Re: QNTC and multiple Domain Controllers

[Peter Dow <petercdow@xxxxxxxxx>]

Hi Kurt,

I've been working with Win Server 2008 R2 and found that when I log on I 
have to specify the domain as part of the user id, even when logging on 
directly, e.g. mydomain\userid.  That's probably a setting in some 
security policy somewhere, but I haven't figured it out yet, but maybe 
it would help your situation.

--
*Peter Dow* /
Dow Software Services, Inc.
909 793-9050
petercdow@xxxxxxxxx <mailto:petercdow@xxxxxxxxx>
pdow@xxxxxxxxxxxxxx <mailto:pdow@xxxxxxxxxxxxxx>/

On 5/13/2013 12:41 PM, Anderson, Kurt wrote:
> I tried what you listed, Rob, but it still wasn't working.
>
> I have it half-working right now.
>
> The new server I care about isn't the one I was testing with (had no shares setup yet).  I added it to our host table, and created the directory for it in QNTC, and low and behold - there it was.  My only guess is that because we had this particular user setup as a local user on that machine that it's able to log into the machine.  Other servers where the user is not set up as a local user still get the Access Denied.
>
> Sure, I'd love to know how to get those to work, but since we are planning on being on one domain, and since I have no need to hit the other servers currently, I'm going to have to leave it at that.
>
> I appreciate everyone's input.  I've definitely learned at least a little bit - especially about CFGTCP.
>
> Thanks,
> Kurt
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
> Sent: Monday, May 13, 2013 12:58 PM
> To: Midrange Systems Technical Discussion
> Subject: RE: QNTC and multiple Domain Controllers
>
> There's two things in question here:
> 1 - Your DNS
> 2 - Your domains.
>
> 1 - Your DNS
> You should have more than one DNS listed at CFGTCP, option 12 Domain name server:
>    Internet address . . . . . . .   '10.10.4.250'
>    Internet address . . . . . . .   '10.10.4.252'
>    Internet address . . . . . . .   '10.17.4.180'
> We have three.  If your dc1.customcall.com controller doesn't cascade into MSN-DC-001.edge.local.com then list both of them here (at least).
>
> 2 - Your domains.
> You should have both local.customcall.com and the domain of the peers that QNTC is trying to point to at CFGTCP 12,
> Domain search list . . . . . . .   'dekko-1 corp.dekko.com dekko.com'
>
> I've recently made this change as we are trying to move off of 'dekko-1'
> to 'corp.dekko.com'.  While a dash is approved in the standards apparently closed proprietary systems like Linux often do not like the standards.
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to:  2505 Dekko Drive
>            Garrett, IN 46738
> Ship to:  Dock 108
>            6928N 400E
>            Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> From:   "Anderson, Kurt" <KAnderson@xxxxxxxxxxxx>
> To:     Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
> Date:   05/13/2013 11:56 AM
> Subject:        RE: QNTC and multiple Domain Controllers
> Sent by:        midrange-l-bounces@xxxxxxxxxxxx
>
>
>
> Scott - I've tried IP addresses within the domain and they work, but
> outside the domain they don't.
>
> Rob:
> Our domain name is local.customcall.com.
> I'm told our domain controller is dc1.customcall.com, and the other dc is
> MSN-DC-001.edge.local.com.
> Currently our Domain Search list is *DFT - which according to the help
> means it uses the domain name.
> So I'm not sure if I should change the domain search to use the
> customcall.com's local or dc1 address.
>
> I don't want to break anything...
>
> -Kurt
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [
> mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
> Sent: Monday, May 13, 2013 10:40 AM
> To: Midrange Systems Technical Discussion
> Subject: Re: QNTC and multiple Domain Controllers
>
> CFGTCP
> 12. Change TCP/IP domain information
> Page Down
> Domain search list . . . . . . .   'dekko-1 corp.dekko.com dekko.com'
> space between each domain.
>
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
> to:  2505 Dekko Drive
>            Garrett, IN 46738
> Ship to:  Dock 108
>            6928N 400E
>            Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> From:   "Anderson, Kurt" <KAnderson@xxxxxxxxxxxx>
> To:     "'Midrange Systems Technical Discussion'"
> <midrange-l@xxxxxxxxxxxx>,
> Date:   05/13/2013 10:04 AM
> Subject:        QNTC and multiple Domain Controllers
> Sent by:        midrange-l-bounces@xxxxxxxxxxxx
>
>
>
> Am I right in thinking that when using QNTC (which I believe uses
> NetServer) it can only connect to one domain controller?
>
> After our company was bought out, we've had a partial transition to the
> owner's domain controller.  The rest of the transition will occur
> eventually, but we're not there yet.  Our Power system is on the old
> domain, but I am looking to access a new server on the new domain.   I
> asked that the new server be temporarily added to the old domain until our
>
> Power system was moved to the new domain, but corporate isn't excited
> about that (and I honestly don't blame them).
>
> So - if getting QNTC to recognize multiple domain controllers is a
> possibility, I'd like to get that set up, otherwise I'll just have to push
>
> on getting our Power system on the new domain.
>
> Sidenote:  I am not networking minded, so please keep it simple.  ;)
>
> IBM i 7.1
>
> I was using this as a reference.  In #8.c it says all servers must be on
> the same domain, but I'm thinking that's just for the DNS config option?
> http://www-01.ibm.com/support/docview.wss?uid=nas1aea450153eebf8ff8625670f0072550f
>
>
>
> Kurt Anderson
> Sr Programmer/Analyst
> CustomCall Data Systems, a division of Enghouse Interactive Ltd.