• No results found

Microsoft Windows. Integration with iseries. Front cover. ibm.com/redbooks. Understand the new support for Windows Server 2003

N/A
N/A
Protected

Academic year: 2021

Share "Microsoft Windows. Integration with iseries. Front cover. ibm.com/redbooks. Understand the new support for Windows Server 2003"

Copied!
418
0
0

Loading.... (view fulltext now)

Full text

(1)

Front cover

Microsoft Windows

dows

Server 2003

3

Integration with iSeries

Series

Nick Harris

Phil Ainsworth

Anders Ahl

Andy Elsey

Mike Woiwood

Understand the new support for

Windows Server 2003

Review planning and implementation

requirements for Windows

Server 2003

Learn how to set up Windows Server

2003 clusters

(2)
(3)

International Technical Support Organization

Microsoft Windows Server 2003 Integration with

iSeries

(4)

© Copyright International Business Machines Corporation 2003. All rights reserved. First Edition (December 2003)

This edition applies to Version 5, Release 2, of OS/400 and iSeries.

Note: Before using this information and the product it supports, read the information in “Notices” on

(5)

Contents

Notices . . . xi

Trademarks . . . xii

Preface . . . xiii

The team that wrote this redbook. . . xiii

Become a published author . . . xiv

Comments welcome. . . xv

Chapter 1. Overview . . . 1

1.1 Windows Integration . . . 2

1.1.1 Integrated operations . . . 3

1.1.2 Integrated xSeries Server . . . 5

1.1.3 Integrated xSeries Adapter . . . 6

1.2 New in V5R2 . . . 6

1.3 Windows Integration background . . . 7

1.4 The midrange server marketplace . . . 7

1.5 Installation . . . 8

1.6 Shared devices . . . 9

1.7 Disk administration . . . 10

1.8 User administration . . . 11

1.9 Backup and restore . . . 12

1.10 Multi-user Windows environment . . . 12

1.11 PC server consolidation . . . 13

1.12 Remote management of the Windows 2003 Servers . . . 14

1.13 iSeries and Windows application integration. . . 15

1.14 Benefits of running Windows Server on the iSeries server . . . 16

1.14.1 Reduced user administration . . . 16

1.14.2 Higher availability . . . 16

1.14.3 Comprehensive remote management. . . 17

1.14.4 Better application integration . . . 18

1.14.5 Price competitive. . . 18

1.14.6 Reduced space requirements . . . 18

Chapter 2. Planning . . . 19

2.1 V5R2 enhancements. . . 20

2.2 Skill requirements . . . 20

2.3 iSeries considerations . . . 21

2.3.1 Disk storage requirements . . . 21

2.3.2 Program temporary fixes (PTFs). . . 22

2.3.3 Installation source directory . . . 22

2.3.4 iSeries NetServer . . . 23

2.3.5 Daylight Savings Time . . . 23

2.3.6 Logical partitioning . . . 24

2.3.7 Independent auxiliary storage pools . . . 24

2.3.8 Integration code language version . . . 25

2.4 Integrated server considerations . . . 25

2.4.1 Integrated xSeries Adapter . . . 26

2.4.2 Integrated xSeries Server . . . 27

(6)

2.4.4 Clustering support . . . 31

2.4.5 Choosing an xSeries model . . . 31

2.4.6 LAN adapters . . . 32

2.5 Virtual Ethernet LAN . . . 32

2.5.1 Point-to-point Virtual Ethernet LAN addresses . . . 33

2.5.2 Windows TCP/IP HOSTS file address conflicts . . . 34

2.5.3 Multiple TCP/IP addresses on a Virtual Ethernet LAN subnet issue. . . 34

2.6 Windows Server 2003 considerations . . . 35

2.6.1 Server software . . . 35

2.6.2 Memory sizing . . . 36

2.6.3 ServerGuide installation . . . 36

2.6.4 Windows Server 2003 console . . . 36

2.7 Windows Server 2003 disk storage sizing . . . 36

2.7.1 Windows Server 2003 C: and D: drive sizes. . . 37

2.7.2 Windows Server 2003 virtual memory paging file . . . 38

2.7.3 User file storage . . . 38

2.7.4 User auxiliary storage pools . . . 39

2.7.5 Disk storage recommendations. . . 39

2.8 Hardware and software checklists . . . 39

2.8.1 Hardware checklist . . . 39

2.8.2 Software checklist . . . 40

2.9 Installation worksheet . . . 40

Chapter 3. Installation. . . 51

3.1 Overview of the installation process . . . 52

3.2 Setting up the xSeries hardware . . . 52

3.2.1 Checking the BIOS level . . . 53

3.2.2 Installing hardware options . . . 55

3.2.3 Removing unnecessary hardware. . . 55

3.2.4 3.2.4 Installing the Integrated xSeries Adapter and RSA . . . 55

3.2.5 3.2.5 Changing the BIOS settings. . . 55

3.2.6 Connecting the cables . . . 56

3.3 Completing the pre-installation tasks on OS/400 . . . 58

3.4 Starting Windows Server 2003 installation from OS/400 . . . 62

3.5 Completing installation from the Windows console . . . 70

3.6 Completing post-installation tasks. . . 71

3.6.1 Renaming Windows LAN connections . . . 71

3.6.2 Changing the Windows shutdown policy. . . 72

3.6.3 Change the Windows failure options. . . 77

3.6.4 Disable HOSTS file propagation . . . 77

3.6.5 Create Virtual Ethernet LAN connections . . . 78

3.6.6 Check for available integration service packs . . . 83

3.6.7 Promote your Windows server to a Domain Controller . . . 83

3.6.8 Install a KVM switch . . . 83

3.6.9 Back up your Windows system . . . 83

Chapter 4. Operating Integrated xSeries Servers . . . 85

4.1 Starting your integrated Windows servers . . . 86

4.1.1 Starting Windows servers during an iSeries IPL . . . 86

4.1.2 The Windows Administration function . . . 87

4.1.3 Starting your servers using iSeries Navigator . . . 88

4.1.4 Starting your servers using CL commands . . . 89

(7)

