The domain name that is configured with iSeries navigator must match the domain name of the machine.
If not, you will get an error on the client like: "the specified target is not known or inaccessible" (with tcp/ip error code -14)
Here is how to check it:
Step 1: to know what the real domain name is, do the following using a command prompt on the client machine:
Enter "nslookup", then type the name of the iseries, like follows:
Default server : domain_controller.domain-name.com
Address: 194.206.160.4
> my_iseries
Server : domain_controller.domain-name.com
Address: 194.206.160.4
Name : my_iseries.domain-name.com
Address: 194.206.160.112
So here the correct domain name is domain-name.com
Step 2: check that exported keytab contains the correct domain name.
Do do this, use iseries navigator, and go to "security", and then "Network authentication service". Right-click and select "Manage keytab". Click on the "Details" button.
You should see a line with:
Principal Type: i5/OS
Principal Name: krbsvr400/my_iseries.domain-name.com@DOMAIN-NAME.COM
Where DOMAIN-NAME.COM is your i5/OS realm.
If this is not correct, you need to modify configuration a re-export keytab, or you need to check your DNS to have matching domain names.