Users mapping a network drive to the iSeries getting disabled all too often
Home > IT Answers > AS/400 > Users mapping a network drive to the iSeries ...
Lovemyi
1470 pts.
0
Q:
Users mapping a network drive to the iSeries getting disabled all too often
AS/400 security, AS/400 Configuration, iSeries security, iSeries Access
What is the best way to map a network drive to an iSeries so that the user password does not have to match the PC password as it often gets disabled due to the user changing the network password when both IDs are the same?

Software/Hardware used:
iSeries, AS/400, System i, IBM i on Power
ASKED: Aug 19 2009  6:42 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
TomLiotta
7380 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
I think for most users it works best when you map the drive from iSeries Navigator.

Start iSeries Navigator
Open File Systems / File Shares
(If you do not see it you may not have the right iSeries Access components loaded)
(I typically do a Full install and let the user profile handle which components they can use)
Right click the Folder or Directory you want and select Map Network Drive
Enter your information (Including your User ID and Password) and click OK.
You should now be able to see this mapped drive in Windows.

Voodoo

===============================================================

The "best" way for your site can't be determined from here.

With nothing else to go on, the best way is to remove all passwords and stop using them for authentication to your iSeries. Set up and use an EIM/SSO solution instead. The issue will disappear

The next best way is to keep the userids different between the two areas.

Tom
Last Answered: Oct 16 2009  0:13 AM GMT by TomLiotta   7380 pts.
Latest Contributors: Voodoovw   1720 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Whatis23   4040 pts.  |   Aug 19 2009  10:02PM GMT

I would advise against a full install of iSeries Navigator as a default. The user or developer will have more access to components than they would from iSeries access for windows. As of June 09, IBM has yet to fix this loophole and we’re on ptf SI32972. The rep stated that ptf SI35287 does not contain the fix.

 

Voodoovw   1720 pts.  |   Aug 20 2009  12:36PM GMT

Michaels got a point there.

We are not the norm here. As ERP developers and Support most users have more privilege than a normal user would.

 

Lovemyi   1470 pts.  |   Aug 20 2009  12:47PM GMT

That is correct, we do not want the users to have to worry about mapping the drive. It is set up for them on their PC when they are granted access to certain directories for retrieving specific files from the application but they like all users have a tendency to forget that they need to sync their passwords up when they change the network passwords.

Has anyone setup a special ID that the users use to map without an expiring password and then mapped a network share to his PC with a different ID and how did that work to keep the users from killing themselves when they forget to change the iSeries password for their ID?

Lovemyi

 

Voodoovw   1720 pts.  |   Aug 20 2009  1:44PM GMT

You may already have enough of Navigator installed to try mapping the drive like I suggested. Use a profile like you were saying were the password does not expire. When you map the drive they cannot see the password you type so you should be OK.

 

WoodEngineer   2280 pts.  |   Aug 20 2009  3:42PM GMT

Our situation is very similar to yours, Lovemyi, especailly concerning passwords getting out of sync. We mitigated the problem by driving password change requirements on the i Series. By that I mean we let the i Series tell the user when a password must be changed - we are at 120 days right now. When a user changes their password the system runs an exit program which sends the user an e-mail reminding them to change their network password to keep it in sync with the i Series. We definitely noticed reduced support calls after putting this into place.

 

Lovemyi   1470 pts.  |   Aug 20 2009  4:02PM GMT

Our corporate standard is only 60 days which means that the users have to change passwords even more often however when they only map to this iSeries machine for ODBC access only to the file shares this is normally off their radar so they forget to change the password on thie iSeries at the same time.

What we really need to do is get to single signon but that is too big of a project that it does not get the attention it needs. May be in another couple of years.

For now I just need to find a solution that satisfies the auditors and eliminates the weekly calls from the users. You know how application staff like to blame everything on the admin guys :-)

Lovemyi

 

TomLiotta   7380 pts.  |   Oct 16 2009  12:18AM GMT

Note that nothing in iSeries Navigator (nor iSeries Access itself) is required on any PC to create shares or to access them. See the GO NETS tool in QUSRTOOL for examples.

Tom

 

Teandy   3215 pts.  |   Oct 16 2009  4:07PM GMT

I was having this same problem, which is why I came up with a subprcedure to map a drive from green screen.

See this thread for details:

 <a href="http://itknowledgeexchange.techtarget.com/itanswers/how-to-pop-up-login-when-using-strpccmd/?asrc=EM_UGT_9584881&uid=11161" title="http://itknowledgeexchange.techtarget.com/itanswers/how-to-pop-up-login-when-using-strpccmd/?asrc=EM_UGT_9584881&uid=11161" target="_blank">http://itknowledgeexchange.techtarget.co…</a>

 
0