× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. May 2013

RE: QNTC and multiple Domain Controllers

I tried this, but I don't seem to get success with it:
DMNSCHLIST('LOCAL.CUSTOMCALL.COM DC1.CUSTOMCALL.COM MSN-DC-001.EDGE.LOCAL.COM')

Per this post from Scott, I also tried using just customcall.com & customcall.us (which is actually the domain name for the EDGE network we have). Although that didn't seem to work either. I'm not sure if I need to restart NetServer for the changes to be recognized. He made a comment about chgtcpdmn not applying to NetServer, but I'm not sure if that meant in general, or specifically to the original poster's issue from the thread it was on:
http://archive.midrange.com/midrange-l/200212/msg01138.html

I went into the Netserver properities via System i Navigator and I didn't see where I could specify additional domains.

"So ... are you asking how to set up the path to the share, or how to get authority to the share?"
As far as authority goes, both of our domain controllers have the user set up with the same password as it is on the Power system. With that user, I'm able to get to servers on the same domain (controller?) as the Power system, but cannot 'see' the contents of servers on the new domain. By "see" I mean that after creating the directory for the server using MKDIR, I go into WrkLnk and am not seeing the shared folders. I know there -are- shared folders, as I have my PC mapped to some of them.

Previously I was in QShell looking at the IFS, I'm now using WrkLnk, and I noticed a job log error message saying "Access Denied" from "Network server operating system related error." I've found a lot of half-answers online, and it sounds like what might be happening is that it's trying to log into that server with the wrong domain prefixed on the credentials. I know the PW's match because I was able to sign into my own PC using this special user and I entered the PW exactly as I enter it when I log into the Power system.

-Kurt
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Dan Kimmel
Sent: Monday, May 13, 2013 11:15 AM
To: Midrange Systems Technical Discussion
Subject: RE: QNTC and multiple Domain Controllers

There seems to be some confusion here as to what type of domain you're talking about. There's a difference between a TCP/IP domain and a Windows networking domain controller. The document you referenced doesn't really do a very good job differentiating either.

The domain controllers are ldap domains used for authenticating the user profile. If that's the issue, just having the old domain as a trusted domain in the new domain should allow your IBMi users to be authenticated to anything secured by the new domain. So if a IBMi user enrolled in the old domain is authorized to use a file share in the new domain you should be able to MKDIR to the share in the new domain as long as the new domain trusts the old domain.

Now, the path from QNTC to that share is dependent on how you've set up your TCP/IP domains.

So ... are you asking how to set up the path to the share, or how to get authority to the share?

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Anderson, Kurt
Sent: Monday, May 13, 2013 10:55 AM
To: Midrange Systems Technical Discussion
Subject: RE: QNTC and multiple Domain Controllers

Scott - I've tried IP addresses within the domain and they work, but outside the domain they don't.

Rob:
Our domain name is local.customcall.com.
I'm told our domain controller is dc1.customcall.com, and the other dc is MSN-DC-001.edge.local.com.
Currently our Domain Search list is *DFT - which according to the help means it uses the domain name.
So I'm not sure if I should change the domain search to use the customcall.com's local or dc1 address.

I don't want to break anything...

-Kurt

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Monday, May 13, 2013 10:40 AM
To: Midrange Systems Technical Discussion
Subject: Re: QNTC and multiple Domain Controllers

CFGTCP
12. Change TCP/IP domain information
Page Down
Domain search list . . . . . . . 'dekko-1 corp.dekko.com dekko.com'
space between each domain.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: "Anderson, Kurt" <KAnderson@xxxxxxxxxxxx>
To: "'Midrange Systems Technical Discussion'"
<midrange-l@xxxxxxxxxxxx>,
Date: 05/13/2013 10:04 AM
Subject: QNTC and multiple Domain Controllers
Sent by: midrange-l-bounces@xxxxxxxxxxxx



Am I right in thinking that when using QNTC (which I believe uses
NetServer) it can only connect to one domain controller?

After our company was bought out, we've had a partial transition to the owner's domain controller. The rest of the transition will occur eventually, but we're not there yet. Our Power system is on the old
domain, but I am looking to access a new server on the new domain. I
asked that the new server be temporarily added to the old domain until our Power system was moved to the new domain, but corporate isn't excited about that (and I honestly don't blame them).

So - if getting QNTC to recognize multiple domain controllers is a possibility, I'd like to get that set up, otherwise I'll just have to push on getting our Power system on the new domain.

Sidenote: I am not networking minded, so please keep it simple. ;)

IBM i 7.1

I was using this as a reference. In #8.c it says all servers must be on the same domain, but I'm thinking that's just for the DNS config option?
http://www-01.ibm.com/support/docview.wss?uid=nas1aea450153eebf8ff8625670f0072550f


Kurt Anderson
Sr Programmer/Analyst
CustomCall Data Systems, a division of Enghouse Interactive Ltd.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.




As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.