Users mapping a network drive to the iSeries getting disabled all too often

2310 pts.
Tags:
AS/400 Configuration
AS/400 security
iSeries Access
iSeries security
What is the best way to map a network drive to an iSeries so that the user password does not have to match the PC password as it often gets disabled due to the user changing the network password when both IDs are the same?

Software/Hardware used:
iSeries, AS/400, System i, IBM i on Power

Answer Wiki

Thanks. We'll let you know when a new response is added.

I think for most users it works best when you map the drive from iSeries Navigator.

Start iSeries Navigator
Open File Systems / File Shares
(If you do not see it you may not have the right iSeries Access components loaded)
(I typically do a Full install and let the user profile handle which components they can use)
Right click the Folder or Directory you want and select Map Network Drive
Enter your information (Including your User ID and Password) and click OK.
You should now be able to see this mapped drive in Windows.

Voodoo

===============================================================

The “best” way for your site can’t be determined from here.

With nothing else to go on, the best way is to remove all passwords and stop using them for authentication to your iSeries. Set up and use an EIM/SSO solution instead. The issue will disappear

The next best way is to keep the userids different between the two areas.

Tom

Discuss This Question: 8  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Whatis23
    I would advise against a full install of iSeries Navigator as a default. The user or developer will have more access to components than they would from iSeries access for windows. As of June 09, IBM has yet to fix this loophole and we're on ptf SI32972. The rep stated that ptf SI35287 does not contain the fix.
    5,665 pointsBadges:
    report
  • Voodoovw
    Michaels got a point there. We are not the norm here. As ERP developers and Support most users have more privilege than a normal user would.
    1,735 pointsBadges:
    report
  • Lovemyi
    That is correct, we do not want the users to have to worry about mapping the drive. It is set up for them on their PC when they are granted access to certain directories for retrieving specific files from the application but they like all users have a tendency to forget that they need to sync their passwords up when they change the network passwords. Has anyone setup a special ID that the users use to map without an expiring password and then mapped a network share to his PC with a different ID and how did that work to keep the users from killing themselves when they forget to change the iSeries password for their ID? Lovemyi
    2,310 pointsBadges:
    report
  • Voodoovw
    You may already have enough of Navigator installed to try mapping the drive like I suggested. Use a profile like you were saying were the password does not expire. When you map the drive they cannot see the password you type so you should be OK.
    1,735 pointsBadges:
    report
  • WoodEngineer
    Our situation is very similar to yours, Lovemyi, especailly concerning passwords getting out of sync. We mitigated the problem by driving password change requirements on the i Series. By that I mean we let the i Series tell the user when a password must be changed - we are at 120 days right now. When a user changes their password the system runs an exit program which sends the user an e-mail reminding them to change their network password to keep it in sync with the i Series. We definitely noticed reduced support calls after putting this into place.
    6,425 pointsBadges:
    report
  • Lovemyi
    Our corporate standard is only 60 days which means that the users have to change passwords even more often however when they only map to this iSeries machine for ODBC access only to the file shares this is normally off their radar so they forget to change the password on thie iSeries at the same time. What we really need to do is get to single signon but that is too big of a project that it does not get the attention it needs. May be in another couple of years. For now I just need to find a solution that satisfies the auditors and eliminates the weekly calls from the users. You know how application staff like to blame everything on the admin guys :-) Lovemyi
    2,310 pointsBadges:
    report
  • TomLiotta
    Note that nothing in iSeries Navigator (nor iSeries Access itself) is required on any PC to create shares or to access them. See the GO NETS tool in QUSRTOOL for examples. Tom
    125,585 pointsBadges:
    report
  • Teandy
    I was having this same problem, which is why I came up with a subprcedure to map a drive from green screen. See this thread for details: http://itknowledgeexchange.techtarget.com/itanswers/how-to-pop-up-login-when-using-strpccmd/?asrc=EM_UGT_9584881&uid=11161
    5,860 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following