Ref: 10260010
Title: Interoperability Between LAN Manager and the LAN Server
Date: 10/2/89

Copyright 3Com Corporation, 1991.  All rights reserved.

The following information applies to the Microsoft MS-DOS LAN Manager
Version 1.00 and to the Microsoft OS/2 LAN Manager Version 1.00.

The LAN Manager and IBM Server documentation are not clear on how to
allow a LAN Manager workstation to use an IBM Server's share.  The
documentation is also unclear on the related point of how to allow a LAN
Manager Workstation to use an IBM Server as a logon server.  To allow a
LAN Manager workstation to use an IBM Server's share, you need to do
the following:

1. If there are multiple IBM Server machines on your network, make
certain you know which machine is the Domain controller, then perform
the following steps on that machine.

2. On the IBM Domain controller Server, define the user account for
the LAN Manager workstation as an OS/2 workstation, regardless of
whether the workstation will be running OS/2 or MS-DOS.  This seems
obvious in the case of an OS/2 LAN Manager workstation, but needs
explanation in the case of a DOS LAN Manager workstation.

If you attempt to define a user account on the IBM Server as a DOS
workstation, the IBM Server will treat the workstation as though it
were running IBM's DOS PC LAN program.  Initially, this may seem to
work for a DOS LAN Manager workstation, because you will see no
messages telling you that you have done something wrong, and the
IBM Server and the DOS LAN Manager workstation will be able to
exchange "NET SEND..." messages.  However, when you try to do a "NET
USE..." on an IBM Server share, this will not work until you
redefine the DOS LAN Manager workstation as an OS/2 workstation.

3. On the IBM Domain controller Server, define the disk to be shared
as a shared resource, and create an access control profile for the
shared disk that gives proper authorizations to the LAN Manager
workstation.

You must authorize the LAN Manager workstation in this way because
the IBM Server does not support what the LAN Manager calls
share-mode security.  The IBM Server only supports a security mode
that corresponds to what the LAN Manager calls user-mode security.

4. On the LAN Manager workstation, whenever you have just entered a
"NET USE..." for a resource on the IBM Server, if a password is
requested, enter the password from the user account that the IBM
Server has defined for the LAN Manager workstation.

Note that it is the user name of the workstation that must match
the user name of the account on the IBM Server.  The computer name
on the workstation may be different.


To cause the IBM Server to appear on the output list of a "NET
VIEW" command run on a LAN Manager workstation, or to use the IBM
Server as the logon server of the LAN Manager workstation, you must
also do the following steps:

1. On the LAN Manager workstation, set "langroup = IBMSERVE$" in
the workstation's LANMAN.INI file, where IBMSERVE is the IBM
Server Domain controller name.  Appending the "$" is ABSOLUTELY
necessary.

2. Look in the IBMLAN.INI file on the IBM Domain controller Server,
and find the following entries:

         [requester]
         computername = IBMSERVE
         domain = IBMSERVE

If computername and domain do not have the same value, on the LAN Manager
workstation set langroup to whatever "domain =" is set to on the IBM Server.
Then, append a "$" to the "langroup =" value.

For example, if the following information is included in the IBMLAN.INI file
on the IBM Domain controller Server, set "langroup = DOMAIN1$" on
the LAN Manager workstation:

         [requester]
         computername = IBMSERVE
         domain = DOMAIN1

This step maps the LAN Manager langroup concept onto the IBM
Server Domain concept.  LAN Manager langroup values cannot exceed
15 characters, so the IBM Server Domain value must be 14
characters or less to allow for the appended "$" in the LAN
Manager LANMAN.INI file.

4.  On the LAN Manager workstation, to use the IBM Server as the
workstation's logon server, set "logonserver =" in the
workstation's LANMAN.INI file to the same value as computername
in the IBMLAN.INI file on the IBM Domain controller Server.
Then, prefix the value with "\\".

For example, if the following information is included in the IBMLAN.INI
file on the IBM Domain controller Server, set "logonserver =
\\IBMSERVE" on the LAN Manager workstation.

         [requester]
         computername = IBMSERVE
         domain = DOMAIN1

