You are on page 1of 57

Cognitive Systems

IBM i File Sharing in a Linux World and


Distributed File Systems
Margaret Fenlon – mfenlon@us.ibm.com

Session ID: 170196


Agenda Key: 42CP
© 2016, 2017 IBM Corporation

Cognitive Systems

Integrated File System Sessions


Understanding the Power of the Integrated File System

• Introduction to the Integrated File System


• IBM i NetServer: Easy Access to Data
• Integrated File System Security
• OPEN LAB: Integrated File System and File Servers
• IBM i File Sharing in a Linux World and Distributed File Systems ***YOU ARE HERE***
• Integrated File System: Real Life
• Integrated File System: Advanced Topics

© 2016, 2017 IBM Corporation 2


Cognitive Systems

Agenda

• Networks

• File sharing in IBM i


– Samba
– IBM i NetServer
– NFS

• Distributed File Systems


– QFileSvr.400
– IBM i NetClient file system (QNTC)
– Network File System (NFS)

© 2016, 2017 IBM Corporation 3

Cognitive Systems

Networks

© 2016, 2017 IBM Corporation 4


Cognitive Systems

Networks

• Mix of hardware and software

• Options for file sharing


– SMB / CIFS
– Network File Systems
– Other options

• IBM i supports these

© 2016, 2017 IBM Corporation 5

Cognitive Systems

File Sharing on IBM i - Samba

© 2016, 2017 IBM Corporation 6


Cognitive Systems

What is Samba?

• From samba.org:
"Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS
clients."
• Samba project was released under GPL in 1993

• Provides a Server Message Block client and server for POSIX systems

• Continually enhanced and maintained for over 20 years by an active development team.

Goal to maintain compatibility with the Windows implementation


Observed through network interactions with the Microsoft client and server.

© 2014 International Business Machines Corporation


© 2016, 2017 IBM Corporation 7

Cognitive Systems

Where Can Samba be Found?

BSD

AIX
Linux
IRIX
VMWare

© 2016, 2017 IBM Corporation 8


Cognitive Systems

What is Samba on IBM i

Samba 3.6 source


Initially 3.6.21
Built on AIX 7.1
Packaged to run in the PASE environment
Not included because of environment and licensing limitations:
Active directory integration
Kerberos authentication
Print serving
Application - not shipped with base
7.3 PTF SI60444
7.2 PTF SI60443

© 2016, 2017 IBM Corporation 9

Cognitive Systems

Why not native on IBM i?

• Samba designed to be compiled with GNU C compiler (gcc)


– Doesn’t play well with native xlc compiler

• Samba a UNIX project


– Expectation programs installed in standard UNIX directories

• Modifications needed to build in a native IBM i environment


– Acceptance required by the Samba maintainers
OR
– Re-applied for every patch release before a new version built

© 2016, 2017 IBM Corporation 10


Cognitive Systems

Install Samba on IBM i

© 2016, 2017 IBM Corporation 11

Cognitive Systems

How Do I Install Samba?


On the Green screen start a PASE shell
CALL QP2TERM
Follow the directions on the AIX Toolbox site to install RPM and wget:
http://www-03.ibm.com/systems/power/software/aix/linux/toolbox/download.html
Extract /QIBM/ProdData/OS/Samba.zip to any path using PASE jar utility
Use the samba_setup.sh shell script with the 'install' option
For example in the PASE shell: samba_setup.sh install
Create a ‘nobody’ user profile
Required for unprivileged guest actions by Samba server
For example:
CRTUSRPRF USRPRF(NOBODY) STATUS(*DISABLED) TEXT('Needed for Samba server')

© 2016, 2017 IBM Corporation 12


Cognitive Systems

How Do I Use Samba Server?

End IBM i NetServer


Samba server and IBM i NetServer use the same TCP ports
End NetServer before starting the Samba server

Start Samba server


Shipped configuration file shares /QIBM by default
Use command smbd & in a PASE shell

© 2016, 2017 IBM Corporation 13

Cognitive Systems

How Do I Use Samba Server?

