Completing the planning work sheets

Before you begin using System i® Navigator to propagate the configuration on a model system to target systems, complete these planning work sheets.

All answers should be Yes before you proceed with propagating network authentication service.

Table 1. Propagating network authentication service - prerequisite work sheet
Prerequisite work sheet Answers
Are you using IBM® i 5.4, or later (5770-SS1) on the following systems:
  • Central system
  • System A
  • System B
  • System C
 Yes
Have you applied the latest program temporary fixes (PTFs)? Yes
Are the following options and licensed programs installed on all your IBM i models?
  • IBM i Host Servers (5770-SS1 Option 12)
  • IBM i Access for Windows (5770-XE1)
  • Network Authentication Enablement(5770-NAE)
 Yes
Is IBM i Access for Windows (5770-XE1) installed on the administrator's PC? Yes
Is System i Navigator installed on the administrator's PC?
  • Is the Network subcomponent of System i Navigator installed on the administrator's PC?
  • Is the Security subcomponent of System i Navigator installed on the administrator's PC?
 Yes
Have you installed the latest IBM i Access for Windows service pack? See IBM i Accesslink outside the Information Center for the latest service pack. Yes
Do you have *SECADM, *ALLOBJ, and *IOSYSCFG special authorities? Yes
Do you have one of the following systems acting as the Kerberos server? If yes, specify which system.
  1. MicrosoftWindows server
  2. PASE for i (5.4, or later)
  3. AIX® server
  4. z/OS®
 Yes, Windows server
For Windows server, do you have Windows Support Tools (which provides the ktpass tool) installed? Yes
Is the IBM i system time within 5 minutes of the system time on the Kerberos server? If not, see Synchronizing system times. Yes
Table 2. Synchronize functions planning work sheet
Questions Answers
What is the name of the system group? MyCo system group
What systems will be included in this system group? System B and System C
What functions do you plan to propagate to this system group? Network authentication service
For which services do you want to create keytab entries?
  • IBM i Kerberos Authentication
  • LDAP
  • IBM HTTP Server
  • IBM i NetServer
  • Network File System Server
 IBM i Kerberos Authentication
What are the service principal names for the systems to which you want to propagate configuration?
krbsvr400/systema.myco.com@MYCO.COM
krbsvr400/systemb.myco.com@MYCO.COM
krbsvr400/systemc.myco.com@MYCO.COM
What are the passwords that are associated with each of these principals?

The password for the principals for Systems A, B, and C is systema123.
What is the fully qualified host name for each IBM i platform?
systema.myco.com
systemb.myco.com
systemc.myco.com
What is the name of the Windows domain?
Note: A Windows domain is similar to a Kerberos realm.
MYCO.COM