4.2.1 Stopping an xSeries server from Windows desktop . . . 90

4.2.2 Shutting down integrated Windows servers using iSeries Navigator . . . 91

4.2.3 Shutting down integrated Windows servers using CL commands . . . 93

4.2.4 Shutting down integrated Windows servers using PWRDWNSYS . . . 94

4.3 Working with iSeries Network Server Descriptions . . . 95

4.4 Sharing iSeries tape and optical drives . . . 102

4.4.1 Figuring out the Windows device name . . . 102

4.4.2 Sharing the iSeries optical drive with Windows server . . . 102

4.4.3 Sharing the iSeries tape drive with Windows server . . . 104

4.4.4 Formatting a tape to use for Windows tape drive . . . 106

4.4.5 Supported iSeries tape drives . . . 106

4.5 Setting up a virtual optical changer . . . 107

4.6 Submitting Windows commands from OS/400 interfaces . . . 108

4.6.1 Running Windows commands from the iSeries Navigator interface . . . 108

4.6.2 Running Windows commands using SBMNWSCMD . . . 110

4.6.3 Guidelines for running the SBMNWSCMD command. . . 111

4.7 Removing integrated Windows servers from iSeries. . . 112

Chapter 5. Disk Management . . . 113

5.1 Understanding Network Server Storage Space . . . 114

5.2 Managing Network Server Storage Spaces on the iSeries . . . 114

5.2.1 Creating and linking NWSSTG . . . 114

5.2.2 Adding a new disk in Windows Disk Management . . . 118

5.2.3 Expanding storage on integrated Windows servers . . . 123

5.2.4 Expanding the Windows system partition . . . 126

Chapter 6. User enrollment . . . 131

6.1 Overview . . . 132

6.1.1 Management of users in a Windows integration environment . . . 133

6.1.2 Saving and restoring enrollment information. . . 133

6.1.3 OS/400 groups in Windows . . . 133

6.2 Creating user enrollment templates . . . 135

6.2.1 Example of template use . . . 137

6.2.2 Password considerations in an integrated Windows environment . . . 137

6.2.3 Creating a Windows template account . . . 142

6.2.4 Specifying a home directory in a template . . . 144

6.3 Enrolling OS/400 users and groups on Windows . . . 146

6.3.1 When does propagation take place? . . . 146

6.3.2 Comparing domain controllers and servers . . . 147

6.3.3 Enrolling to multiple domains or local servers. . . 147

6.3.4 Comparing domain and local server lists . . . 148

6.3.5 Enrolling OS/400 profiles as users or groups . . . 149

6.3.6 Setting up the QAS400NT user . . . 149

6.3.7 Preventing enrollment and propagation to an integrated Windows server . . . 151

6.3.8 Setting the network server attributes. . . 154

6.3.9 Setting up and using iSeries Navigator . . . 156

6.3.10 Enrolling an OS/400 user profile using iSeries Navigator . . . 157

6.3.11 Enrolling an OS/400 user profile using green screen . . . 158

6.3.12 Enrolling an OS/400 group profile and members using iSeries Navigator . . . . 159

6.3.13 Enrolling an OS/400 group profile and group members using green screen . . 160

6.3.14 Enrolling only OS/400 group members using green screen . . . 162

6.3.15 Enrolling only an OS/400 group profile . . . 164

(8)

6.4 Working with enrollment status . . . 166

6.4.1 Checking enrollment status through iSeries Navigator . . . 166

6.4.2 Checking enrollment status through a green screen. . . 167

6.4.3 Viewing enrolled users through Windows . . . 168

6.5 Ending enrollment . . . 169

6.5.1 Ending enrollment: OS/400 user or group is deleted . . . 170

6.5.2 Ending enrollment: OS/400 user or group not deleted . . . 170

6.5.3 Ending enrollment without deleting the Windows user . . . 175

6.5.4 Ending enrollment without deleting OS/400 and Windows users and groups. . . 176

6.6 Other tasks . . . 176

6.6.1 Changing a user’s name . . . 176

6.6.2 Changing the Windows domain name . . . 177

Chapter 7. Backup and recovery . . . 179

7.1 Overview of backup and recovery . . . 180

7.1.1 Backup from a server-centric perspective. . . 180

7.2 Planning a backup strategy . . . 181

7.2.1 Staged backup . . . 181

7.2.2 Windows recovery options . . . 183

7.2.3 Backup considerations . . . 184

7.2.4 Backup tips . . . 185

7.2.5 Automating backup and recovery . . . 185

7.2.6 Backup technique positioning and recommendations. . . 186

7.2.7 Recommended backup schedule . . . 187

7.3 OS/400 disaster recovery backup . . . 188

7.3.1 Disaster recovery backup overview . . . 188

7.3.2 Disaster recovery backup and components of integrated Windows server . . . . 189

7.3.3 Disaster recovery backup and Windows recovery options . . . 191

7.3.4 Disaster recovery backup tips . . . 192

7.3.5 Disaster recovery backup and user enrollment information . . . 192

7.3.6 Disaster recovery backup interfaces . . . 193

7.3.7 Disaster recovery backup using the OS/400 Save menu . . . 193

7.3.8 Disaster recovery backup using CL commands . . . 194

7.3.9 Disaster recovery backup using CL programs . . . 198

7.4 OS/400 disaster recovery restore . . . 201

7.4.1 Disaster recovery restore overview. . . 201

7.4.2 Disaster recovery restore and components of integrated Windows server. . . 201

7.4.3 Disaster recovery restore and Windows recovery options . . . 201

7.4.4 Disaster recovery restore scenarios . . . 202

7.4.5 Disaster recovery restore and user enrollment information . . . 204

7.4.6 Disaster recovery restore interfaces . . . 204

7.4.7 Disaster recovery restore using CL commands . . . 205

7.4.8 Disaster recovery restore using CL programs. . . 208

7.5 OS/400 file level backup . . . 211

7.5.1 File level backup overview . . . 211

7.5.2 File level backup and the QNTC file system . . . 211

7.5.3 File level backup considerations . . . 213

7.5.4 File level backup: special files. . . 214

7.5.5 File level backup: incremental versus differential backups . . . 215

7.5.6 File level backup setup . . . 216

7.5.7 File level backup using CL commands . . . 221

7.6 OS/400 file level restore . . . 225

(9)

