Home > Ask the AS/400 Experts > iSeries i5/OS and OS/400 Questions & Answers > A security problem with NetServer
Ask The iSeries 400 Expert: Questions & Answers
EMAIL THIS

A security problem with NetServer

John Brandt EXPERT RESPONSE FROM: John Brandt

Pose a Question
Other iSeries 400 Categories
Meet all iSeries 400 Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 30 April 2001
I have researched 'NetServer'. I feel I have a security problem with NetServer. I cannot see my system QS105DRLM in the MicroSoft Windows Neighborhood. I can ping the machine. Ops Nav shows the NETSERVER started. I have reset Qserver Subsystem, Reset My Signon ID's and the Quest ID, restarted both Qserver & NetServer. I am Running 4.5 with security level 40 in place. I checked and have ordered and installed all PTF I can find related to NETSERVER. I have repeated the setup with a 170 using op system 4.4 security 30 and a 170 op system 4.3 security 30. Both of these systems will show the machine in my network neighborhood and will let me see the resources thru OPS NAV. When I use NBTSTAT -a QS105DRLM (MY NETSERVER NAME entered in LMHOST file) I get an indication the machine is there, but the status is 00> whereas 4.4 170 has a status of 20>. Can you get for me the files and library's security settings for level 40 to allow NETSERVER to broadcast its name to the Network Neighborhood and the setting to allow me to see the computer? I also cannot see my QS105DRLM from my domain controller(WINS Server) nor any other PC in my Domain. If you can't help, where can I go next to try to resolve this problem? I cannot do a LVLCHECK, See the AS/400 to load Client Access EXPRESS, or setup our PCs to use the AS/400 printing services now available thru NETSERVER. I need all of this to be able to use Windows 2000 on our PC network.


>

You have obviously done some homework, so here goes. You could have one of two (actually three) possible problems. One possible problem is using policies on the Windows Network. This could have been set up by a previous administrator, programmer or configuration user. If you have a directory in the root called /Policies, then you should search for policies in the AS/400 System Security manual located in the AS/400 library. It will contain details of how the policies and policy files are used by Windows-based machines.

The second possible problem is that normally a user profile must be set up as a guest for the Network Neighborhood to operate on a security level above 30. The book doesn't say that it is dependant on the level, but I moved one of my systems from 30 to 40 and had to create the guest profile for me to see my AS/400. Details for the setup required for CA/400 on Win95/NT (Also applies to CA/Express) are found here.

The unnamed third problem is Microsoft and Windows 2000. There isn't a solution to this problem, but the workarounds above should do it. Windows 2000 is not compliant with LDAP standards. If a call is made from a non-Microsoft system (contained in the call) to initiate LDAP services, Windows 2000 does not supply all of the required objects to establish the connection. This has been documented and posted at a number of sites. Although most say Microsoft denies that this is the case, one site actually posted the data streams showing the denial of access to certain objects.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Past Releases
iSeries i5/OS: Top 10 Q&As
iSeries i5/OS: Top 10 Q&As
Error message within the printer file
How often are message queues cleared?
Connect the dots: Get your iSeries servers talking to one another
Embedding SQL into RPG LE programs
In search of a table that shows system & O/S release compatibility
V5R3 view disk IOA cache battery expiration
New option within the WRKSYSACT command
See the users with *change or *all authority

Upgrading
Learn the i: iSeries DevCon coming up in Orlando
System i blades not selling yet, it seems
ISV lures art company away from HP to iSeries
iSeries i5/OS: Top 10 Q&As
iSeries i5/OS: Top 10 Q&As
IBM cuts prices for System i Enterprise, HA servers
Readers respond to pending V5R4 release
SAP-friendly iSeries lowers ERP barriers
In search of a table that shows system & O/S release compatibility
New option within the WRKSYSACT command

Documentation
How database views get deleted from AS/400 libraries
Print private authorities (PRTPVTAUT) command for user objects in a library with *public exclude
iSeries i5/OS: Top 10 Q&As
iSeries i5/OS: Top 10 Q&As
New, undocumented Query function can boost your productivity
New option within the WRKSYSACT command
See the users with *change or *all authority
If at first you don't succeed, read the documentation
Copy a spoolfile (report) into the IFS as a .txt file
Limit command line access

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
AS/400  (Search400.com)
i5/OS  (Search400.com)
iSeries  (Search400.com)
OS/400  (Search400.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



iSeries Networking - Printing, Remote Access, TCP/IP
HomeNewsTopicsITKnowledge ExchangeTipsBlogsAsk the ExpertsMultimediaWhite PapersProducts
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 1999 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts