5722XE1 V5R4M0 iSeries Access for Windows 

In this directory is a fix for a V5R4M0 iSeries Access for Windows problem 
that is not in the SI29771 service pack.  This only is relevant for users 
who experience the problem described below.

APAR SE31274 : CA400EXP-OPNAV CHANGE KRB5.CONF FILE AND KERBEROS BATCH FILE
    Problems reported:

    Problem 1 :
    The newer ktpass.exe windows command used on Win2003 server 
    doesn't default to DES-only encryption like the Win2K version 
    of ktpass.exe command does. That is, service principals better 
    have the "Use DES encryption for this account", option set, 
    otherwise a RC4-HMAC encrypted service ticket is generated, 
    which i5/OS will not be able to handle. The 
    'NASConfig_<system>.bat' batch file created using the NAS 
    wizard should add the '+DesOnly' flag on the calls to 
    ktpass.exe for the Win2003 portion of the batch file. 

    Problem 2 :
    The -ptype 'KRB5_NT_PRINCIPAL' option should be included on the 
    Win2003 ktpass.exe calls, otherwise a warning message will be 
    generated. 

    Problem 3 :
    The trigraphs characters used on the krb5.conf kerberos 
    configuration file should be optional, due to problems reported 
    with some kerberos clients implementations.


This fix ONLY applies to V5R4M0 service pack SI29771.  Please do not attempt to
apply this fix to any other release of iSeries Access for Windows, or any other 
service pack level.

If you need to contact Service about problems with these .jar, you should mention 
that you are using a version of cwbunsy.jar with a modification date of 02/08/2008
and cwbunsyb.jar with a modification date of 02/08/2008.

File replacement instructions
------------------------------------------------------------------------------

1) End all running sessions of iSeries Navigator.
2) Locate the file cwbunsy.jar and cwbunsyb.jar on your client workstation.  This file should
   be located in the Classes directory under the iSeries Access for Windows install
   directory (for example,  C:\Program Files\IBM\Client Access\Classes or
   C:\Program Files (x86)\IBM\Client Access\Classes for 64 bits)
3) Rename cwbunsy.jar to cwbunsy.bak.
4) Rename cwbunsyb.jar to cwbunsyb.bak.
5) Copy the fix version of cwbunsy.jar into the same directory.
6) Copy the fix version of cwbunsyb.jar into the same directory.