IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Delivered
Workspace IBM i
Categories Security
Created by Guest
Created on Jun 13, 2017

RELATED IDEAS

Would like QNTC to support AES SMB2 mutual authentication using Kerberos

QNTC, AES, and SMB2 fail to authenticate using Kerberos to network shares.

This issue is related to the encryption type of Kerberos ticket. When AES is used, it will need a mutual authentication on the message between the client and the server, however, QNTC doesn't support mutual authentication.

The workaround when using SMB2 with Kerberos authentication is to Disable RequireSecuritySignature(set to 0) under KEY_LOCAL_MACHINE->SystemCurrentControlSet->Services->LanmanServer->Parameters


Use Case:

After upgrading IBM i from 7.2 to 7.3, QNTC quit working. We had to add a *SYS environment variable "QIBM_ZLC_SMC_VERS" = '1' to force SMB out of version 2 and into version 1.

We were driven to use the more current AES authentication on Kerberos tickets and are using them in our keytab file for "cifs" entries.


Idea priority Medium
  • Guest
    Reply
    |     Jul 27, 2018

    This is available via PTF in IBM i releases 7.2 and 7.3.

    7.3 PTF - SI65802
    7.2 PTF - SI65842

    Note that there is a second PTF for each of these which is a prerequisite that will be sent automatically.

    The external support document associated with these fixes can be found at the following link:
    http://www-01.ibm.com/support/docview.wss?uid=nas2SE67762

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.