IBM Support

MF64206 - LIC-PERF SMB2 Query Directory Causing Paging

PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

LIC-PERF SMB2 Query Directory Causing Paging


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
CO   5770999  V7R2M0    MF63692   00/00    0000
CO   5770999  V7R2M0    MF63693   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the 'IBM License Agreement for Machine
Code', the terms of which were provided in a printed document that was
delivered with the machine.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.





APAR Error Description / Circumvention

-----------------------------------------------
The IBM i NetServer QZLSSERVER job experiences high paging
levels when SMB2 is in use.

CORRECTION FOR APAR MA46670 :
-----------------------------
An internal heap allocation used by IBM i NetServer for Query
Directory operations is much larger than necessary.  Frequent
Query Directory operations will cause a lot of system activity
to allocate and clear heap space.

This PTF reduces the internal allocation to an appropriate size
for the amount of data that can be returned in a Query Directory
response.

CIRCUMVENTION FOR APAR MA46670 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


ENDTCPSVR *NETSVR before applying or removing this PTF.
STRTCPSVR *NETSVR after applying or removing this PTF.

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF64186 :
=================================================

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

IBM i NetServer can be configured to disable the SMB1 protocol by using
the following command:

CALL QZLSMAINT PARM('40' '1' '0x100')

If SMB2 negotiation has not already been enabled, also call the
following command:

CALL QZLSMAINT PARM('40' '1' '0x400')

The configuration change takes effect immediately, and any existing
SMB1 connections to the server will fail.  It is recommended to make
the configuration change while NetServer is not active.


Use of the SMB1 protocol can be restored by calling the following
command, if needed:

CALL QZLSMAINT PARM('40' '2' '0x100')


Whenever the server is configured to enable or disable a version of the
SMB protocol, it may be necessary to reboot client PCs for the client
to begin using the new settings.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF63694 :
=================================================

ENDTCPSVR *NETSVR before applying or removing this PTF.
STRTCPSVR *NETSVR after applying or removing this PTF.


*** Important compatibility note ***
The SMB2 protocol requires use of enhanced security negotiation when
making a connection to the server.  If clients have been configured
with the minimum NTLMSSP client session security policy set to include
'Require NTLMv2 Session Security', those clients will fail to connect
to NetServer with SMB2.  NetServer does not support NTLMv2 Session
Security, and the Windows SMB2 client will enforce the policy by
preventing the connection.


To enable SMB2 negotiation via SMB1 (for Windows clients with SMB1
installed), run the following command on the IBM i:
CALL QZLSMAINT PARM('40' '1' '0x400')

If SMB2 negotiation needs to be disabled to restore server behavior to
the default, run the following command:
CALL QZLSMAINT PARM('40' '2' '0x400')


*** SMB2 Shared Printer Differences ***
SMB Version 2 (SMB2) has been added and will become the default SMB
version used by clients that support it after SMB2 negotiation is
enabled with the steps described above. The new protocol handles
printing differently, and printer functions will no longer work as they
did when using SMB1. Documents can still be printed to shared printer
queues from Windows clients, but additional steps are required to
configure the printer.

1. Open the Windows command prompt and use the NET USE command to map
the IBM i NetServer printer share to an unused local LPT printer port.
Example: NET USE LPTx \\server\printer_share (where x is a valid LPT
port number)

2. Add the printer share as a local printer on the LPT port used in
step 1 with the correct printer driver for the shared printer.

Printers added in this way will allow spooling output to the network
printer share, but advanced queue management for the mapped printer is
not supported at this time.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF64186      LIC-OTHER Allow Disable of SMB1 Support for IBM i NetServer
   MF64049      LIC-INCORROUT SMB2 Close chained after Query fails with STAT
   MF63694      LIC-OTHER Add IBM i NetServer support for SMB Version 2 (SMB
   MF59027      OSP MANY 4400 4002 VLOG ENTRIES AFTER APPLYING PTF
   MF58775      LIC-OTHER-SRCB6000302-UNPRED FAILURE IN NETSERVER CODE
   MF61671      OSP-OTHER-INCORROUT NETSERVER USAGE WITH LINUX SMBCLIENT 4.1
   MF60997      LIC-OTHER-INCORROUT NETSERVER ACCESS DENIED
   MF58083      OSP-OTHER-PERFM SLOW COPY TO AND FROM NETSERVER IN HIGH NETW
   MF62363      OSP-OTHER-INCORROUT CANNOT WRITE TO NETSERVER SHARE WHEN "AL
   MF58571      OSP-SRCB6000302-UNPRED SRCB6000302 CAUSING SERVER TO IPL - N
   MF63650      OSP-MSGMCH3203 HEAP SPACE PROBLEM CAUSES NETSERVER TO FAIL T

Summary Information

System.............................. i
Models..............................
Release............................. V7R2M0
Licensed Program............... 5770999
APAR Fixed.......................... View details for APAR MA46670
Superseded by:...................... View fix details for PTF MF66384
Recompile........................... N
Library............................. QSYS
MRI Feature ........................ NONE
Cum Level........................... C8032720


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

Document information

More support for: i family

Software version: V7R2M0

Operating system(s): OS/400

Reference #: MF64206

Modified date: 23 October 2017