IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
#Operatingsystems
#Servers
 View Only
  • 1.  Curious issue user VS NetServer

    Posted 12 days ago
    I have a curious issue: I have 10 users with the same authority pointing to a folder via NetServer (in QDLS/FOLDER). They all have the same permissions, and the folder is set to *RWX for all of them; QDLS is set to *PUBLIC *RWS, and they are all listed in the directory (WRKDIRE). Nine of these users connect fine, but the 10th cannot sign in to that folder. Thinking it might be a user-specific issue, I signed that user in via a 5250 session, and they got in without a problem; I then tried changing their password, and they were able to access the folder successfully.
     
    What happened? How can I fix this next time?
     
    Thanks for the help. Regards.


    ------------------------------
    Miguel Peralta
    ------------------------------


  • 2.  RE: Curious issue user VS NetServer

    Posted 11 days ago

    No immediate idea except that I would advise to get rit of QDLS.

    BTW, can the user connect to another normal IFS based share ?



    ------------------------------
    Paul Nicolay
    Architect
    Cegeka
    ------------------------------



  • 3.  RE: Curious issue user VS NetServer

    Posted 11 days ago

    QDLS is an older file system associated, in particular, with MS/DOS. Users must be listed in the system directory (WRKDIRE).

    Checks whether a user who does not have access to the folder is listed in this directory.



    ------------------------------
    Dominique Gayte
    Président (CEO)
    i.gayte.it
    ------------------------------



  • 4.  RE: Curious issue user VS NetServer

    Posted 11 days ago
    Edited by Satid S 11 days ago

    Dear Miguel

    When a File Share entry of IBM i NetServer is created, one of its attributes is Maximum Number of Users.  My guess is that whoever created this File Share entry for your /QDLS/FOLDER specified a value of 9 for  this attribute.   You need to adjust this attribute if more users are needed to gain concurrent access. 

    I do not remember if this change is dynamic or not. If it does not work after the change, try restarting NetServer server. 

    Another point is that there is also an exit point available for NetServer's File Share and it is named QIBM_QPWFS_FILE_SERV.  You need to check if this exit point is registered or not using the command WRKREGINF. If so, ask the owner of the exit program if the program limits concurrent users accessing File Share.



    ------------------------------
    Satid S
    ------------------------------



  • 5.  RE: Curious issue user VS NetServer

    Posted 11 days ago
    Edited by Christian Jorgensen 11 days ago

    As others have said in this thread, QDLS is an old filesystem and should not be used in today's environment.

    A possible reason for your issue could be, that NetServer by default uses a threaded job QZLSFILET to handle all connections in one single job, one thread per connection, except when the user connects to QDLS, which is not tread-safe - then NetServer uses a non-threaded job QZLSFILE for each connection to QDLS.

    The job responsible for all connections for a workstation is selected on the first connection. If the connection is for a QDLS folder, a new job QZLSFILE is spun up - else a new thread is started in job QZLSFILET for the connection. When the next connection is started from the workstation, the same job is used. However, if the user connections are handled by the QZLSFILET job, no connection to QDLS folders is allowed (since QDLS is not thread-safe).

    This means you must always connect to a QDLS folder BEFORE connecting to other directories on the server.

    As said, you should not use QDLS. Unless your applications use the CPYTOPCD or CPYFRMPCD commands, you can safely move the folder contents into a directory in the root file system and change your NetServer share and applications accordingly.

    Another issue could be how the user password is typed when connecting. If the system is password level 0 or 1 (system value QPWDLVL), the system stores the password in two versions: UPPERCASE and lowercase. NetServer compares the specified password against the two stored versions, and if not equal to any of them disables the user FOR NETSERVER after a number of tries. The user must type the password in only uppercase or lowercase, not mixed case. Also note that NetServer does not disable the user profile for other interfaces, e.g. 5250, only for NetServer. You enable the user in NetServer using Navigator for i. Or you change the password on the user profile, in which case the user is also re-enabled in NetServer.

    HTH.



    ------------------------------
    Christian Jorgensen
    IT System Administrator | CEAC member
    Network of Music Partners A/S
    ------------------------------



  • 6.  RE: Curious issue user VS NetServer

    Posted 11 days ago
    Edited by Satid S 11 days ago

    I second Christian's suggestion.  QDLS file system should no longer be used UNLESS it is mandatory due to the continued use of some LEGACY APPLICATIONS that still require QDLS.   

    Using QDLS file system in the current IBM i server HW and OS release is like driving a Porsche that uses the engine from Ford Model T !?!  :-) 



    ------------------------------
    Satid S
    ------------------------------



  • 7.  RE: Curious issue user VS NetServer

    Posted 11 days ago

    While I agree with the others that you should run, not walk, away from QDLS.  Something in your original post is catching my eye: 10th person changed his password and could then get into NetServer.

    Might this apply?  https://www.ibm.com/docs/en/i/7.6.0?topic=netserver-disabled-user-profiles 

    In older versions of the OS one could do a simple CHGUSRPRF without specifying any thing to actually change and it would reset their NetServer.  The 7.2 documentation was the last one to list this capability.  https://www.ibm.com/docs/en/i/7.2.0?topic=profiles-enabling-disabled-user-profile

    I'm also curious as to what your QPWDLVL is set to.  At certain levels, case matters.

    Also, how long it's been since the last password change.  If it's been years perhaps the internal storage of the password needed to be reset.

    There's also questions if the old password had certain special characters, or began with a number, or a Q followed by a number, etc.  But maybe, for security or the users personal reasons, we don't want to go down that road.



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------