Define new shares


Select which paths will be allowed access through the Samba server
Edit /opt/samba/lib/smb.conf to add shares

Users
To access the Samba server, each user must be added manually
Use the pdbedit command
Users can be restricted from the Samba server by not adding them

© 2016, 2017 IBM Corporation 14


Cognitive Systems

Samba Client
FTP style SMB client
Useful if you want to retrieve or send a file to a remote system
SMB session ends immediately when you exit out of Samba shell
smbclient
Command line interface
Functions include: dir, md, rmdir, put, get
smbclient help will display the full list of functions
libsmbclient
Shared library that provides program interfaces
Basically a Samba API interface
Does not have smbmount

© 2016, 2017 IBM Corporation 15

Cognitive Systems

Samba on IBM i Examples

© 2016, 2017 IBM Corporation 16


Cognitive Systems

Configuration file – Examples of Shares

/opt/samba/lib/smb.conf

Default Share
Read only

IFSTEST share
Read/Write

© 2016, 2017 IBM Corporation 17

Cognitive Systems

Adding a User for Samba Server


• pdbedit –a <user>
• Must set a Samba password
– Used when connecting to the server
– Does not need to match the IBM i password

© 2016, 2017 IBM Corporation 18


Cognitive Systems

Start the Samba Server


• smbd &

© 2016, 2017 IBM Corporation 19

Cognitive Systems

Verify Samba Server is started


• ps to check server jobs
• kill <pid> to end the server (for screen below: kill 9088)

© 2016, 2017 IBM Corporation 20


Cognitive Systems

Accessing Samba Server from Windows

• UNC path directly


– \\<server>\<share>
– More secure than mapping a drive
• Map a drive
– Use Computer->Map Network Drive
– net use command
net use <driver letter> \\<servername>\<sharename> /user:<username> <password>
For example:
net use x: \\lp05ut26\ifstest /user:ifstest new2day

© 2016, 2017 IBM Corporation 21

Cognitive Systems

Using Samba Server from Windows

• UNC path
– \\<server>\share

© 2016, 2017 IBM Corporation 22


Cognitive Systems

Using Samba Server from Windows

Mapped drive

© 2016, 2017 IBM Corporation 23

Cognitive Systems

Using Samba Server from Windows

• Mapped drive can be used as any other drive on the PC


– View files
– Create/delete folder
– Create/edit/delete files
– Copy/paste

• Files
– Access is in binary, no text converting

© 2016, 2017 IBM Corporation 24


Cognitive Systems

Using Samba Server from Windows


Example: File access
Created simple file
using notepad, save
as testfile.txt to
mapped drive

© 2016, 2017 IBM Corporation 25

Cognitive Systems

Using Samba Client


smbclient <service> <password>

© 2016, 2017 IBM Corporation 26


Cognitive Systems

Using Samba Client

© 2016, 2017 IBM Corporation 27

Cognitive Systems

Using Samba Client


• Use help to get a list of smbclient commands

© 2016, 2017 IBM Corporation 28


Cognitive Systems

Samba Logging and Debug

• Stream files used by Samba Server to log messages


– General server messages
/opt/samba/var/log.smbd
– Messages related to specific sessions
/var/log/samba/log.<client>

• Use the debug option on commands for client and server


– Logs additional messages
– Add –d<value> where value is 1-10
For example –d4
– Value is the level of debug information 1 is lowest, 10 most verbose
– Server can be started with debug
- For example: smbd –d5 &
- Messages logged to log.smbd file
– smbclient messages logged to the screen

© 2016, 2017 IBM Corporation 29

Cognitive Systems

File Sharing on IBM i - NetServer

© 2016, 2017 IBM Corporation 30


Cognitive Systems

“IBM i Support for Windows Network Neighborhood"

File and print serving for Common Internet File System (CIFS) clients
Windows™ 7
Windows 8
Windows 10
Windows Server 2008
Windows Server 2012
Windows Server 2016
Linux Samba at current release levels
Compatible with Microsoft Networking and Samba
Part of the base IBM i
Uses TCP/IP for connectivity

© 2016, 2017 IBM Corporation 31

Cognitive Systems

Locating IBM i NetServer in Navigator for IBM i

© 2016, 2017 IBM Corporation 32


Cognitive Systems

IBM i NetServer Management

© 2016, 2017 IBM Corporation 33

Cognitive Systems

Windows Policies affecting IBM i NetServer

• Note: Setting on Domain Controller will push setting out to clients without having to update
individual PCs.

• Digitally sign messages


– Microsoft network client: Digitally sign communications (always)
– Microsoft network client: Digitally sign communications (if server agrees)
• This policy enables it.

