IBM Support

MF65585 - LIC-INCORROUT IBM i NETSERVER GUEST ACCESS FAILS AFTER INSTA

PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

LIC-INCORROUT IBM i NETSERVER GUEST ACCESS FAILS AFTER INSTA


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
CO   5770999  V7R3M0    MF64772   00/00    0000
CO   5770999  V7R3M0    MF64296   00/00    0000
DIST 5770SS1  V7R3M0    SI65556   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the 'IBM License Agreement for Machine
Code', the terms of which were provided in a printed document that was
delivered with the machine.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.


APAR Error Description / Circumvention

-------------------------------------------------
IBM i NetServer guest access fails after installation of prior
NetServer PTFs.  Access via authenticated user sessions
continues to work correctly.

CORRECTION FOR APAR 'MA47408' :
-------------------------------
A security check to restrict IBM i NetServer access to
authenticated sessions was too restrictive and prevented access
to valid guest sessions as well as malicious client activity.

The PTF corrects the check to allow guest access.

CIRCUMVENTION FOR APAR 'MA47408' :
----------------------------------
Access the server using valid IBM i user credentials.

DESCRIPTION OF PROBLEM FIXED FOR APAR 'MA47292' :
-------------------------------------------------
Internal extensions for maintainability are required.

CORRECTION FOR APAR 'MA47292' :
-------------------------------
Internal extensions for maintainability have been added.

CIRCUMVENTION FOR APAR 'MA47292' :
----------------------------------
None.


Activation Instructions

None.




Special Instructions


ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

If you have experienced corruption or loss of IBM i NetServer function,
an IPL of the system will be required to recover after applying the
PTF.

ENDTCPSVR *NETSVR before applying or removing the PTF.
STRTCPSVR *NETSVR after applying or removing the PTF.

IBM i NetServer can be configured to disable the SMB1 protocol by using
the following command:

CALL QZLSMAINT PARM('40' '1' '0x100')

The configuration change takes effect immediately, and any existing
SMB1 connections to the server will fail.  It is recommended to make
the configuration change while NetServer is not active.


Use of the SMB1 protocol can be restored by calling the following
command, if needed:

CALL QZLSMAINT PARM('40' '2' '0x100')


Whenever the server is configured to enable or disable a version of the
SMB protocol, it may be necessary to reboot client PCs for the client
to begin using the new settings.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF65538      LIC-UNPRED IBM i NETSERVER ACCESS DENIED MESSAGE FOR ALL USE
   MF65538      LIC-OTHER-INCORROUT IBM i NETSERVER READ-ONLY SHARE DOES NOT
   MF65468      LIC-PERFM IBM i NETSERVER DELAYS DUE TO INVALID REQUESTS
   MF65400      LIC-INCORROUT IBM i NETSERVER INVALID HANDLE OR DIRECTORY /
   MF65386      LIC-OTHER-SRCB6000103-UNPRED UNINITIALIZED ENTRY POINTER
   MF65275      OSP-OTHER-INCORROUT NETSERVER NOT RESPONDING AND QZLSFILET I
   MF65275      OSP-OTHER-UNPRED NETSERVER CLIENT ATTEMPTS TO READ PAST EOF
   MF64871      LIC-INCORROUT Change Default SMB2 IOCTL Response
   MF64871      LIC-INCORROUT Invalid Session Setup Responses After Failed C
   MF64871      LIC-INCORROUT Unsupported Security Option on SMB2 Negotiate
   MF64871      LIC-INCORROUT SMB2 Server Delays on Set Attribute
   MF64871      LIC-INCORROUT Honor FILE_NON_DIRECTORY_FILE Flag
   MF64938      LIC-INCORROUT IBM i NetServer RMDIR and Other Failures
   MF64774      LIC-SRCB6000302-UNPRED SYSTEM FAILS WITH SRCB6000302
   MF64672      LIC-UNPRED-MSGCPIB683 NETSERVER BECOMES UNUSABLE
   MF64402      LIC-OTHER INTERNAL EXTENSIONS FOR MAINTAINABILITY
   MF64414      LIC-INCORROUT Guest Access Fails with Extended Session Secur
   MF64298      LIC-INCORROUT Add Extended Session Security for IBM i NetSer
   MF61727      LIC-UNPRED TMPSTG LEAK IN NETSERVER SMB2 QUERY DIRECTORY
   MF64207      LIC-PERF SMB2 Query Directory Causing Paging
   MF64187      LIC-OTHER Allow Disable of SMB1 Support for IBM i NetServer
   MF64050      LIC-INCORROUT SMB2 Close chained after Query fails with STAT
   MF63675      LIC-INCORROUT 'SAVE AS' FROM INTERNET EXPLORER TO A NETSERVE
   MF63672      OSP-MSGMCH3203 HEAP SPACE PROBLEM CAUSES NETSERVER TO FAIL T
   MF63402      LIC-INCORROUT SMB2 COMPATIBILITY ENHANCEMENTS
   MF63369      LIC-INCORROUT SMB2 Delete Fails for Some Clients
   MF63136      LIC-OTHER-INCORROUT WINDOWS SYSTEM ERROR 1359 MAPPING SMB2 N
   MF61210      LIC-OTHER-INCORROUT NETSERVER ACCESS DENIED
   MF60936      LIC Support Raw NTLMSSP Authentication to IBM i NetServer
   MF62394      OSP-OTHER-UNPRED WINDOWS CLIENT GETS "SYSTEM ERROR 1359" WHE
   MF62364      OSP-OTHER-INCORROUT CANNOT WRITE TO NETSERVER SHARE WHEN "AL
   MF61485      LIC-INCORROUT SMB2 Null bytes padded at end of file
   MF61182      LIC-OTHER IBM i NetServer does not grant SMB2 oplocks
   MF61075      LIC-OTHER Listing shares by UNC server name fails for Window
   MF61075      LIC-OTHER SMB2 with Samba client slow when signing is requir
   MF61075      LIC-OTHER SMB2 Lock requests may unexpectedly conflict
   MF60937      LIC Heap Storage Leak for IBM i NetServer SMB2 Requests
   MF60937      LIC-INCORROUT SMB2 Sharing Violation on Get Attributes
   MF60934      LIC Multiple SMB2 Failures with Samba 4 Clients

Summary Information

System.............................. i
Models..............................
Release............................. V7R3M0
Licensed Program............... 5770999
APAR Fixed.......................... View details for APAR MA47408
View details for APAR MA47292
Superseded by:...................... View fix details for PTF MF66385
Recompile........................... N
Library............................. QSYS
MRI Feature ........................ NONE
Cum Level........................... C9116730


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

Document information

More support for: i family

Software version: V7R3M0

Operating system(s): OS/400

Reference #: MF65585

Modified date: 14 January 2019