SI55206 - OSP-INTSRVSUP-INCORROUT

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
NONE



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.


APAR Error Description / Circumvention

-------------------------------------------------
Currently there're two problems found for user enrollment:
1.BDC user enrollment doesn't work and will report NTA0282
error, indicating that it lacks domain authority. This is
because current code checks if current server is a BDC, if it is
then will not impersonate QAS400NT user thus lack of domain
authorities.
2.If AS400_Users group is deleted by some reason, the user will
enroll and will failed due to failure of adding enrolled users
to that group.

CORRECTION FOR APAR 'SE60523' :
-------------------------------
1.Remove the BDC checks so that when QAS400NT user profile is
found coming down it will impersonate users with it.
2.Create AS400_Users group automatically if it's found deleted
for unknown reason.
3.The user enrollment for existing users has been ADSI API
enhanced so that it supports enrolling existing user with
template

CIRCUMVENTION FOR APAR 'SE60523' :
----------------------------------
None.


Activation Instructions


None.




Special Instructions

None.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI54655      OSP-INTSRVSUP-MSGNTA0266 USER ENROLLMENT WILL FAIL FOR EXISI
   SI54198      OSP-INTSRVSUP-INCORROUT
   SI53575      OSP-INTSRVSUP-INCORROUT
   SI51832      OSP-INTSRVSUP-INCORROUT
   SI50160      OSP-INTSRVSUP-INCORROUT
   SI49783      OSP-INTSRVSUP-INCORROUT
   SI49733      OSP-INTSRVSUP-INCORROUT
   SI48794      OSP-INTSRVSUP-INCORROUT
   SI48495      OSP-INTSRVSUP-INCORROUT ISCSI SERVER IN RESTRICTED STATE QVN
   SI48493      OSP-INTSRVSUP-INCORROUT
   SI47372      QVNADAEM code change to prevent "Domain not find error" by m
   SI46417      OSP-INTSRVSUP-MSGNTA0274 AFTER APPLYING THE LATEST GROUP SF9
   SI44683      QVNADAEM Enhancements using Active Directory APIs
   SI36461      OSP-QVNADAEM SERVICE CONTINUALLY RESTARTS ON WINDOWS 2008 R2

Summary Information

System i Support