RE: QNTC and Domain Shares ?

The QSECOFR issue seems to be an anomaly. It makes me wonder, What would a
windows server care if the user id was QSECOFR and any other name? And why
would the IBM OS care if QSECOFR was connecting to another server? What
would cause the issue unless the IBM OS was preventing QSECOFR?




Paul Therrien
Andeco Software, LLC
2233 St. Charles Ave
# 704
New Orleans, LA 70130
225-229-2491
paultherrien@xxxxxxxxxxxxxxxxxx
www.andecosoftware.com

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Monday, December 10, 2012 12:59 PM
To: Midrange Systems Technical Discussion
Subject: Re: QNTC and Domain Shares ?

I have found these links regarding Domain Controllers vs QNTC.

Earlier versions were more verbose on this. V7R1 shortened it down to use
kerberos.
http://publib.boulder.ibm.com/infocenter/iseries/v5r3/topic/rzahq/rzahqenabl
eqntcaccess.htm#rzahqenableqntcaccess
http://publib.boulder.ibm.com/infocenter/iseries/v7r1m0/index.jsp?topic=%2Fr
zatk%2FGENUUID.htm
http://www-01.ibm.com/support/docview.wss?uid=nas1aea450153eebf8ff8625670f00
72550f

What kills me is that I can access qntc on the domain controller as ROB, but
not QSECOFR. But QSECOFR can access other shares in our domain.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: rob@xxxxxxxxx
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date: 12/10/2012 01:04 PM
Subject: Re: QNTC and Domain Shares ?
Sent by: midrange-l-bounces@xxxxxxxxxxxx



Try this:
On your PC (or some other PC that is NOT a domain controller) create a
share. Then see if
WRKLNK '/QNTC/thatpc/thatshare' works. What I am finding out is that
QSECOFR can see shares on PC's that are not domain controllers but not
shares on PC's that ARE domain controllers. For example, I can access my
pc (GDL164) and GDSNT (a popular server here that is not a domain
controller) but not GDSDNS nor ARDNT (which are domain controllers). Our
Windows guy said he'll open up a ticket with IBM but he has some other
priorities first. I'm ok with that. Getting the electronics set up for
the company Christmas carry-in a few days out takes priority. I really
only use QSECOFR this way once a quarter.


Rob Berendt