Re: Public Windows share not seen on QNTC

Late to the thread here:

Try the following:
1)Create a share on the i.
2)Mount the windows share via MOUNT over the I folder.
Example using the default options
MOUNT TYPE(*NFS)
MFS('\\windows machine\window foler')
MNTOVRDIR('\systemiFolder')
OPTIONS('rw,suid,retry=5,rsize=32768,wsize=32768,timeo=20,retrans=5,acregmin=30,acregmax=60,acdirmin=30,acdirmax=60,hard,async,sec=sys,vers=3:2,nocache')

You may need to tweak the options depending upon the accces needed.

3) verify the contents are visible on the iSeries.

Monty

date: Mon, 18 Dec 2017 16:12:40 -0300
from: Raul Jager <raul@xxxxxxxxxx>
subject: Re: Public Windows share not seen on QNTC

Long ago, I asked a security specialist how to access an AS/400 (it was
then) and he told me that he runs a program in the windows pc to find pairs user-password and then he used that in the AS/400 and that often there was a match.? I do not know if the method is still valid with newer windows.


On 12/18/2017 02:30 PM, Rob Berendt wrote:

I think one of the biggest problems is that people have this belief
that the user id's and passwords between IBM i and Windows should not match.
That it increases security if they do not match. Some are under the
belief that Windows is this huge security hole.
My argument is that this drastically increases complexity and really
does not increase security. What you end up doing is creating local
profiles with passwords which never change and other things which are
a gross security violation. Basically, what you think is increasing
security is actually DECREASING security.

That and IBM i, as shipped, is not much more secure.

crtusrprf dummy password(xyz)
STRCMNTRC CFGOBJ(LANLIN) CFGTYPE(*LIN)
TELNET thislpar
Sign on as DUMMY
ENDCMNTRC CFGOBJ(LANLIN) CFGTYPE(*LIN) PRTCMNTRC CFGOBJ(LANLIN)
CFGTYPE(*LIN) FMTTCP(*YES) DSPSPLF FILE(QPCSMPRT) SPLNBR(*LAST)
.DUMMY...XYZ.
Of course, you have to look at the hex data at the left to get the
correct case
C4E4D4D4E8110735 A7A8A9FFEF

Basically any fool with a sniffer can get that data.



Rob Berendt

________________________________

This email message, including any attachment(s) is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is strictly prohibited. If you are not the intended recipient, please immediately contact the sender by email.