7.6.2 File level restore and the QNTC file system . . . 226

7.6.3 File level restore considerations . . . 226

7.6.4 File level restore special files . . . 226

7.6.5 File level restore setup . . . 226

7.6.6 File level restore using CL commands . . . 228

7.7 Windows file level backup and recovery . . . 231

7.7.1 Overview . . . 231

7.7.2 Windows backup applications . . . 232

7.7.3 Backing up Windows files to tape . . . 233

7.7.4 Choosing a tape drive for use by your Windows backup application . . . 234

7.7.5 Enabling iSeries tape drives for use by Windows backup applications. . . 235

7.7.6 Verifying support for the iSeries tape drive . . . 235

7.7.7 Verifying the OS/400 tape device driver . . . 236

7.7.8 Identifying an iSeries tape drive in Windows. . . 238

7.7.9 Formatting an iSeries tape cartridge for use by Windows. . . 238

7.7.10 Allocating a tape drive to Windows from OS/400 . . . 239

7.7.11 Allocating a tape drive to OS/400 from Windows . . . 240

7.7.12 Backing up Windows files to disk . . . 241

7.7.13 Controlling backup of an integrated Windows server . . . 242

Chapter 8. Software maintenance . . . 245

8.1 Getting PTF information . . . 245

8.1.1 Checking PTF information on the iSeries . . . 246

8.1.2 Verifying software levels from iSeries Navigator. . . 249

8.1.3 Verifying the software level on the Windows server . . . 249

8.1.4 Updating the server integration software level using iSeries Navigator . . . 250

8.1.5 iSeries Integration for Windows Server Maintenance wizard . . . 251

Chapter 9. HSL design considerations . . . 255

9.1 General HSL rules. . . 256

9.2 Models 270 . . . 256

9.3 Model 800 . . . 258

9.4 Model 820 . . . 258

9.5 IXA and migration tower coexistence in HSL loops . . . 258

9.6 Model 825 . . . 262 9.7 Model 830 . . . 262 9.8 Model 840 . . . 263 9.9 Models 870/890. . . 264 9.10 HSL clusters . . . 265 9.10.1 HSL OptiConnect fabric . . . 266

9.10.2 Model 270, Model 800 based cluster . . . 267

9.10.3 Model 810, 820 based cluster . . . 268

9.10.4 Model 830 based cluster . . . 269

9.10.5 Model 840, 870 and 890 based clusters . . . 270

Chapter 10. Terminal Services and Citrix MetaFrame . . . 271

10.1 Overview . . . 272

10.1.1 New in Windows Server 2003 Terminal Services . . . 272

10.2 Server modes . . . 272

10.2.1 Remote Desktop for Administration . . . 272

10.2.2 Terminal Services . . . 273

10.2.3 Terminal Services structure . . . 273

10.2.4 Installation and configuration . . . 274

(10)

10.3 Citrix MetaFrame. . . 282

10.3.1 Independent Computing Architecture . . . 282

10.3.2 Installation and configuration . . . 283

10.3.3 ICA Client deployment . . . 287

10.4 Security . . . 287

10.4.1 File security . . . 288

10.4.2 Policies . . . 288

10.4.3 C: and D: drive exposure . . . 289

10.5 Installing applications on Terminal Services . . . 290

10.5.1 Installing Microsoft Office XP . . . 290

10.5.2 Configuring Office application settings . . . 292

Chapter 11. xSeries clusters . . . 297

11.1 What is Microsoft clustering? . . . 298

11.1.1 Resources . . . 300 11.1.2 Resource monitor . . . 300 11.1.3 Dependencies . . . 301 11.1.4 Resource types . . . 302 11.1.5 Resource states . . . 303 11.1.6 Resource groups. . . 303 11.1.7 Quorum resource . . . 305 11.1.8 Failover . . . 305 11.1.9 Failback. . . 307

11.1.10 LooksAlive and IsAlive . . . 307

11.2 Hardware and software prerequisites . . . 308

11.2.1 Hardware prerequisites . . . 308

11.2.2 Software prerequisites . . . 308

11.3 Planning for implementing Microsoft Clustering . . . 309

11.4 Configuring Cluster Services on a new server . . . 310

11.5 Configuring Cluster Service on an existing server . . . 312

11.5.1 Create the shared disks . . . 312

11.5.2 Configuring the cluster heartbeat connection . . . 314

11.5.3 Preparing the quorum disk in Windows. . . 316

11.5.4 Installing and configuring the first cluster node . . . 316

11.5.5 Adding nodes to the cluster . . . 322

Chapter 12. IXS and IXA migration . . . 335

12.1 Supported base installations . . . 336

12.2 OS/400 upgrade path . . . 336

12.2.1 General prerequisites . . . 336

12.2.2 Releases prior to V4R5 . . . 336

12.2.3 V4R5 or later releases . . . 336

12.3 Support for shared external host LAN . . . 337

12.4 Updating the integration software . . . 337

12.5 Supported hardware migrations . . . 338

12.5.1 Migration from 2850 IPCS/6617 to 2890. . . 338

12.5.2 Migrations to a 2689 IXA or 2892 IXS. . . 338

Chapter 13. iSeries NetServer . . . 339

13.1 iSeries NetServer overview . . . 340

13.2 New in OS/400 V5R2/V5R1 . . . 341

13.3 iSeries NetServer support by OS/400 release . . . 343

13.4 iSeries NetServer scenarios . . . 345

(11)

13.4.2 Comparing iSeries NetServer with OS/400 Client Access . . . 348

13.4.3 iSeries NetServer file shares. . . 349

13.4.4 iSeries NetServer printer shares . . . 350

13.4.5 Backup and recovery . . . 350

13.4.6 Text conversion. . . 350

13.5 Finding iSeries NetServer in the network . . . 351

13.6 iSeries NetServer security. . . 352

13.7 iSeries NetServer properties . . . 354

13.8 iSeries NetServer setup . . . 355

13.8.1 Setting up the Windows PC clients . . . 355

13.8.2 Choosing a setup method . . . 356

13.9 Setting up iSeries NetServer: fastpath . . . 356

13.10 Setup and administration using Operations Navigator . . . 358

13.11 Gaining access to iSeries NetServer shares. . . 363

13.12 Positioning iSeries NetServer as a file server . . . 365

Appendix A. Save and restore performance tests . . . 367

Parallel backups to disk . . . 368

Performance test setup . . . 368

Performance tips . . . 369

Tape backup and restore performance . . . 370

Save rates to tape using OS/400 disaster recovery backup . . . 370

Save rates to tape using OS/400 file level backup . . . 370

Save rates to tape using the tape pipe function . . . 371

Restore rates from tape using OS/400 disaster recovery restore . . . 371

Restore rates from tape using OS/400 file level backup . . . 371

Restore rates from tape using the tape pipe function . . . 371

Disk backup and restore performance . . . 372

Using OS/400 disaster recovery backup to disk serially . . . 372

Using OS/400 disaster recovery backup to disk in parallel . . . 372

Using OS/400 file level backup to disk serially . . . 372

Using OS/400 file level backup to disk in parallel . . . 373

Using the create and copy function serially. . . 373

Final conclusions . . . 373

Additional test results from Advanced Technical Support. . . 374

NTBackup using iSeries integration device driver for LTO II: file level backup/restore. 374 SAV/RST to Savefile on same system using same disks: NWSSTG . . . 375

SAV/RST to LTO II: NWSSTG . . . 375

SAV/RST to LTO II: File Level Backup . . . 375

50 GB in 16 storage spaces 500 MB: 6 GB in size . . . 375

COPY 60GB from NT Server to IFS \home directory . . . 375

Backup and restore IFS \home\ to LTO II drive. . . 375

Appendix B. Active Directory. . . 377

Overview . . . 378

Active Directory elements . . . 378

Organizational unit . . . 378 Security group . . . 378 The domain . . . 378 The tree. . . 379 The forest . . . 379 Joining a domain . . . 380

(12)

Installing DNS . . . 380

Appendix C. Cluster scripts . . . 381

Script one . . . 382 Code . . . 382 Script two . . . 383 Code . . . 383 Example . . . 384 Related publications . . . 387 IBM Redbooks . . . 387 Other publications . . . 387 Online resources . . . 388

How to get IBM Redbooks . . . 388

(13)

Notices

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to:

IBM Director of Licensing, IBM Corporation, North Castle Drive Armonk, NY 10504-1785 U.S.A.

The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS

PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT,

MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrates programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. You may copy, modify, and distribute these sample programs in any form without payment to IBM for the purposes of developing, using, marketing, or distributing application programs conforming to IBM's application programming interfaces.

(14)

Trademarks

The following terms are trademarks of the International Business Machines Corporation in the United States, other countries, or both:

1-2-3®

Advanced Function Printing™ AFP™ AIX® AS/400® AS/400e™ DataPropagator™ Domino™ DB2® DFS™ ^™ IBM® iSeries™ Lotus® MQSeries® Netfinity® NetVista™ OS/2® OS/400® PowerPC® Redbooks™ Redbooks(logo) ™ ServerGuide™ ServerProven® Tivoli® X-Architecture™ xSeries®

The following terms are trademarks of other companies:

Intel, Intel Inside (logos), MMX, and Pentium are trademarks of Intel Corporation in the United States, other countries, or both.

Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.

Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.

(15)

Preface

This IBM® Redbook highlights the benefits of running a Windows® server on an IBM Integrated xSeries® Server (IXS), or an xSeries Server attached via the IBM Integrated xSeries Adapter (IXA), rather than on a separate PC server. It provides the information needed to plan, install, and manage the Integrated xSeries Server in your IBM^® iSeries™ server.

This book helps the reader gain detailed insights and explanations about the support provided by the OS/400® Integration for Microsoft® Windows Server software. The intended audience includes IBM customers, Business Partners, service providers, and personnel who need an in-depth understanding of how to implement Microsoft Windows Server running on the IXS for iSeries or on an xSeries server attached via IXA.

The team that wrote this redbook

This book was produced by a team of specialists from around the world working at the International Technical Support Organization, Rochester Center.

Nick Harris is a Consulting IT Specialist for the iSeries and has

spent the past five years in the International Technical Support Organization, Rochester Center. He specializes in LPAR, iSeries hardware and software, external disk, Integrated xSeries Server for iSeries, and Linux, and he writes and teaches IBM classes worldwide on areas of AS/400® system design and server consolidation. He spent 13 years in the United Kingdom AS/400 Business and has experience in S/36, S/38, AS/400, and iSeries servers. His e-mail address is mailto:niharris@us.ibm.com.

Anders Ahl is an Advisory IT Specialist for IBM Global Services

in Sweden. He is a Citrix Certified Administrator and an MCSE with more than 10 years of experience in the Windows NT/2000 field. His areas of expertise include IBM^ xSeries systems management, Citrix Metaframe, and TCP/IP

communication. Since he started working for IBM in 1997 he has written extensively about various Microsoft-related topics, and this is his fifth IBM Redbook.

