SMB shares on Windows, access from i5/OS (OS/400), access rights

[Former Member]

We are running SAP R/3 on i5/OS.

We would like to access, from SAP, files on a Windows server, through SMB (Windows file sharing).

In other words:

The SMB server is the Windows machine.

The SMB client is the i5/OS machine.

This is different from the situation with a Windows application server and an i5/OS database server.

We have some problems with the access rights.

We manage to give access to user PRDOFR, but that does not help for accesses from the SAPsystem, because the SAPsystem runs under user-ID PRD02.

How can we solve this?

If we cannot solve this, we may have to consider NFS: an NFS client on i5/OS and an NFS server on Windows (but NFS is "foreign" to both platforms).

[Former Member · Accepted solution]

Hello Peter,

Use QNTC instead of NFS? Basically share the directory on Windows, then map it from QNTC of i5/OS. More detailed info is available on the InfoCenter.

Give access to PRD02 with same password on that direcotry on Windows, not just PRDOFR.

It worked with R/3 4.6C on OS/400 V4R5 and Windows NT domain before...

Best regards,

Victor

[Former Member · Accepted solution]

I work with Peter and this was one of our considerations. However, the concern is can we change the password of PRD02 with out any negative side affect.

[Former Member · Accepted solution]

If PRD02 is created as a user in Windows Domain, and the directory is accessible to Domain\PRD02. You only need to change the passwords twice (iSeries and Windows domain).

SSO between iSeries and Windows is possible - a bit overkill if you just need to deal with a handful of user profiles.

Thank you,

Victor

[Former Member · Accepted solution]

Thank you, I should have been a tad bit more clear. Changing the password of PRD02 on the iSeries should not cause any ill side affects to the SAP environment on the iSeries?

[Former Member · Accepted solution]

Hi Erick,

stopsap first, change the password of PRD02 on all iSeries machines (SAPTRANSHOST, HA backup machine, other machines having this user profile for interface reason, etc), then startsap.

It should be just fine.

Best regards,

Victor

[Former Member · Accepted solution]

Hi Erick,

I can only support Victor!

You can (and should) change the password of PRD02 - and if you change it or not, you should be able to manually sync it with windows and then it will work perfect via QNTC )

Regards

Volker Gueldenpfennig, consolut.gmbh

http://www.consolut.de - http://www.4soi.de - http://www.easymarketplace.de

[Former Member · Accepted solution]

Thank you to both of you.

The problem synchronizing with the Windows server was the password is unknown. If there will be no repercussion, I will change the password and synchronizing with all applicable servers.

Thanks again for you help and I am sure Peter will acknowledge the solution as well.

Erick

[Former Member · Accepted solution]

Hi Erick,

... then you should tell us this point ... (or might want to read the post steps in the inst docu ...)

up to 6.40 this password is always :sapnnpwd (where "nn" is the instance number)

as of 7.0 SR1 with the master password, it should be the master password, that you selected during the installation. You can test this with logging on with this user. You might be kicked out immediately but this is different to the message: password wrong ...

Regards

Volker Gueldenpfennig, consolut.gmbh

http://www.consolut.de - http://www.4soi.de - http://www.easymarketplace.de