IBM Support

MF64414 - LIC-INCORROUT Guest Access Fails with Extended Session Secur

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

LIC-INCORROUT Guest Access Fails with Extended Session Secur


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
CO   5770999  V7R3M0    MF64296   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the 'IBM License Agreement for Machine
Code', the terms of which were provided in a printed document that was
delivered with the machine.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.





APAR Error Description / Circumvention

-----------------------------------------------
IBM i NetServer connections that rely on access through the
NetServer guest user profile fail when the client and server
negotiate SMB2 extended session security.

CORRECTION FOR APAR MA46783 :
-----------------------------
SMB2 session signing and extended session security are not
possible when the connection is established using the guest
profile support.  IBM i NetServer was sending an incorrect
Session Setup response to the client when guest support was
used.

This PTF corrects the IBM i NetServer response so the connection
as guest can complete successfully.

CIRCUMVENTION FOR APAR MA46783 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF64187 :
=================================================

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

IBM i NetServer can be configured to disable the SMB1 protocol by using
the following command:

CALL QZLSMAINT PARM('40' '1' '0x100')

The configuration change takes effect immediately, and any existing
SMB1 connections to the server will fail.  It is recommended to make
the configuration change while NetServer is not active.


Use of the SMB1 protocol can be restored by calling the following
command, if needed:

CALL QZLSMAINT PARM('40' '2' '0x100')


Whenever the server is configured to enable or disable a version of the
SMB protocol, it may be necessary to reboot client PCs for the client
to begin using the new settings.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF64298      LIC-INCORROUT Add Extended Session Security for IBM i NetSer
   MF61727      LIC-UNPRED TMPSTG LEAK IN NETSERVER SMB2 QUERY DIRECTORY
   MF64207      LIC-PERF SMB2 Query Directory Causing Paging
   MF64187      LIC-OTHER Allow Disable of SMB1 Support for IBM i NetServer
   MF64050      LIC-INCORROUT SMB2 Close chained after Query fails with STAT
   MF63675      LIC-INCORROUT 'SAVE AS' FROM INTERNET EXPLORER TO A NETSERVE
   MF63672      OSP-MSGMCH3203 HEAP SPACE PROBLEM CAUSES NETSERVER TO FAIL T
   MF63402      LIC-INCORROUT SMB2 COMPATIBILITY ENHANCEMENTS
   MF63369      LIC-INCORROUT SMB2 Delete Fails for Some Clients
   MF63136      LIC-OTHER-INCORROUT WINDOWS SYSTEM ERROR 1359 MAPPING SMB2 N
   MF61210      LIC-OTHER-INCORROUT NETSERVER ACCESS DENIED
   MF60936      LIC Support Raw NTLMSSP Authentication to IBM i NetServer
   MF62394      OSP-OTHER-UNPRED WINDOWS CLIENT GETS "SYSTEM ERROR 1359" WHE
   MF62364      OSP-OTHER-INCORROUT CANNOT WRITE TO NETSERVER SHARE WHEN "AL
   MF61485      LIC-INCORROUT SMB2 Null bytes padded at end of file
   MF61182      LIC-OTHER IBM i NetServer does not grant SMB2 oplocks
   MF61075      LIC-OTHER Listing shares by UNC server name fails for Window
   MF61075      LIC-OTHER SMB2 with Samba client slow when signing is requir
   MF61075      LIC-OTHER SMB2 Lock requests may unexpectedly conflict
   MF60937      LIC Heap Storage Leak for IBM i NetServer SMB2 Requests
   MF60937      LIC-INCORROUT SMB2 Sharing Violation on Get Attributes
   MF60934      LIC Multiple SMB2 Failures with Samba 4 Clients

Summary Information

System..............................i
Models..............................
Release.............................V7R3M0
Licensed Program...............5770999
APAR Fixed..........................View details for APAR MA46783
Superseded by:......................View fix details for PTF MF69182
Recompile...........................N
Library.............................QSYS
MRI Feature ........................NONE
Cum Level...........................C8025730


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0","Product":{"code":"SWG60","label":"IBM i"},"Component":"5770999","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]

Document Information

Modified date:
17 December 2021