• Microsoft network client: Send unencrypted password to third-party SMB servers


– If enabled would be unsecure and NetServer will not work

• Network security: LAN Manager authentication level


– LAN Manager, NTLM, NTLMv2 (most secure)

© 2016, 2017 IBM Corporation 34


Cognitive Systems

Windows Policies affecting IBM i NetServer


• Network security: Do not store LAN Manager hash value on next password change
– Similar to QPWDLVL 1 & 3

• Network security: Configure encryption types allowed for Kerberos


– System i Navigator configuration defaults to DES only
– IBM i also supports AES

• Session security
– Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
– Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
– Both check boxes selected under one or the other may cause inability to connect, access denied
or may look like the server is down

© 2016, 2017 IBM Corporation 35

Cognitive Systems

Viewing/changing client policies

• Start->Run…
– secpol.msc

• Local Policies->Security Options


– Will show the list of policies
– To change, select the policy, right click -> Properties
– Explain tab for description

© 2016, 2017 IBM Corporation 36


Cognitive Systems

Windows Registry Setting affecting IBM i NetServer

• DirectoryCacheLifetime
– Under HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lanmanworkstation\Parameters
– May need to be adjusted to 0
– Resolves 'File not found' problems for time-sensitive operations when using SMB2

© 2016, 2017 IBM Corporation 37

Cognitive Systems

Samba on IBM i vs. NetServer

© 2016, 2017 IBM Corporation 38


Cognitive Systems

Feature comparison

Samba on
Feature NetServer
IBM i

Kerberos authentication and integration with EIM Y N


NTLM and NTLMv2 authentication Y Y
NTLM and NTLMv2 session security N Y
Automatic CCSID conversion of EBCDIC text Y N
SMB print server Y N
Integrated with the IBM i/OS (auditing, exit programs and
Y N
user management)
Application controlled user management and logging, and
N Y
enhanced error code reporting
SMB 2.0 protocol Y* Y

*New in IBM i 7.3


© 2016, 2017 IBM Corporation 39

Cognitive Systems

How Well Does It Perform?


An Example Transfer of a 2.45 GB File with a Windows 7 Client

Samba IBM i NetServer


• Read • Read
• PS C:\Users\emig> Measure-Command {cp z:\dvd.iso dvd.iso} • PS C:\Users\emig> Measure-Command {cp z:\dvd.iso dvd.iso}
• Minutes :3 • Minutes :4
• Seconds : 43 • Seconds : 20
• Milliseconds : 459 • Milliseconds : 362
• TotalSeconds : 223.459434 • TotalSeconds : 260.3624502

• Write • Write
• PS C:\Users\emig> Measure-Command {cp dvd.iso z:\dvd.iso}
• PS C:\Users\emig> Measure-Command {cp dvd.iso z:\dvd.iso}
• Minutes :3
• Minutes :4
• Seconds : 54
• Seconds : 22
• Milliseconds : 320
• Milliseconds : 33
• TotalSeconds : 234.3203921
• TotalSeconds : 262.0336844
*Measured in lab environments. Measurements in customer environments may differ.

© 2016, 2017 IBM Corporation 40


Cognitive Systems

File Sharing on IBM i - NFS

© 2016, 2017 IBM Corporation 41

Cognitive Systems

NFS - Prerequisites

• TCP/IP must be started

• TCP/IP Host Table must be configured properly

• Administrating profile must be entered in the System Distribution Directory

• For GUI administration of NFS through Navigator for i


– Any supported version of IBM i Access for Windows
– Any supported version of IBM i

© 2016, 2017 IBM Corporation 42


Cognitive Systems

NFS for IBM i - server

• NFS versions 2, 3, and 4 are supported

• Allows access to IBM i objects in the following file systems:


– Root (/)
– UDFS
– QOPT
– QOpenSys
– QSYS.LIB – not supported for NFSv4
– QDLS – not supported for NFSv4

• Supports simple data conversions

© 2016, 2017 IBM Corporation 43

Cognitive Systems

NFS – Starting the jobs

© 2016, 2017 IBM Corporation 44


Cognitive Systems

NFS – Exporting a path

© 2016, 2017 IBM Corporation 45

Cognitive Systems

NFS – Exporting a path

General Tab

© 2016, 2017 IBM Corporation 46


Cognitive Systems

NFS – Exporting a path

General Tab

Browsing for users

© 2016, 2017 IBM Corporation 47

Cognitive Systems

NFS – Exporting a path


Access Tab – Add host/Netgroup

© 2016, 2017 IBM Corporation 48


Cognitive Systems

NFS – Exporting a path


Advanced Tab

© 2016, 2017 IBM Corporation 49

Cognitive Systems

NFS – Viewing Exports Right-click on "NFS" from


Network->Servers->TCP/IP

© 2016, 2017 IBM Corporation 50


Cognitive Systems

Distributed File Systems (Client side)

© 2016, 2017 IBM Corporation 51

Cognitive Systems

Why Distributed File Systems

Windows
Linux

UNIX

IBM i

IBM i

© 2016, 2017 IBM Corporation 52


Cognitive Systems

Distributed File Systems

• QFileSvr.400
• IBM i NetClient file system (QNTC)
• Network File System (NFS)

© 2016, 2017 IBM Corporation 53

Cognitive Systems

QFileSvr.400

© 2016, 2017 IBM Corporation 54


Cognitive Systems

QFileSvr.400

Easiest way to exchange data within the IBM i Family

Home system Branch system

/QFileSvr.400/Branch

© 2016, 2017 IBM Corporation 55

Cognitive Systems

QFileSvr.400

© 2016, 2017 IBM Corporation 56


Cognitive Systems

QFileSvr.400

© 2016, 2017 IBM Corporation 57

Cognitive Systems

QFileSvr.400

© 2016, 2017 IBM Corporation 58


Cognitive Systems

QFileSvr.400

• QFileSvr.400 gives direct


access to the root (‘/’) directory
of the remote machine.

• Remote access is granted


based on object permissions on
the server.

© 2016, 2017 IBM Corporation 59

Cognitive Systems

QFileSvr.400 Scenario
Configuration
Database

QFileSvr.400 to copy
configuration information

Application Application Application


Server Server Server

LAN LAN
LAN

© 2016, 2017 IBM Corporation 60


Cognitive Systems

QFileSvr.400

Requirements
• TCP/IP Configured on both systems

• Server Name can be resolved in Domain Name Server (DNS)

• USRPRF/password exist on both systems or Network Authentication Services (NAS) is configured


– Note: When using password to authenticate, both systems must have the same password level set with the QPWDLVL system
value

• File Server started on the “server” system.


– STRHOSTSVR SERVER(*FILE)

• No longer supports connections using Enterprise Extender

© 2016, 2017 IBM Corporation 61

Cognitive Systems

QFileSvr.400
Network Authentication Requirements

1. Configure both client and server system for Network Authentication with the Network Authentication
configuration wizard.

2. Signon to the client system.

3. Use QSH kinit command or CALL QKRBKINIT PARM(‘user@realm’) to get Kerberos credentials.

4. Access QFileSvr.400 paths as normal.

Note: If you plan to access QFileSvr.400 paths through System i Navigator, you will need to make the Kerberos tickets
forwardable.

© 2016, 2017 IBM Corporation 62


Cognitive Systems

QFileSvr.400
Single or multiple connection to server

Option for multiple connections


Default is a single connection
Only one user allowed to be using the connection so others wait
Can cause slow downs on systems with many users of QFileSvr.400

Multiple connections
Parallel access to the server
Each job has it’s own connection
Threads within the same process still share a connection

Controlled with environment variable: QIBM_RFS_CONNECTION_POLICY


Multiple connections when set to a value of ‘1’
Single connection when not defined or set to any value other than ‘1’
To change
Set environment variable as desired
Remove all child directories /QFileSvr.400
Log out and back on and recreate child directories

© 2016, 2017 IBM Corporation 63

Cognitive Systems

QFileSrv.400 – Single connection

Client system Server system

Job 1

Job 2

Job 3

Job 4

/QFileSvr.400/Server

© 2016, 2017 IBM Corporation 64


Cognitive Systems

QFileSrv.400 – multiple connection

Client system Server system

Job 1 Connection used for Job 1

Job 2 Connection used for Job 2

Job 3 Connection used for Job 3

Job 4 Connection used for Job 4

/QFileSvr.400/Server

© 2016, 2017 IBM Corporation 65

Cognitive Systems

QNTC

© 2016, 2017 IBM Corporation 66


Cognitive Systems

QNTC
Access data stored on CIFS File Servers

IBM i /QNTC/NetServer/SHR/Sales.xls

NetServer

Linux

/QNTC/Linux/MyShare/Sales.xls

/QNTC/PC/MyShare/Sales.xls
PC

© 2016, 2017 IBM Corporation 67

Cognitive Systems

QNTC Scenario

Employees access PC1


company intranet

C:\Catalog\669175.jpg

Webserver accesses product catalog


that is maintained on Windows server.

© 2016, 2017 IBM Corporation 68


Cognitive Systems

QNTC – Accessing PC data via System i Navigator

© 2016, 2017 IBM Corporation 69

Cognitive Systems

QNTC Release updates – IBM i 7.3

• Updated to use Server Message Block (SMB), Version 2 (SMB2)


• Major internal update for better interoperability with newer servers
• Configuration and use is unchanged
• Default behavior – QNTC will negotiate with the server to use the most current version
• Environment variable can be used to control protocol levels
– Recommend using the default
– QIBM_ZLC_SMB_VERS
• Does not exist or if set to “0” – negotiates to use most current (DEFAULT)
• “1” – force old protocol
• “2” – force SMB2 and QNTC will fail to connect to servers only supporting older version

© 2016, 2017 IBM Corporation 70


Cognitive Systems

QNTC Configuration

Prerequisites for using QNTC support

• Server names must be browsable by the IBM i NetServer in order to automatically appear in the
integrated file system.

• IBM i users that will be using QNTC must have a Windows Domain user profile with the same name
and password or Network Authentication Services is configured.
– Windows has local and domain users, if the same user exists for both, will use the domain user

Ready to GO !!

© 2016, 2017 IBM Corporation 71

Cognitive Systems

Configuring QNTC
IBM i NetServer Configuration

© 2016, 2017 IBM Corporation 72


Cognitive Systems

Configuring QNTC
IBM i NetServer Configuration

Domain will determine what


appears in the /QNTC
directory.

© 2016, 2017 IBM Corporation For more info see IBM i NetServer Easy Access to IBM i Data 73

Cognitive Systems

What will appear in the QNTC directory ?

/QNTC /QNTC
SALES011 SALES021
SALES012
SHOP004
SHOP005
WARH01
WARH02
WARH03
WARH04

© 2016, 2017 IBM Corporation 74


Cognitive Systems

Configuring QNTC
A word about WINS
SALES021

WINS
SALES011

1.2.3.0 1.2.4.0
Router

Chicago Rochester

© 2016, 2017 IBM Corporation 75

Cognitive Systems

QNTC Security

• QNTC subdirectories and files are distributed objects.

• Access to server data is controlled by the server (Windows, Linux or remote IBM
i NetServer), not QNTC.
– Share level security
Defines the permission that a user has to the share.

– Object level security


Defines the permission that a user has to the file or directory.

© 2016, 2017 IBM Corporation 76


Cognitive Systems

QNTC - Security
Security Tips

• Share only what you need to share


• Don't allow access to root level ( ‘/’ or C:\ )
• Set appropriate permissions on shared files/directories
• Use Group Profiles to make managing access easier
• Use strong passwords

© 2016, 2017 IBM Corporation 77

Cognitive Systems

IBM i QNTC

• Support for IPv6 connections


• Integrated server backup enhancements
– Save and restore Linux objects in a logical partition
– More information in the Knowledge Center:
Systems management->Backup and recovery->Manually saving parts of your system->Saving data for integrated servers->Saving Linux data on
logical partitions

• Network server lists are optional


– Optionally create the system directories manually for performance
– ADDENVVAR ENVVAR(QIBM_ZLC_NO_BROWSE) VALUE(1) LEVEL(*SYS)

• Maximum file sizes – supports terabyte file sizes

• Message Signing available with Network Authentication Service(NAS)

© 2016, 2017 IBM Corporation 78


Cognitive Systems

QNTC
Network Authentication Requirements

• IBM i user profile


– Local password management parameter, LCLPWDMGT, set to *NO.
• No password and not allowed to sign on a 5250 session
– Must have a Kerberos ticket
– Navigator for IBM i

• Kerberos ticket for the IBM i platform must be forwardable. To make a ticket forwardable, follow these
steps:
– Access the Active Directory Users and Computers tool on the KDC for your NAS realm.
– Select users.
– Select the name that corresponds to the service principal name.
– Select Properties.
– Select the Account tab.
– Select Account is trusted for delegation.

