RE: Mapping Network Drive

[qsrvbas@xxxxxxxxxxxx (Tom Liotta)]

Shannon:

I haven't thought this through, but it seems you have a couple difficulties. By 
having a guest profile _and_ a /root share, you have a problem. Also, though 
it's been quite a while since I last looked at it, I recall that the QPWFSERVER 
*AUTL is specific to /QSYS.LIB objects, not any other file system; and it isn't 
exactly associated with file shares, but with almost _any_ /QSYS.LIB object 
access via a host server (and possibly TCP/IP servers as well) -- this can be a 
problem even for an exit program if it attempts to access a file or call 
another program when this is restricted.

First thing I'd do is remove the /root share. Only share directories that you 
want shared, perhaps e.g., /home and others. If you _must_ have a /root share, 
set its permissions appropriately.

If you have a /root share that isn't restricted, there's pretty much no point 
in discussing mapped drive restrictions. AFAIC, the point of sharing is to 
allow mapping drives. If you don't want mapped drives, don't share. If you want 
only some users to map drives, set permissions appropriately.

Use OpsNav to create and modify shares and to set permissions.

 ==> Connection>Network>Servers>TCP/IP

RMB on iSeries Netserver, select <Open>, or simply double-click. Then expand 
Shared Objects. Each share has <Permissions>.

The The iSeries Support for Windows Network Neighborhood Server (iSeries 
NetServer) APIs, or Server Support APIs, give some ability to set permissions. 
OpsNav provides significant detail.

Tom Liotta

midrange-l-request@xxxxxxxxxxxx wrote:

>   2. RE: Mapping Network Drive (Shannon ODonnell)
>
>Yes.  Not allow anyone to map a network drive, unless they are first
>authorized to do so.  The problem I've seen, and that I've had zero
>amount of time to research, is that the guest user profile QUSER,
>defined on the NETSERVER properties, allows all drive mapping access so
>anyone can map a network drive even though I've limited access to the
>QPWFSERVER *AUTL.  To add to the mix, there is also a /root share
>defined.  :-)   
>
>There may not be a five second solution here, but I thought it was worth
>a shot to ask. 
>
>Shannon O'Donnell

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com


__________________________________________________________________
Introducing the New Netscape Internet Service. 
Only $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need. 

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp