acces a share on IBM I-series (IFS)

_{Tuesday, April 5, 2016 12:04 PM}

Hi,

I'm trying to access a share on an IBM I-series but it is not working. 

My pc is operating on WIN10 pro and is member of a domain (server 2008 R2).

I assigned a driveletter to a share on the I-series by using "net use .....", which is working without any fault.

I also changed the "Lanman authentication level" in secpol.msc to "send LM and NTLM: use NTLMv2 if negotiated".

when I now want to display data on this drive (like Change dir/drive) , I get an error like "an unexpected network error..." and in another program it says "connect error (4)"

I also tried solutions mentioned in al lot of discussions, but no results.

Anybody any ideas,

lots of thanks

_{Wednesday, April 20, 2016 10:06 AM ✅Answered | 1 vote}

Hi to all,

I just spoke to a IBM technician and he provided the solution. I had to switch to "optional"

Communications between client and server can be made more secure by requiring clients to sign requests.

This is done using a key derived from the client's authentication data. By default, clients are not required to sign requests.

To require clients to sign requests, follow these steps:

1. Open iSeries™ Navigator and connect to the system you want to work with.
2. Expand Network > Servers.
3. Click TCP/IP to display a list of TCP/IP servers available.
4. Right-click iSeries NetServer™ and select Properties.
5. Click the Security tab and click the Next Start button.
6. From the Require clients to sign requests drop down box, choose Yes, Optional, or No.

Parent topic: iSeries NetServer security

Jacques

_{Tuesday, April 5, 2016 6:44 PM}

Did you need to do anything before the drive mapped?

Whilst connected, if from a admin PowerShell prompt you enter;

Get-SmbConnection

Does that show the connection, and if so what dialect is shown?

_{Wednesday, April 6, 2016 12:50 PM}

I just entered "net use" with the appropiate credentials.

If I use powershell and execute "Get-SmbConnection", it returns the connection with dialect 1.5

_{Wednesday, April 6, 2016 12:54 PM}

I entered in powerschell:

 net use k: \zon004\sysroot * /user:syspjh /persistent:yes

then I want to changedir to k:

and this is what it returns:

Set-Location : Cannot find path 'K:\ because it does not exist.
At line:1 char:1

• Set-Location K:

    + CategoryInfo          : ObjectNotFound: (K:\String) [Set-Location], ItemNotFoundException
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.SetLocationCommand

_{Wednesday, April 6, 2016 1:14 PM}

If you open Windows Explorer (NOT Internet Explorer), do you see K: there?

Shortcut key: Winkey + E

Best regards, George

_{Wednesday, April 6, 2016 2:58 PM}

Hi,

I have I Series experience, maybe I can help.  Normally there's no problem

using shares on the iSeries from a Windows 10 machine, but it could depend

on some policies on your Windows PC and how old the i Series is.

Do you get any kind of error back when you do the net use?  Something

should be returned, either success or failure...

sysroot isn't a normal share for an iSeries, so make sure it exists and you

have permissions set to use it.

Have you made sure Netserver is running on the iSeries?

_{Thursday, April 7, 2016 5:33 AM}

Yes I do,

_{Thursday, April 7, 2016 5:37 AM}

A normal Win10 pc can use 'use net' without a problem. Even not beiing member of our domain (workgroup).

My pc is WIN 10 pro and in a domain (switching to a workgroup does not work also)

The share is accepted with 'net use' (succesfull) and the netserver is running. The i-series just had an ptf-update last weekend.

_{Thursday, April 7, 2016 5:45 AM}

Then what happens if you use K: as a drive in Windows Explorer and put some files there?

Best regards, George

_{Thursday, April 7, 2016 6:54 AM}

not accessable. An unexpected network error occured.

_{Thursday, April 7, 2016 12:49 PM}

Have you tried from another PC?  (Just to eliminate  a local problem)

It all sounds like it's a permissions problem of some kind, but it's hard to tell where. 

If your i-series is under software maintenance, I'd call IBM support if I were you, especially since you just did a PTF batch last weekend.

Bob Comer

_{Friday, April 8, 2016 7:03 AM}

Hi Jacques,

Please also take a try to ask this issue under IBM communities:

https://www-304.ibm.com/connections/communities/service/html/allcommunities?lnk=fco-comm-usen

Please note: Since this website is not hosted by Microsoft, the information may change without notice. Microsoft does not guarantee the accuracy of this information.

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

_{Thursday, April 14, 2016 8:49 AM}

I guess you're right.

we are now reviewing the secpol.

Jacques

_{Thursday, April 14, 2016 8:50 AM}

I'll try to do that. Looks like a dark forrest overthere.

Jacques

_{Tuesday, April 19, 2016 12:20 PM}

Hi Jacques,

What is your current situation?

Have you received any results from the IBM side?

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

_{Wednesday, April 20, 2016 5:28 AM}

I called IBM yesterday and am now waiting for a technician to call back.

Jacques

_{Wednesday, April 20, 2016 10:07 AM}

forgot to tell, I set it to "optional"

Jacques

_{Thursday, April 28, 2016 8:40 AM}

Well,

Thanks for the update and sharing.

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.