© 2016, 2017 IBM Corporation 79

Cognitive Systems

Network File System


(NFS)

© 2016, 2017 IBM Corporation 80


Cognitive Systems

NFS – Transparent Access to Remote Files

IBM i

NFS Server

IBM i,
/ANYPATH/MyData AIX,
Linux,
others

© 2016, 2017 IBM Corporation 81

Cognitive Systems

NFS – Accessing data

Before Mount
After Mount
© 2016, 2017 IBM Corporation 82
Cognitive Systems

NFS for IBM i - client

• Mounted file systems appear local

• IBM i directories in Root (/) or QOpenSys file systems can be mounted over

© 2016, 2017 IBM Corporation 83

Cognitive Systems

NFS – Namespace before Export

NFS server name space NFS client view

The client cannot access


(mount) a remote file
system until it is exported
from the server.
/

© 2016, 2017 IBM Corporation 84


Cognitive Systems

NFS – Namespace after Export

NFS client view


NFS server name space

The client can mount any


directory, subdirectory, or
file in a remote file system
after it is exported.

© 2016, 2017 IBM Corporation 85

Cognitive Systems

NFS - Mounting

MOUNT TYPE(*NFS) MFS('zorba2:/perf/data') MNTOVRDIR('/home/RAY/wrkdir')


UNIX NFS Server
IBM i Client
iSeries client
"zorba2"
/

perf

data

The "covered"
data1 data2 wrkdir is now
"invisible" and
inaccessible
from integrated
file system
interfaces.

© 2016, 2017 IBM Corporation 86


Cognitive Systems

NFS – Mounting on the IBM i

The IBM i MOUNT command

use STATFS command to verify mounts

© 2016, 2017 IBM Corporation 87

Cognitive Systems

NFS Security – UID/GID Management

NFS Server1

NFS Client

Userid UID
??? 203

NFS Server2
Userid UID
JOHN 203

Userid UID
SALLY 203

© 2016, 2017 IBM Corporation 88


Cognitive Systems

NFS - Security

• Trusted Community Concept

• UID/GID management is required

• QSYCHGID API for administrators

• NFS command restrictions

• EXPORTFS options
– Root access from remote clients is controlled
– Anonymous UID access can be restricted
– Read write access can be controlled

© 2016, 2017 IBM Corporation 89

Cognitive Systems

NFS Security Tips

• Restrict use of NFS commands


• Export only what you need to (remember that child directories are implicitly exported
too)
• Set appropriate permissions on exported files/directories
• Export only to clients that need the access
• Keep UIDs consistent across the network
• As a general rule, don't allow root access

© 2016, 2017 IBM Corporation 90


Cognitive Systems

IBM i NFS
• Maximum size for read/write increased to 32KB
• Reuse NFS client handle
– Improve performance
– Reduce socket churn

• NFS server supports TCP connections in addition to UDP


• NFS client supports TCP with the following command
– CALL PGM(QP0FPTOS) PARM(*NFSFORCE UDP OFF)
– Command must be called each IPL before NFS mounts established
– Requires that NFS block I/O daemon be running on client (QNFSBIOD)

• NFS server job threaded


– Threaded job dynamically tunes number of threads to match demand
– QDLS requests handled in a separate single threaded job

• NFS server and client support IPv6 connections

© 2016, 2017 IBM Corporation 91

Cognitive Systems

References

Knowledge Center for IBM i


http://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/rzahg/welcome.htm

Knowledge Center for IBM i Integrated file system Topic (Files and file systems > Integrated
file system)
http://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/ifs/rzaaxkickoff.htm
IBM i NetServer
http://www-03.ibm.com/systems/i/software/netserver/

© 2016, 2017 IBM Corporation 92


Cognitive Systems

Integrated File System Sessions


Understanding the Power of the Integrated File System

• Introduction to the Integrated File System


• IBM i NetServer: Easy Access to Data
• Integrated File System Security
• OPEN LAB: Integrated File System and File Servers
• IBM i File Sharing in a Linux World and Distributed File Systems
• Integrated File System: Real Life
• Integrated File System: Advanced Topics

© 2016, 2017 IBM Corporation 93

Cognitive Systems

Questions?