Phil Ainsworth is a Senior Technical Specialist from Melbourne,

Australia. He has 21 years of experience with IBM and has worked on S/34, S/36, S/38, AS/400, and iSeries servers. His areas of expertise include Windows NT® running on the

Integrated Netfinity® Server, Client Access, communications, and PC connectivity. Phil has also participated in other residencies on subjects such as Client Access, Novell NetWare coexistence with Client Access, and connecting Apple Macintosh to the AS/400 system.

(16)

Andy Elsey is an IT Specialist for IBM Global Services in the

United Kingdom and a member of the Enterprise Services for Microsoft Technologies. He has more than 13 years of experience as an application developer. His areas of expertise include C#, ASP.NET, Visual Basic, IIS, and Microsoft Office.

Mike Woiwood is a Staff Software Engineer with more than 18

years of experience working with IBM Midrange computers. For the past eight years Mike has worked in the Rochester Support Center supporting iSeries integrated operating environments. He has supported the FSIOP, IPCS, INS, IXS or IXA hardware created to run Warp Server, Netware, Domino™, iSeries Firewall, Microsoft Windows NT, and Microsoft Windows 2000 servers. He can be contacted at mailto:woiwood@us.ibm.com.

Thanks to the following people for their contributions to this project: Bob Schuster Russ Garvey George Gaylord Mark Goff Tom Haze Nancy Kryka Jeff Meaden Marilyn Oliver Mike Petrich Leif Rush Mike Schambureck Andy Tauferner Scott Timmerman Kyle Wurgler Elisabeth Rédei Microsoft, Sweden Ola Svensson Volvo IT, Sweden

Become a published author

Join us for a two- to six-week residency program! Help write an IBM Redbook dealing with specific products or solutions while getting hands-on experience with leading-edge technologies. You will team with IBM technical professionals, Business Partners, and/or customers.

Your efforts will help increase product acceptance and customer satisfaction. As a bonus, you will develop a network of contacts in IBM development labs and increase your productivity and marketability.

Find out more about the residency program, browse the residency index, and apply online at:

(17)

Comments welcome

Your comments are important to us. We want our Redbooks™ to be as helpful as possible. Send us your comments about this or other Redbooks in one of the following ways:

 Use the online Contact us review redbook form found at:

ibm.com/redbooks

 Send your comments in an e-mail to:

redbook@us.ibm.com  Mail your comments to:

IBM Corporation, International Technical Support Organization Dept. JLU Building 107-2

3605 Highway 52N

(18)
(19)

Chapter 1.

Overview

This chapter presents an overview of the Windows Server 2003 running on the Integrated xSeries Server for iSeries (IXS) server or an xSeries Server attached via an Integrated xSeries Adapter (IXA). It also describes the benefits you can achieve by setting up this environment.

IBM has combined the iSeries and xSeries servers into one integrated package capable of running OS/400 and Windows Server. This provides additional benefits over and above those provided by each system operating independently. With the delivery of OS/400 Version 4 Release 2, IBM extended its range of AS/400 support to include Windows NT Server 4.0. Now, with OS400 Version 5 Release 2, IBM has announced new IXS hardware for the Windows server. IBM also added considerable new functions to the implementation of a Windows server running in the OS/400 environment.

(20)

1.1 Windows Integration

IBM iSeries and xSeries Windows Integration Solutions:

 Integrated xSeries Server for iSeries is a Microsoft Windows Server 2003 or Windows 2000 Server on a card that runs inside an IBM^ iSeries server.

 Integrated xSeries Adapter (IXA) enables direct connection of an n-way xSeries server to an iSeries server for greater power and flexibility.

 Both products leverage iSeries storage and systems management resources and integrate iSeries and xSeries operations to help reduce cost and complexity.

Innovative integration

Many businesses today operate heterogeneous environments that include Intel®-based servers running Microsoft Windows applications in addition to core business applications on iSeries. This mix of servers may be necessary in order to deploy the applications the business needs; however, it may grow into a challenging environment that involves supporting many discrete Intel servers and can lead to higher costs and a more difficult operation to manage.

IBM iSeries offers two solutions that provide a powerful, flexible, and highly cost-effective alternative to Intel-based server farms: the Integrated xSeries Server and the Integrated xSeries Adapter.

Both the IXS and the IXA deliver tightly integrated, easily managed Windows Server 2003 and Windows 2000 Server deployment solutions that help provide a cost-effective and efficient alternative to running Windows on multiple stand-alone Intel servers.

The difference between the two solutions is how the iSeries and xSeries hardware integration is accomplished. Each solution is designed to meet different requirements.

A better way to do Windows

The IXS is an Intel-based server on a PCI card that plugs into an iSeries server. It delivers a powerful 1.6 GHz Intel Xeon processor with hyperthreading technology, which makes a single physical processor appear as two logical processors. It has a built-in 10/100 Mbps Ethernet Adapter. The IXS leverages iSeries’ system management, communication, and storage resources, but otherwise operates as if it were a standalone Windows server. As many as 48 discrete Windows servers can be installed inside a single iSeries server, creating an entire server farm in a single, easily managed platform — capitalizing on the reliability,

manageability, and flexibility of the iSeries.

The IXA is a PCI-based interface card that installs inside selected models of xSeries servers1, providing a 1 GBps high-speed link to an iSeries server. This enables centralized storage, integrated operations, and systems management.

IXAs enable the direct attachment of as many as 60 n-way xSeries servers to a single iSeries server, enabling the deployment of greater Intel processing power and taking full advantage of the latest IBM X-Architecture™ innovation. Each xSeries server has its own processors, memory, and IXA and, like the IXS, shares iSeries’ disk, tape, DVD, CD, and systems management resources.

