HIS 2000 Clients Using Active Directory Fail to Get Host Session (313728)

MORE INFORMATION

This problem is most likely to affect applications that use 3270 display or print logical units (LUs) because user security is enabled for 3270 LUs by default. If user security is enabled for APPC and LUA LUs, applications that use these types of LUs will also be susceptible to this problem because the Host Integration Server 2000 client will need to determine which LUs are assigned to the user's user/group record in SNA Manager.

The following is an example of what an SNA application 3270 message trace (Climsg1.atf) might look like when you use the 3270 client and this problem occurs:

Get 3270 LU list for User from OU OU=his2000,DC=hisdomain,DC=net
Connecting to WMI server HISSERVER
Connected to WMI server HISSERVER
Run query SELECT LU, IsPool, Model, IsAssociatedPrinterLU, ModelOverridable
FROM MsSna_AccountAssigned3270 WHERE Wks="HISCLIENT" AND 
IPAddress="123.123.12.123" AND MACAddress="400012345678" AND Account="*"
				

NOTE: The last three lines of this trace are a single query. Line breaks have been added for readability.

The last statement in the trace sample shows the WMI query that you used to obtain the 3270 LUs that are assigned to the user record for the user who is running the 3270 client. This WMI query stops responding on the HIS 2000 server. The 3270 client also stops responding at this point.

You use the Host Integration Server 2000 Client Resource Location Wizard to configure the client so that it can locate and connect to HIS 2000 servers. This is where you configure the client to locate HIS 2000 servers through the use of either a subdomain or Active Directory.

Use a Subdomain to Locate Servers

This option configures HIS 2000 clients to use a sponsor connection. This is basically the same way that previous versions of the SNA Server client locate SNA Servers. For additional information, click the article number below to view the article in the Microsoft Knowledge Base: After you select this option, you specify how the "sponsor" client will locate the server-side SnaBase service:

• Locate servers by subdomain. You must specify the name of the Host Integration Server 2000 subdomain that the client participates in. For this option to work, the server must be able to receive a broadcast or multicast message from the client computer. When you use TCP/IP, this option does not work if there is an IP router between the client and server.
• Locate servers by server name. The server name or TCP/IP addresses are explicitly configured. This is the recommended option when you use a sponsor connection because it will work when routers are located between the client and server.

Use Active Directory to Locate Servers

To configure the client for Active Directory support, add the fully qualified Active Directory organization unit (OU) name or names that the client will use to locate HIS 2000 resources.

After you apply the update, the context that the Manage Client (Mngcli.exe) process will run under is:

• the Local System account if the Manage Client process is initiated by an incoming WMI query. The WMI (Winmgmt.exe) service also runs under this account.
• The User account of the user who opens the SNA Manager Microsoft Management Console (MMC) Snap-in if Manage Client has not been started due to a previous WMI query.