© 2016, 2017 IBM Corporation 94


Cognitive Systems

Power Systems Social Media


IBM Power Systems Official Channels:

https://facebook.com/IBMPowerSystems

https://twitter.com/IBMPowerSystems

https://www.linkedin.com/company/ibm-power-systems

http://www.youtube.com/c/ibmpowersystems

https://www.ibm.com/blogs/systems/topics/servers/power-
systems/
© 2016, 2017 IBM Corporation

Cognitive Systems

More to Follow:

Blogs to Follow More to Follow Hashtags To Use


@IBMSystems #PowerSystems
@COMMONug #IBMi
• IBM Systems Magazine You and I (Steve Will) @IBMChampions #IBMAIX
• IBM Systems Magazine i-Can (Dawn May) @IBMSystemsISVs #POWER8
• IBM Systems Magazine: iDevelop (Jon Paris and @LinuxIBMMag #LinuxonPower
@OpenPOWERorg
Susan Gantner) @AIXMag #OpenPOWER
• IBM Systems Magazine: iTalk with Tuohy @IBMiMag #HANAonPower
• IBM DB2 for i (Mike Cain) @SAPonIBMi #ITinfrastructure
• IBM DB2 Web Query for i (Doug Mack) @SiDforIBMi #OpenSource
@IBMAIXeSupp #HybridCloud
@IBMAIXdoc #BigData

© 2016, 2017 IBM Corporation 96


Cognitive Systems

Backup slides

© 2016, 2017 IBM Corporation 97

Cognitive Systems

Samba on IBM i Examples

© 2016, 2017 IBM Corporation 98


Cognitive Systems

List Users Authorized


• pdbedit –L
• For a list of other options, type: pdbedit

© 2016, 2017 IBM Corporation 99

Cognitive Systems

View active sessions


smbstatus

© 2016, 2017 IBM Corporation 100


Cognitive Systems

Using Samba Client – retrieve list of shares


smbclient –L <server>

© 2016, 2017 IBM Corporation 101

Cognitive Systems

Using Samba Client – retrieve list of shares

© 2016, 2017 IBM Corporation 102


Cognitive Systems

Using Samba Client – retrieve list of shares

© 2016, 2017 IBM Corporation 103

Cognitive Systems

Using Samba Client – retrieve list of shares

© 2016, 2017 IBM Corporation 104


Cognitive Systems

Using Samba Client – basic commands

© 2016, 2017 IBM Corporation 105

Cognitive Systems

Using Samba Server from Windows


Show the file on the IBM i

© 2016, 2017 IBM Corporation 106


Cognitive Systems

Using Samba Server from Windows


Show the file on the IBM i - CCSID

© 2016, 2017 IBM Corporation 107

Cognitive Systems

Using Samba Server from Windows

Show the file on the IBM i – view contents with DSPF (option 5 on WRKLNK)
Note: DSPF will perform text conversion

© 2016, 2017 IBM Corporation 108


Cognitive Systems

Using Samba Server from IBM i


• QNTC is a file system that is also an SMB client
• IBM i and Samba userid/password must match

© 2016, 2017 IBM Corporation 109

Cognitive Systems

File Sharing on IBM i - NFS

© 2016, 2017 IBM Corporation 110


Cognitive Systems

NFS - Properties

© 2016, 2017 IBM Corporation 111

Cognitive Systems

Integrated File System


Internal Structure

Applications/Generic Commands

Non-POSIX POSIX
FMS
APIs APIs
PC File NFS IBM i
Server Server NetServer
Logical File System (Shared Folders)

vnode interface
QDLS Root QOpenSys User-Defined QNTC
PFS IBM BladeCenter® blade
PFS PFS PFS PFS
and System x™ models
attached to an IBM i
NFS QFileSvr.400
QSYS.LIB QOPT solution via an iSCSI
Client Client
PFS PFS network
PFS PFS

