Re: Access denied error trying to copy PDFs from IFS to my workstation -- MIDRANGE-L

All lower case password in Windows, all uppercase on IBM i.
QPWDLVL = 0.
Yes, shares are created on my PC. No share names over 8 characters long.
(Been bit by that before.)

On Thu, Mar 2, 2017 at 5:22 PM, Rob Berendt <rob@xxxxxxxxx> wrote:

Some of the difference may be due to case differences. If your windows
password is all upper case, or all lower case, then IBM i can do a pretty
good job of matching. But if you use mixed case then it's a whole
different ball game. We were having much issues with users when they did
that and we told them to pick a case. But that was mainly coming the
other way, from PC to IBM i, not QNTC.
We went through a bunch of security changes when we were purchased by a
public company and now we run at QPWDLVL=3. Mixed case is not a problem
anymore.
Before you change to that you are going to want to read up on that. Start
with the Knowledge Center.
Don't bother with 2. We tried and ran into issues I can't even remember
and quickly jumped to 3.

I think we did run into issues with a higher level of Windows too so that
may be part of your issue also.

You DID create a share on your PC, right? You're not just assuming that
one can get to a directory? For example, if you are on another PC in your
company and you go to \\jeffspc you should see a list of shares on that
PC. And just because you are some Godlike Domain Admin remember the trick
of \\jeffspc\c$ isn't really an IBM i supported thing.
Oh, and somewhat related... You have NO shares defined on your PC that
have names longer than ?11? characters, right? It's some low number like
that. Having a longer share name can totally disrupt QNTC, even if you
are not accessing that share.
For example if you have these shares defined on your laptop:
\\jeffspc\BRMS
\\jeffspc\Executive
\\jeffspc\JeffsCollectionOf80sDiscoHits
Then just trying to access /QNTC/jeffspc/BRMS from IBM i will act sporadic
(at best) just because of the existence of that long share name. It's a
known issue which affects IBM i, System Z and more. I have a RFE to
change that and IBM has accepted it as a future wish.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

From: Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 03/02/2017 03:38 PM
Subject: Access denied error trying to copy PDFs from IFS to my
workstation
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>

We generate BRMS recovery reports but don't print them. Instead PDF
copies
are put on the IFS. Then we copy the PDFs from the IFS to a W2008 server.

I'm wanting to change that and copy them to my workstation (Win 7 Pro
64-bit) instead. Can't get it to work. I get the following error in the
joblog:

Additional Message Information

Message ID . . . . . . : CPDB053

Date sent . . . . . . : 03/02/17 Time sent . . . . . . :
15:20:32

Message . . . . : Error exchanging security information for user JEFF
on

network server JLCROSBY.

Cause . . . . . : The IBM i NetClient (QNTC) file system has
encountered
an
error when authenticating user JEFF with a network server JLCROSBY.

Recovery . . . : Ensure the following:

- The user is set up on network server JLCROSBY.

- The IBM i user password matches the network server user password.

- Network server JLCROSBY is enabled for digitally signed
communications.
Technical description . . . . . . . . : An error has been detected
while
the
QNTC file system was exchanging security information with a network
server.
The error class was 1, and the error code was 5.

Possible error class and error code values include:

Class 0 - QNTC file system specific security error.
1 - QNTC file system requires digital signing.
Class 1 - Network server operating system related error.
1 - Not valid Function.
2 - File not found.
3 - Directory not valid.
4 - Too many files open.
5 - Access denied.
Class 2 - Error generated by the network server.
1 - Non-specific error code.
2 - Bad password.
3 - Directory not valid.
4 - Access denied.
7 - Not valid device.
Class 3 - Network server hardware error.
31 - General hardware failure.
39 - No space on file system.

1) My IBM i password and Windows domain password are the same.
2) "Everyone" has full control on the share from my workstation
3) "Everyone" has full control to the folder on my workstation the share
points to

Is it because user JEFF is a domain user and not a local user? Wouldn't
seem so to me.

But I've felt dense this entire week. Ideas?

Thanks.

--

Jeff Crosby
VP Information Systems
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of my
company. Unless I say so.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD