QNTC access fails when target server is moved into AD

Our company has finally moved into the AD structure set forth by parent
company.



Changing NetServer and all of that went flawlessly last week. No
brainer kind of stuff. We tested client PC to System i connectivity,
QNTC access to System i connectivity, and QNCT connectivity to a PC
server (WIN2K). Keeps the auditors and management happy that we did a
30 second change and did 30 minutes of testing for each one.



Now, the PC server (WIN2K) was changed on Friday to move into the AD
world. Instantly QNTC authentication starts to fail. Over the weekend
we dink around with a few things - group access, local accounts, etc.
Net result is the same. Can't authenticate. System i returns CPDB053,
error class 1, error code 5. Network server error, access denied. I
believe we are generating a 529 type of event. Not sure if that is on
the local server or coming off of the domain. It's to early and I can't
remember. This points to a bad ID or password. All of which are
essentially unchanged.



This puts me square in the middle of a Charlie foxtrot finger pointing
contest. PC guys say that QNTC is ******* ** and what is it doing
wrong? IBM support is saying that the System i is unchanged and that
they can't necessarily determine what has changed on the authentication
side of our network. We are at V5R3 and a decent CUM pack level. I'm
going to also try from a V5R4 machine. Target server is W2K, AD is W2K3
powered.



Any ideas? Sorry for the lack of complete info. Stupid heavy breathers
woke me up at 3:00 and I couldn't get back to sleep so I decided to do
some investigating. There are numerous M$ support articles that
revolve around issues similar to ours but 100% of them deal with some
sort of Windows client and seem to be related to code levels on the
client, the server, or the DC.



Michael Crump



Manager, Computing Services

Saint-Gobain Containers, Inc.

1509 S. Macedonia Ave.

Muncie, IN 47302

765.741.7696

765.741.7012 f


"Push to test." "Release to detonate."

This email and its attachments may be confidential and are intended
solely for the use of the individual to whom it is addressed. Any views
or opinions expressed are solely those of the author and do not
necessarily represent those of Saint-Gobain. If it did, it would be
folded, mutilated, watered down, politically corrected, and would show
up a week later if at all. If you are not the intended recipient of
this email and its attachments, you must take no action based upon them,
nor must you copy or show them to anyone.

Please contact the sender if you believe you have received this email in
error.