Re: Access denied error trying to copy PDFs from IFS to my workstation

Jeff,

I believe that IBM i will save your userid and encrypted password information somewhere internally, and will send that to the windows box when using /QNTC.

I don't know why it'd work differently with Win7 vs W2008... possibly these different PCs are set up differently in terms of what they'll allow?

What I do know is that with certain IBM i password levels, passwords are stored in a case-insensitive manner, because IBM i itself does not care about upper/lowercase. As a result, IBM i will always send the password in lowercase. If Windows requires some letters in uppercase, this could be a problem.

Take a look here:
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021028

As to whether that is or isn't the problem you're experiencing, I have no clue... this is just a wild guess on my part.



On 3/2/2017 3:25 PM, Jeff Crosby wrote:

. . . and then I realized that Scott was talking about going the other
direction, so -

I logged off my workstation and tried logging on with the correct password,
only in uppercase. Fail.

So the IBM i will uppercase a Windows password as it come in, but Windows
won't lowercase a password coming from the IBM i. I guess that makes sense.

But then how does it work when it's W2008 server instead of Windows 7?



On Thu, Mar 2, 2017 at 4:09 PM, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>
wrote:

I use "Bypass Signon" for 5250 sessions in ACS (and previously in Client
Access) without issue, so . . .

On Thu, Mar 2, 2017 at 4:05 PM, Scott Klement <midrange-l@xxxxxxxxxxxxxxxx

wrote:

Could it be because your userid is in UPPERCASE here? Maybe the Win7 box
only allows lowercase?

Or maybe Windows is requiring a level of encryption that you don't have
on IBM i?



On 3/2/2017 2:38 PM, Jeff Crosby wrote:

We generate BRMS recovery reports but don't print them. Instead PDF
copies
are put on the IFS. Then we copy the PDFs from the IFS to a W2008
server.

I'm wanting to change that and copy them to my workstation (Win 7 Pro
64-bit) instead. Can't get it to work. I get the following error in the
joblog:

Additional Message Information



Message ID . . . . . . : CPDB053

Date sent . . . . . . : 03/02/17 Time sent . . . . . . :
15:20:32


Message . . . . : Error exchanging security information for user JEFF
on

network server JLCROSBY.



Cause . . . . . : The IBM i NetClient (QNTC) file system has
encountered
an
error when authenticating user JEFF with a network server JLCROSBY.

Recovery . . . : Ensure the following:

- The user is set up on network server JLCROSBY.

- The IBM i user password matches the network server user password.

- Network server JLCROSBY is enabled for digitally signed
communications.
Technical description . . . . . . . . : An error has been detected
while
the
QNTC file system was exchanging security information with a network
server.
The error class was 1, and the error code was 5.

Possible error class and error code values include:


Class 0 - QNTC file system specific security error.
1 - QNTC file system requires digital signing.
Class 1 - Network server operating system related error.
1 - Not valid Function.
2 - File not found.
3 - Directory not valid.
4 - Too many files open.
5 - Access denied.
Class 2 - Error generated by the network server.
1 - Non-specific error code.
2 - Bad password.
3 - Directory not valid.
4 - Access denied.
7 - Not valid device.
Class 3 - Network server hardware error.
31 - General hardware failure.
39 - No space on file system.

1) My IBM i password and Windows domain password are the same.
2) "Everyone" has full control on the share from my workstation
3) "Everyone" has full control to the folder on my workstation the share
points to

Is it because user JEFF is a domain user and not a local user? Wouldn't
seem so to me.

But I've felt dense this entire week. Ideas?

Thanks.

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

--


Jeff Crosby
VP Information Systems
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531 <(260)%20422-7531>
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of my
company. Unless I say so.