IBM Support

MF65274 - OSP-OTHER-INCORROUT NETSERVER NOT RESPONDING AND QZLSFILET I

PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

OSP-OTHER-INCORROUT NETSERVER NOT RESPONDING AND QZLSFILET I


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
CO   5770999  V7R2M0    MF64821   00/00    0000
CO   5770999  V7R2M0    MF64295   00/00    0000
DIST 5770SS1  V7R2M0    SI65520   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the 'IBM License Agreement for Machine
Code', the terms of which were provided in a printed document that was
delivered with the machine.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.


APAR Error Description / Circumvention

-------------------------------------------------
Instances occur where IBM i NetServer response takes longer than
usual and eventually NetServer appears to lock up and mapped
drives are not accessible. When this happens, the QZLSFILET job
is in MTXW status. After a period of time the problem clears and
NetServer operates normally.

CORRECTION FOR APAR 'MA47234' :
-------------------------------
A timing window exists in the SMB2 Read and Write request
processors where a file reference may not be released if the
client session begins close processing while the operation is in
progress.  The dangling reference can cause the session close
processing to take a long time to complete.

IBM i NetServer has been changed to ensure file references are
released.  The PTF corrects the problem.

CIRCUMVENTION FOR APAR 'MA47234' :
----------------------------------
None.

DESCRIPTION OF PROBLEM FIXED FOR APAR 'MA47236' :
-------------------------------------------------
Attempts to run certain application executable files that are
stored in IBM i NetServer shares will hang. Network activity
shows that the client is repeatedly attempting to read the same
range of data beyond the end of the executable file during the
hang.

CORRECTION FOR APAR 'MA47236' :
-------------------------------
IBM i NetServer follows Posix file system semantics that reading
past the end of file is not an error.  The read returns success
with zero bytes read.  The SMB2 protocol specification is
unclear that an error response is expected in this situation.
Samba servers handle the same condition by returning a
STATUS_END_OF_FILE error.

The IBM i NetServer SMB2 behavior has been changed to return
STATUS_END_OF_FILE if a client attempts to read beyond the end
of file.  This more closely matches the behavior of other SMB2
servers.

CIRCUMVENTION FOR APAR 'MA47236' :
----------------------------------
None.


Activation Instructions

None.




Special Instructions

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF64937 :
=================================================

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

If you have experienced corruption or loss of IBM i NetServer function,
an IPL of the system will be required to recover after applying the
PTF.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF64186 :
=================================================

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

IBM i NetServer can be configured to disable the SMB1 protocol by using
the following command:

CALL QZLSMAINT PARM('40' '1' '0x100')

If SMB2 negotiation has not already been enabled, also call the
following command:

CALL QZLSMAINT PARM('40' '1' '0x400')

The configuration change takes effect immediately, and any existing
SMB1 connections to the server will fail.  It is recommended to make
the configuration change while NetServer is not active.


Use of the SMB1 protocol can be restored by calling the following
command, if needed:

CALL QZLSMAINT PARM('40' '2' '0x100')


Whenever the server is configured to enable or disable a version of the
SMB protocol, it may be necessary to reboot client PCs for the client
to begin using the new settings.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF63694 :
=================================================

ENDTCPSVR *NETSVR before applying or removing this PTF.
STRTCPSVR *NETSVR after applying or removing this PTF.


*** Important compatibility note ***
The SMB2 protocol requires use of enhanced security negotiation when
making a connection to the server.  If clients have been configured
with the minimum NTLMSSP client session security policy set to include
'Require NTLMv2 Session Security', those clients will fail to connect
to NetServer with SMB2.  NetServer does not support NTLMv2 Session
Security, and the Windows SMB2 client will enforce the policy by
preventing the connection.


To enable SMB2 negotiation via SMB1 (for Windows clients with SMB1
installed), run the following command on the IBM i:
CALL QZLSMAINT PARM('40' '1' '0x400')

If SMB2 negotiation needs to be disabled to restore server behavior to
the default, run the following command:
CALL QZLSMAINT PARM('40' '2' '0x400')


*** SMB2 Shared Printer Differences ***
SMB Version 2 (SMB2) has been added and will become the default SMB
version used by clients that support it after SMB2 negotiation is
enabled with the steps described above. The new protocol handles
printing differently, and printer functions will no longer work as they
did when using SMB1. Documents can still be printed to shared printer
queues from Windows clients, but additional steps are required to
configure the printer.

1. Open the Windows command prompt and use the NET USE command to map
the IBM i NetServer printer share to an unused local LPT printer port.
Example: NET USE LPTx \\server\printer_share (where x is a valid LPT
port number)

2. Add the printer share as a local printer on the LPT port used in
step 1 with the correct printer driver for the shared printer.

Printers added in this way will allow spooling output to the network
printer share, but advanced queue management for the mapped printer is
not supported at this time.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF65257      LIC-OTHER-INCORROUT OPENING A READ ONLY XLSX SHEET, OFFICE D
   MF65009      LIC-INCORROUT Change Default SMB2 IOCTL Response
   MF65009      LIC-INCORROUT Invalid Session Setup Responses After Failed C
   MF65009      LIC-INCORROUT Unsupported Security Option on SMB2 Negotiate
   MF65009      LIC-INCORROUT SMB2 Server Delays on Set Attribute
   MF65009      LIC-INCORROUT Honor FILE_NON_DIRECTORY_FILE Flag
   MF64937      LIC-INCORROUT IBM i NetServer RMDIR and Other Failures
   MF64822      LIC-SRCB6000302-UNPRED SYSTEM FAILS WITH SRCB6000302
   MF64401      LIC-OTHER INTERNAL EXTENSIONS FOR MAINTAINABILITY
   MF64413      LIC-INCORROUT Guest Access Fails with Extended Session Secur
   MF64297      LIC-INCORROUT Add Extended Session Security for IBM i NetSer
   MF64206      LIC-PERF SMB2 Query Directory Causing Paging
   MF64186      LIC-OTHER Allow Disable of SMB1 Support for IBM i NetServer
   MF64049      LIC-INCORROUT SMB2 Close chained after Query fails with STAT
   MF63694      LIC-OTHER Add IBM i NetServer support for SMB Version 2 (SMB
   MF59027      OSP MANY 4400 4002 VLOG ENTRIES AFTER APPLYING PTF
   MF58775      LIC-OTHER-SRCB6000302-UNPRED FAILURE IN NETSERVER CODE
   MF61671      OSP-OTHER-INCORROUT NETSERVER USAGE WITH LINUX SMBCLIENT 4.1
   MF60997      LIC-OTHER-INCORROUT NETSERVER ACCESS DENIED
   MF58083      OSP-OTHER-PERFM SLOW COPY TO AND FROM NETSERVER IN HIGH NETW
   MF62363      OSP-OTHER-INCORROUT CANNOT WRITE TO NETSERVER SHARE WHEN "AL
   MF58571      OSP-SRCB6000302-UNPRED SRCB6000302 CAUSING SERVER TO IPL - N
   MF63650      OSP-MSGMCH3203 HEAP SPACE PROBLEM CAUSES NETSERVER TO FAIL T

Summary Information

System.............................. i
Models..............................
Release............................. V7R2M0
Licensed Program............... 5770999
APAR Fixed.......................... View details for APAR MA47234
View details for APAR MA47236
Superseded by:...................... View fix details for PTF MF66640
Recompile........................... N
Library............................. QSYS
MRI Feature ........................ NONE
Cum Level........................... C9123720


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

Document information

More support for: i family

Software version: V7R2M0

Operating system(s): OS/400

Reference #: MF65274

Modified date: 14 September 2018