Thank you again Satid.
And if you have users without Kerberos select "Password/Network autentication".
"On the Security Next Start dialog box, select one of the following authentication methods:
- If you select Passwords/Network authentication, clients that do not support Kerberos or clients that do support Kerberos but are not currently participating in a Kerberos realm use encrypted passwords to authenticate."
and
"If you select Network authentication, all clients must use Kerberos to authenticate with the server. Therefore, only clients that support Kerberos V5 can connect to IBM i NetServer after this support is enabled. The following Windows clients do not support Kerberos V5:"
------------------------------
Erik Aasland
IBMi administrator
Fremtind Insurance
------------------------------
Original Message:
Sent: Tue March 14, 2023 08:08 PM
From: Satid Singkorapoom
Subject: SSO - IFS
Dear Erik
You need to configure NetServer component to accept Network Authentication (Kerberos) for it to work with SSO. You do this by changing NetServer's Authentication Method attribute to *kerberos from Navigator for i GUI under Networks --> Servers --> TCP/IP --> NetServer. The new Navigator may have a new path to follow.
------------------------------
Education is not the learning of facts but the training of the mind to think. -- Albert Einstein.
------------------------------
Satid S.
Original Message:
Sent: Tue March 14, 2023 10:43 AM
From: Erik Aasland
Subject: SSO - IFS
We have implemented sso on one of our IBMi machines.
For 5250 asc it's working fine.
But for IFS we are not able to make it work.
The login still apears when accessing the server via file explorer.
Does anyone know something about that?
We have marked for iNetserver in the keytab entries.
------------------------------
Erik Aasland
IBMi administrator
Fremtind Insurance
------------------------------