© 2016, 2017 IBM Corporation 112


Cognitive Systems

Special notices
This document was developed for IBM offerings in the United States as of the date of publication. IBM may not make these offerings available in other countries, and the information
is subject to change without notice. Consult your local IBM business contact for information on the IBM offerings available in your area.
Information in this document concerning non-IBM products was obtained from the suppliers of these products or other public sources. Questions on the capabilities of non-IBM
products should be addressed to the suppliers of those products.
IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents.
Send license inquires, in writing, to IBM Director of Licensing, IBM Corporation, New Castle Drive, Armonk, NY 10504-1785 USA.
All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.
The information contained in this document has not been submitted to any formal IBM test and is provided "AS IS" with no warranties or guarantees either expressed or implied.
All examples cited or described in this document are presented as illustrations of the manner in which some IBM products can be used and the results that may be achieved. Actual
environmental costs and performance characteristics will vary depending on individual client configurations and conditions.
IBM Global Financing offerings are provided through IBM Credit Corporation in the United States and other IBM subsidiaries and divisions worldwide to qualified commercial and
government clients. Rates are based on a client's credit rating, financing terms, offering type, equipment type and options, and may vary by country. Other restrictions may apply.
Rates and offerings are subject to change, extension or withdrawal without notice.
IBM is not responsible for printing errors in this document that result in pricing or information inaccuracies.
All prices shown are IBM's United States suggested list prices and are subject to change without notice; reseller prices may vary.
IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms apply.
Any performance data contained in this document was determined in a controlled environment. Actual results may vary significantly and are dependent on many factors including
system hardware configuration and software design and configuration. Some measurements quoted in this document may have been made on development-level systems. There is
no guarantee these measurements will be the same on generally-available systems. Some measurements quoted in this document may have been estimated through extrapolation.
Users of this document should verify the applicable data for their specific environment.

Revised September 26, 2006

© 2016, 2017 IBM Corporation 113

Cognitive Systems

Special notices (cont.)


IBM, the IBM logo, ibm.com AIX, AIX (logo), AIX 5L, AIX 6 (logo), AS/400, BladeCenter, Blue Gene, ClusterProven, DB2, ESCON, i5/OS, i5/OS (logo), IBM Business Partner (logo), IntelliStation, LoadLeveler, Lotus,
Lotus Notes, Notes, Operating System/400, OS/400, PartnerLink, PartnerWorld, PowerPC, pSeries, Rational, RISC System/6000, RS/6000, THINK, Tivoli, Tivoli (logo), Tivoli Management Environment, WebSphere,
xSeries, z/OS, zSeries, Active Memory, Balanced Warehouse, CacheFlow, Cool Blue, IBM Systems Director VMControl, pureScale, TurboCore, Chiphopper, Cloudscape, DB2 Universal Database, DS4000, DS6000,
DS8000, EnergyScale, Enterprise Workload Manager, General Parallel File System, , GPFS, HACMP, HACMP/6000, HASM, IBM Systems Director Active Energy Manager, iSeries, Micro-Partitioning, POWER,
PowerExecutive, PowerVM, PowerVM (logo), PowerHA, Power Architecture, Power Everywhere, Power Family, POWER Hypervisor, Power Systems, Power Systems (logo), Power Systems Software, Power Systems
Software (logo), POWER2, POWER3, POWER4, POWER4+, POWER5, POWER5+, POWER6, POWER6+, POWER7, System i, System p, System p5, System Storage, System z, TME 10, Workload Partitions
Manager and X-Architecture are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. If these and other IBM trademarked terms are
marked on their first occurrence in this information with a trademark symbol (® or ™), these symbols indicate U.S. registered or common law trademarks owned by IBM at the time this information was published. Such
trademarks may also be registered or common law trademarks in other countries.

A full list of U.S. trademarks owned by IBM may be found at: http://www.ibm.com/legal/copytrade.shtml.

Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.
AltiVec is a trademark of Freescale Semiconductor, Inc.
AMD Opteron is a trademark of Advanced Micro Devices, Inc.
InfiniBand, InfiniBand Trade Association and the InfiniBand design marks are trademarks and/or service marks of the InfiniBand Trade Association.
Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its
subsidiaries in the United States and other countries.
IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of Government Commerce.
Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.
Linear Tape-Open, LTO, the LTO Logo, Ultrium, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.
Linux is a registered trademark of Linus Torvalds in the United States, other countries or both.
Microsoft, Windows and the Windows logo are registered trademarks of Microsoft Corporation in the United States, other countries or both.
NetBench is a registered trademark of Ziff Davis Media in the United States, other countries or both.
SPECint, SPECfp, SPECjbb, SPECweb, SPECjAppServer, SPEC OMP, SPECviewperf, SPECapc, SPEChpc, SPECjvm, SPECmail, SPECimap and SPECsfs are trademarks of the Standard Performance Evaluation
Corp (SPEC).
The Power Architecture and Power.org wordmarks and the Power and Power.org logos and related marks are trademarks and service marks licensed by Power.org.
TPC-C and TPC-H are trademarks of the Transaction Performance Processing Council (TPPC).
UNIX is a registered trademark of The Open Group in the United States, other countries or both.

Other company, product and service names may be trademarks or service marks of others.

Revised December 2, 2010

© 2016, 2017 IBM Corporation 114

You might also like