Thanks for the links.
From a Windows 10 PC, Windows Power Shell run as admin
Get-SmbConnection | Select-Object -Property *
I'm able to see all my mapped drives, both to Power9 and other Windows servers.
V7R3 is showing SMB 2.0.2
V7R4 is showing SMB 3.0
All other Windows servers are showing SMB 3.1.1
The V7R4 LPARS did take repeated authentications when connecting, but finally did connect.
Is there a command I can run on the I to see all the different connections with their SMB version?
Paul
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob Berendt
Sent: Friday, June 4, 2021 7:58 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: V7R4 UPGRADE
Mike,
I reread that link just now. I believe that link just shows what is allowed. What Paul, and probably the OP - Duane, are asking is 'how do you tell what clients are connecting with?". Let me explain further. Suppose you have the environment variable QIBM_ZLC_SMB_VERS set to allow Net Server to support whatever the client connects with. Ok? So you are thinking of saying you want to turn off SMB1 but you want to know if that will break anything. So you want to know what clients, if any, are getting NetServer to negotiate all the way down to SMB1.
Maybe I missed it but I did not see such a SQL service. Nor did I see an api which may return this information at
https://www.ibm.com/docs/en/i/7.4?topic=netserver-api-guides
Duane,
See the line about " Microsoft(r) Documentation provides this information about the versions of SMB available for various Windows(r) OS versions:" at
https://blogs.technet.microsoft.com/josebda/2013/10/02/windows-server-2012-r2-which-version-of-the-smb-protocol-smb-1-0-smb-2-0-smb-2-1-smb-3-0-or-smb-3-02-are-you-using/
One summary note of interest: If you are ONLY supporting SMB1 open a share from a Windows 10 machine to your IBM i. The Windows machine should give you a nasty pop up window complaining that the server is only supporting SMB1 and it will only connect at gunpoint (or something like that). Details in one of the links below.
I did find an article which states that currently the only way to check to see what SMB connections are hitting your IBM i is by running a communications trace.
I tried a few trace combinations but was unable to see how.
https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fpowerwire.eu%2fsmbv3%2dsupport%2din%2dibm%2di%2d7%2d4&umid=2af2f82f-32bf-4517-80d4-368d89cef22d&auth=438b0784514c1757bd202125ca4db8b0abdb021e-4b674122b229565c5d3ba85b367ae382e1633427
But it did have a Powershell suggestion to see what SMB type a share is using.
Some other links of interest:
https://www.ibm.com/support/pages/ibm-i-netserver-smb-protocol-version-control-guide
https://docs.microsoft.com/en-US/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Mayer, Michael via MIDRANGE-L
Sent: Thursday, June 3, 2021 5:25 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: Mayer, Michael <MMayer@xxxxxxxxxxxxxx>
Subject: RE: V7R4 UPGRADE
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Paul, this may help even though it is a V7R2 link. There may be other links in the tech doc that will lead you to more info.
https://www.ibm.com/support/pages/smb2-support-ibm-i-72
Very Respectfully,
Michael Mayer
IBM I on Power System Admin.
IT Operations.
The Florida Bar
651 E. Jefferson St
Tallahassee, Florida 32399-2300
mmayer@xxxxxxxxxxxxxx
https://www.floridabar.org
Office: 850.561.5761
Cell: 518.641.8906
4. RE: V7R4 UPGRADE (Steinmetz, Paul via MIDRANGE-L)
----------------------------------------------------------------------
------------------------------
message: 4
date: Thu, 3 Jun 2021 20:43:52 +0000
from: "Steinmetz, Paul via MIDRANGE-L" <midrange-l@xxxxxxxxxxxxxxxxxx>
subject: RE: V7R4 UPGRADE
How does one know which SMB is being used, 1, 2, or 3.
Paul
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Jim Oberholtzer
Sent: Thursday, June 3, 2021 4:10 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: V7R4 UPGRADE
While I agree with both you and Rob about SMB1, sometimes outside forces control what we do.
You can temporarily set it to SMB1, (assuming that does not create havoc with other connections) and use that as the reason to get the older system updated?
When confronted with no support and significant security issues, usually that frees up the money. In the mean time the business keeps going. Duane, just make sure to put it in writing so downstream there?s no fall back on you.
Jim Oberholtzer
Agile Technology Architects
On Jun 3, 2021, at 2:53 PM, Greg Wilburn <gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
?Do not, under any circumstances use SMB1
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Danner, Duane
Sent: Thursday, June 3, 2021 3:21 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: V7R4 UPGRADE
I am told with V7R4 there is a new protocol SMBV2, it could cause issue with the fastfax processor mapping a drive to the IBMI, since the processor is on a non-supported MS OS. Has anyone came across this issue?
Any suggestions would be appreciated?
Thanks
Duane Danner
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
------------------------------
closure.
________________________________
Please note: Florida has very broad public records laws. Many written communications to or from The Florida Bar regarding Bar business may be considered public records, which must be made available to anyone upon request. Your e-mail communications may therefore be subject to public disclosure.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
As an Amazon Associate we earn from qualifying purchases.