Both xSeries server options are designed for local consolidation of Intel servers and storage as well as centralized management of iSeries and xSeries servers in distributed offices. These solutions allow you the flexibility to configure a consolidated infrastructure that best fits your specific requirements. If you need to efficiently deploy a large number of smaller Windows servers, choose a single iSeries server and install many IXSs in it. Or, if you need mission-critical processing power and scalability, you might connect powerful 2-way, 4-way or

(21)

8-way xSeries servers to your iSeries via IXAs. Either way, you get true integration that gives you the best of both iSeries and xSeries servers and provides the freedom to run the best mix of applications for your business while operating your entire implementation as a single infrastructure with minimum complexity.

1.1.1 Integrated operations

Improving or reducing the operational overheads of any group of servers is very important for any IT organization. This section discusses the improvements that can be made with

Windows Integration on iSeries.

Centralized, graphical server management

iSeries Navigator provides a graphical user interface for managing both iSeries and Windows servers. Administrators may easily start and stop servers, enroll Operating System 400 (OS/400) users to a Windows domain and perform storage management tasks such as adding new virtual disks to a Windows server. iSeries Navigator for Wireless enables administrators to view server status, start and stop servers, and run Windows commands for IXSs from a Web-enabled cell phone, Personal Digital Assistant (PDA), or a Web browser.

Synchronized security

With iSeries Windows integration solutions, OS/400 and Windows Server 2003 or Windows 2000 Server user IDs and passwords can be integrated and centralized. When a user is added to OS/400, the user also can be added automatically to the Windows environment with proper authorities. In addition, when the user changes their OS/400 password, their Windows password can be synchronized automatically. This integration helps reduce user

administration costs because it cuts down on juggling multiple user IDs, passwords, and authorizations across multiple IT environments.

Consolidated backup

iSeries Integrated xSeries solutions provide consolidated OS/400 and Windows server backup solutions, enabling businesses to fully leverage hardware and IT support resources. In a typical Windows server farm, data may be scattered across multiple servers, with backup processes running on each one and multiple tape drives to manage. With iSeries and xSeries integration, iSeries and Windows server storage and backup resources are shared and consolidated, and one tape device can perform automated backup for the entire infrastructure.

Reliable, secure, high-speed communications

iSeries enables OS/400 and integrated Windows servers to communicate over high-speed Virtual Ethernets. These networks may be utilized for Windows-to-Windows and

Windows-to-OS/400 communication. Because there are no cables, connectors, hubs, or routers, there are fewer points of potential failure. Network traffic travels inside the iSeries, not across external networks. Virtual Ethernets can provide more reliable and secure

communications, faster network communications (1 GBps) between servers, and reduced external network traffic.

Exceptional storage management

One of the most significant advantages of the iSeries is its unique storage architecture: All disks can be managed as a single pool of RAID-5 protected storage. This means that users and system administrators need not concern themselves with the exact physical location of data. It is all managed dynamically, transparently, and simply by the iSeries.

(22)

The advanced iSeries storage architecture can provide more flexibility than conventional Windows server implementations where, typically, dedicated disk drives are attached to every server and each server’s capacity is managed separately.

With the integrated iSeries solution, there can be one pool of disk drives that OS/400 and the Windows servers utilize, and iSeries can automatically spread the data across all disk drives on the system. This architecture can provide tremendous performance advantages as well as more efficient use of hardware resources.

With the IXS and IXA, the iSeries’ superior storage area network-like management capabilities are made available for Windows transparently. Disk storage is allocated to Windows by creating a storage space object (i.e. virtual disk space) from the iSeries pool of disk resources. Up to 32 storage spaces can be created and linked to each IXS or

IXA-attached xSeries server. Each storage space can be between 1 MB and 64 GB in size, for a maximum of up to 2 TB per Windows server.

In addition, multiple storage spaces can be linked together using the Windows disk

administrator utility for large volume sets. Storage spaces can be added dynamically to the Windows server using iSeries storage management facilities.

Flexible and Reliable Server Deployment

iSeries and xSeries integration and storage virtualization provide innovative options that can enable customers to enhance the reliability and recoverability of their Windows server environment. If a Windows server fails, you can quickly and easily switch the server’s storage spaces to another “hot spare” xSeries server without restarting your iSeries server. This may easily reduce the overall number of Intel servers needed to provide increased availability. It also adds flexibility by enabling one “spare” server to be used to protect multiple production servers.

If automatic fail-over is required to support Windows application availability, iSeries and xSeries integration supports Microsoft Cluster Services in Windows Server 2003 Enterprise Edition and Windows 2000 Advanced Server.

In a typical Windows server implementation, there may be several server configurations consisting of production servers, development servers, and test servers, each with its own set of software and device drivers. Testing and deploying changes across multiple servers can be problematic because of the number of different configurations that must be maintained. A test server may have to be made available for every different configuration, or a test server may have to be rebuilt from scratch to match a production server whenever there are changes to be deployed.

With iSeries and xSeries integration, one xSeries server may be used to support multiple test and deployment environments. One xSeries can be made to “look like” any of the other servers, because the server hardware may be completely divorced from the storage spaces on which a specific Windows server configuration and data is installed. There is no physical boot drive within the xSeries server; all Windows “drives” are just storage space objects in the iSeries storage pool.

Storage virtualization provides tremendous flexibility for deploying new Intel servers, because everything needed to operate each Windows server is just data within a storage space. By copying storage spaces, new servers may be deployed and changes tested easily. Restoring storage spaces can enable rapid recovery of complete Windows servers in the event of a software failure or data corruption.

(23)

Other key benefits of iSeries and xSeries integration:

 Proven application solutions: The IXS is an xSeries ServerProven® platform on which software vendors can validate their applications, accelerating the time it takes to get them into production. The IXA is a ServerProven hardware adapter. Many of the complementary applications available for the xSeries are also ServerProven.

 Support for complementary applications: Some software providers are delivering applications that leverage multiple server platforms. With these complementary

applications, both OS/400 and Windows server environments are required to support the total solution. The IXS and xSeries attached via IXA are ideal ways to meet this

requirement, by offering an integrated IBM solution.

