RE: Lost login to folder after password change in windows

    Posted Tue August 13, 2024 09:06 PM
    Edited by Satid S Tue August 13, 2024 09:08 PM

    Dear Jorge

    For the situation you described, you should consider deploying a product called self service password reset for IBM i.  This kind of product helps offload user support help desk team on this matter.  Do a Google on "ibm i  self service password reset" and you will find many vendors offering such a product.  



    ------------------------------
    Satid S
    ------------------------------



  • 3.  RE: Lost login to folder after password change in windows

    Posted Wed August 14, 2024 02:46 AM

    Dear Jorge,

    The ideal solution, in my opinion, is to set up an SSO based on EIM (and Kerberos).

    When using shared folders (via NetServer), the user's password is no longer required, the connection is automatic and very fast. There are no longer any disabled NetServer accounts.

    This SSO can also be used for all ACS components (Telnet 5250, SQL, file transfer, etc.).

    It's a very robust solution that I recommend.



    ------------------------------
    Dominique Gayte
    Président (CEO)
    gayte it
    Saint Jean la Fouillouse
    +33630170255
    ------------------------------