87 lines
5.5 KiB
HTML
87 lines
5.5 KiB
HTML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
||
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="dc.language" scheme="rfc1766" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<meta name="dc.date" scheme="iso8601" content="2005-09-13" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow"/>
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<title>Failures enrolling users and groups</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="ic.css" />
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
|
||
|
|
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
|
||
|
|
|
||
|
|
<a name="rzahqtrepi"></a>
|
||
|
|
<h3 id="rzahqtrepi">Failures enrolling users and groups</h3>
|
||
|
|
<p>If you cannot enroll groups or users to the Windows environment on iSeries,
|
||
|
|
follow this procedure to determine the problem.</p>
|
||
|
|
<p><span class="bold">From i5/OS:</span></p>
|
||
|
|
<ul>
|
||
|
|
<li>Check for errors in the message log for this network server description
|
||
|
|
(NWSD) (designated during server installation to be QSYSOPR, a user-defined
|
||
|
|
message log, or the user job log). Follow the error message Recovery actions
|
||
|
|
to correct the problem. You can also find error codes on the Work with NWS
|
||
|
|
Enrollment (WRKNWSENR) display.</li>
|
||
|
|
<li>If the message log has <tt>User Admin error NTA0282</tt>, see <a href="rzahqtuapi.htm#rzahqtuapi">User enrollment authorization problems</a>.</li>
|
||
|
|
<li>Make sure that the status of the server is <tt>VARIED
|
||
|
|
ON</tt>.</li>
|
||
|
|
<li>Check enrollment status (see <a href="rzahqenspi.htm#rzahqenspi">Enroll a single i5/OS user to the Windows environment using iSeries Navigator</a>) and look for error
|
||
|
|
messages. Press F5 to refresh the status.</li>
|
||
|
|
<li>Verify that i5/OS is set to keep passwords (QRETSVRSEC is set to <tt>1</tt>). Also verify that users who are trying to enroll sign-on to i5/OS <span class="bold">after</span> this value is set.</li>
|
||
|
|
<li>Specify and create a message queue for the NWSD; check the queue for messages.</li>
|
||
|
|
<li>On i5/OS, enter the <tt>WRKACTJOB</tt> command. Check
|
||
|
|
the <tt>QPRFSYNCH</tt> job in the <tt>QSYSWRK</tt> subsystem. Check the job log by pressing F10 for more detailed
|
||
|
|
messages.</li>
|
||
|
|
<li>On i5/OS, enter the <tt>WRKJOB <span>nwsdname</span></tt> command, where <span class="italic">nwsdname</span> is the
|
||
|
|
name of the NWSD for your integrated server. If the job is active, display
|
||
|
|
the job log (Press F10 for more detail messages). If you end the job, display
|
||
|
|
the spooled file.</li></ul>
|
||
|
|
<p><span class="bold">From the integrated Windows server:</span></p>
|
||
|
|
<p>You can also try the following steps to determine the problem.</p>
|
||
|
|
<ul>
|
||
|
|
<li>See if the User Administration Service is running.
|
||
|
|
<ol type="1">
|
||
|
|
<li>From the integrated server's <span class="bold">Start</span> menu, select <span class="bold">Programs</span>, then <span class="bold">Administrative Tools</span>,
|
||
|
|
then <span class="bold">Component Services</span>.</li>
|
||
|
|
<li>Select <span class="bold">System Tools</span>, then <span class="bold">Services</span>.</li>
|
||
|
|
<li>See if <span class="bold">iSeries User Administration</span> appears in the
|
||
|
|
list of services.</li>
|
||
|
|
<li>If the <span class="bold">iSeries User Administration</span> service is listed,
|
||
|
|
but the status does not show that it is started, Right-click <span class="bold">iSeries User Administration</span> and select <span class="bold">Start</span> from
|
||
|
|
the menu.</li>
|
||
|
|
<li>If <span class="bold">iSeries User Administration</span> is not listed, do
|
||
|
|
the following to reinstall it:
|
||
|
|
<ol type="a">
|
||
|
|
<li>From the <span class="bold">Start</span>, select <span class="bold">Run</span>,
|
||
|
|
and type <tt>command</tt> to open a command prompt window.</li>
|
||
|
|
<li>Go to the C: drive (or the current Windows drive).</li>
|
||
|
|
<li>Type <tt>%SystemRoot%\as400wsv\admin\qvnadaem /install</tt> and press Enter.</li>
|
||
|
|
<li>Close the <span class="bold">Services</span> window.</li>
|
||
|
|
<li>Re-open <span class="bold">Services</span>.</li>
|
||
|
|
<li>If you have not started <span class="bold">iSeries User Administration</span>,
|
||
|
|
click <span class="bold">Start</span>.</li></ol></li></ol></li></ul>
|
||
|
|
<p>If you get an error message stating that a Windows domain controller cannot
|
||
|
|
be found, it may be that you are trying to enroll users to a Windows workgroup.
|
||
|
|
In Windows networking, groups of local servers can be loosely affiliated by
|
||
|
|
using Windows workgroups. For example, if you open My Network Places and click
|
||
|
|
Computers Near Me, you will see a list of the computers in the same workgroup
|
||
|
|
as you. In iSeries Navigator, it will sometimes appear that you can enroll
|
||
|
|
i5/OS users to these workgroups, but attempting to do this will result in
|
||
|
|
an error. There is no seperate list of Windows workgroup users like there
|
||
|
|
is for a Windows domain.</p>
|
||
|
|
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
|
||
|
|
</body>
|
||
|
|
</html>
|