 Managed delivery of Windows applications: Support for Citrix MetaFrame and Microsoft Windows Server 2003 and Windows 2000 Server (with built-in terminal server support) to deliver Windows personal productivity applications to the desktop. By serving Windows desktop applications on the server instead of installing them on every desktop,

management can be simplified dramatically. Application software changes are done only once, at the server level, then they are automatically and transparently rolled out to every desktop in the organization.

1.1.2 Integrated xSeries Server

The IXS has been available in a variety of packages. The current packages are listed below:

2.0 GHz Integrated xSeries Server

 2.0 GHz Intel Xeon processor with Hyperthreading technology

 512 KB L2 cache

 400 Mhz front side bus (FSB)

 Up to 4 GB of ECC DDR memory

 Up to 2 TB disk storage

 Integrated 10/100 Mbps Ethernet, plus up to three additional hot-plug network adapters, which can be a mix of 10/100/1000 Mbps Ethernet and 100/16/4 Mbps token-ring adapters

 4 Universal Serial Bus 1.1 ports

 Device drivers to share iSeries disk, tape, DVD, and CD devices

 Supported on iSeries Models with OS/400 V5R2 or higher

 Supports Windows Server 2003 Standard or Enterprise Editions, Windows 2000 Server, or Windows 2000 Advanced Server

1.6 GHz

Integrated xSeries Server

 1.6 GHz Intel Xeon processor with Hyperthreading technology

 512 KB on-chip L2 cache

 Up to 4 GB of ECC DDR200 memory

 Up to 2 TB disk storage

 Integrated 10/100 Mbps Ethernet, plus up to three additional hot-plug network adapters, which can be a mix of 10/100/1000 Mbps Ethernet and 100/16/4 Mbps token-ring adapters

 4 Universal Serial Bus 1.1 ports

(24)

 Supported on iSeries Models with OS/400 V5R2 or higher

 Supports Windows Server 2003 Standard or Enterprise Editions, Windows 2000 Server, or Windows 2000 Advanced Server

1 GHz

Integrated xSeries Server

 Intel Pentium® III 1 GHz processor.

 256 KB on-chip L2 cache.

 Up to 4 GB of ECC SDRAM memory.

 Up to 2 TB disk storage.

 Up to 3, Gigabit Ethernet, 10/100 Mbps Ethernet, 100/16/4 Mbps token-ring adapters (hot-plug), or a combination of any of these.

 2 Universal Serial Bus ports.

 Device drivers to share iSeries disk, tape, DVD, and CD devices.

 Supported on iSeries models with OS/400 V5R1 or higher.

 Supports Windows Server 2003 Standard or Enterprise Editions, Windows 2000 Server, Windows 2000 Advanced Server, or Windows NT Server 4.0.

 Multiple IXSs can be installed in a single iSeries system. See iSeries support for

Integrated xSeries Servers for details about the number of IXSs supported by each iSeries model.

1.1.3 Integrated xSeries Adapter

The IXA provides attachment capability for external PC servers.

 64-bit, 66 MHz PCI adapter.

 Installed in selected xSeries servers including the 235, 255, 360, and 440 models. For a complete list of models visit:

http://www-1.ibm.com/servers/eserver/iseries/windowsintegration/xseriesmodels/

 Uses High-Speed Link cables to connect to iSeries.

 Supported on iSeries Models with OS/400 V5R1 or higher.

 Supports Windows Server 2003 Standard or Enterprise Editions, Windows 2000 Server, or Windows 2000 Advanced Server.

 Multiple xSeries servers can be directly attached via IXAs to a single iSeries system. See iSeries support for Integrated xSeries Adapters (IXA) for details about the number of IXAs supported by each iSeries model.

Windows Server requirements

Windows Server 2003 Standard, Enterprise, and Web Editions, Windows 2000 Server, and Windows 2000 Advanced Server are available from Microsoft resellers.

1.2 New in V5R2

iSeries IXS and IXA offerings are enhanced with support for Virtual Ethernet LAN, Microsoft Clustering Service, and Automatic Cartridge Loader support. In addition, the new iSeries

(25)

models 870 and 890 can consolidate more Windows servers with support for up to 48 IXSs and 60 IXAs.

 Virtual Ethernet: The iSeries Virtual Ethernet LAN introduced in V5R1 to enable high-speed communications between OS/400 and Linux partitions within the iSeries server is extended to support IXS and xSeries servers attached with IXAs. With this support, Windows servers can now communicate with each other and with OS/400 and Linux partitions over fast, more secure, and reliable Virtual Ethernet LANs.

 Clustering Service: iSeries Windows integration support has been extended to support the Microsoft Clustering Service. With the clustering support provided in Windows Server 2003 Enterprise Edition and Windows 2000 Advanced Server, two IXS or two xSeries servers attached with IXAs can form a cluster and utilize the 16 new shared storage spaces that are available with V5R2. In the cluster environment, if there is a planned or unplanned outage on one of the Windows servers, the storage spaces can be switched to the second Windows server and the applications can be restarted automatically to reduce the length of the system outage.

 Auto Cartridge Loader: Customers who have systems with large amounts of data often have Auto Cartridge Loader (ACL) tape devices (3570, 3580, and 3590) for use with backup/restore operations. Support is now added in the Windows integration product for ACLs to automatically load the next tape cartridge in the magazine during backup/restore operations initiated from the Windows Server.

 Microsoft Windows Server 2003: IBM supports Microsoft Windows Server 2003 on the IXS and on xSeries servers attached to iSeries with the IXA.

 Other enhancements:

– New iSeries Navigator functions that enable the user to run Windows commands and perform iSeries Integration for Windows Server service functions

– User administration enhancements, including support for organizational units and improved control of domain enrollment processing

– Windows system drive now a maximum of 64,000 MB in size – Support now available for a virtual optical media library

– Improved iSeries Integration for Windows Server service and device locking functions

For more details about V5R2 enhancements, visit the What's new for V5R2 topic in the Windows Server on iSeries section of the iSeries Information Center at:

http://publib.boulder.ibm.com/pubs/html/as400/infocenter.html

1.3 Windows Integration background

The Intel processor-based adapter has been available from IBM on AS/400, AS/400e™, and iSeries servers since V3R1. The hardware was initially known as the File Server IOP

(FSIOP), and then the Integrated PC Server (IPCS). In V4R4, the server hardware was again renamed to the Integrated Netfinity Server (INS).

Integrated xSeries Server

(IXS) is now the generic name that applies to all current models of the iSeries server features.

1.4 The midrange server marketplace

In the commercial marketplace, companies normally run their commercial and business applications on a midrange server, such as the iSeries server. When using the iSeries server for these applications, it is common for companies to install PC-based servers alongside the

(26)

iSeries server for PC file and print serving. OS/400 is optimized for multi-user application and database services. Network operating systems, such as Microsoft Windows Server and Novell NetWare, are optimized for PC file and print services.

Today, many companies are considering the Windows Server as their network operating system for sharing files, printers, and personal productivity applications. The Windows Server server also provides the ability to run server-based applications natively, such as Microsoft Exchange.

The iSeries server has always excelled in the commercial midrange marketplace by focusing on the value of integration for database, security, and application services, and more recently e-business and native IBM Lotus Domino. The integrated architecture of the iSeries server reduces complexity in customers’ installations, lowering their total cost of ownership. iSeries customers want to extend that same integrated model to include their PC servers. The IXS achieves this goal by combining iSeries server and PC server hardware inside the same physical package. In addition, the iSeries server and Windows Server share resources such as disk, tape, DVD, and CD devices, and employ combined operations and systems

administration.

By packaging the Integrated xSeries Server inside the iSeries hardware platform, benefits are gained from sharing hardware resources and combining management and operations. Tasks and costs involved in installing, managing, and maintaining separate PC-based servers can be reduced with this integrated solution. Hardware support for the IXS is covered by one company, and maintenance charges for the IXS are included in the iSeries support agreement.

The Windows server running on the Integrated xSeries Server addresses these three markets in particular:

 Distributed branch offices: The Windows Server on the Integrated xSeries Server is ideally suited for customers with distributed branch offices where centralized management is required. For example, an OS/400 operator can remotely start, stop, and allocate

additional disk resources to a Windows Server running on the IXS. The Tivoli® IT Director management product can be used to enhance the remote management of the Windows Server. IT Director provides the ability to take control of the Windows Server console remotely, distribute software to the server, and perform hardware and software

administration tasks. This remote management function is also supported with the two administrator Terminal Services Clients in the Windows 2000 server.

 Server consolidation: Because the iSeries server is capable of managing multiple IXSs, it is possible to consolidate a number of PC servers into a single system. Depending on the iSeries model, up to 48 IXSs, each running its own copy of the Windows Server, can be installed in a single iSeries server. complex

 Application server for network computers: The Windows Server on the IXS also supports Microsoft Windows Server Terminal Services and the Citrix MetaFrame product that provide multi-user support for applications running on the Windows Server. This enables network stations to use Windows-based personal productivity applications running under the Windows Server on the IXS.

1.5 Installation

The Windows Server is installed on the Integrated xSeries Server using an OS/400 command that runs an automated installation program. (See Figure 1-1 on page 9.) You insert the Windows Server CD into the iSeries DVD or CD drive, enter information into the command prompts, and press Enter.

(27)

Figure 1-1 Windows Server installation

The operation of the Windows Server on the IXS is divided between the server console and the Windows Server console. The installation and disk configuration are performed from an OS/400 display. Messages from the IXS can be collected in OS/400 message queues and job logs. On the other hand, Windows Server operations are performed directly on the Windows Server console that is connected to the IXS. This preserves the Windows Server graphical interface for most operations, including the installation of Windows Server applications.

Refer to Chapter 3, “Installation” on page 51, for more information about installing Windows Server on the Integrated xSeries Server.

1.6 Shared devices

One benefit of running the Windows Server on the iSeries server is the ability to take advantage of iSeries disk storage reliability and management flexibility. This is particularly useful when providing operational support for remote installations, where adding disk storage to a PC-based server often requires significant downtime. When you use iSeries disk drives, Windows Server files are automatically protected using the iSeries RAID-5 and mirroring technology (provided these functions have been enabled on the iSeries server). There is no benefit to be gained by configuring RAID-5 or mirroring on the Windows Server.

The integration support enables the Windows Server backup applications to use the iSeries tape drive for backup and restore. The iSeries tape drive is varied off and then allocated to the Windows Server. The tape drive is available for use by the Windows Server backup and restore utilities. Then, the tape drive is reallocated to the iSeries server for normal tape operations after the Windows Server backup or restore operation has completed. You can also save the Windows Server files directly from the iSeries server to a tape drive at a file level using the new file level backup capability or at a storage space level for disaster recovery purposes.

The iSeries DVD/CD drive can be dynamically allocated to a Windows Server. See Figure 1-2 on page 10 for an example of how this concept works.

W indows

server CD

W indows server

console

(28)

Figure 1-2 iSeries server and Windows Server device sharing

1.7 Disk administration

iSeries disk storage is allocated to the Windows Server by creating an object called a

network

server storage space

(also referred to as NWSSTG space or simply storage space), which resides in the system auxiliary storage pool (ASP) or a user ASP. Each storage space can be from 1 MB to 64,000 MB in size.

The task of assigning new disks to a Windows Server can be performed at a central iSeries server, using native OS/400 commands. Telnet or SNA pass-through shutting down the Windows Server. After shutdown, a storage space can be linked to the server. After the Windows Server is brought up again, the remote operator can use, for example, Windows 2003 Server Terminal Services configured in administrator mode to take over the Windows Server console and format the disk. This entire process can be completed from a central location, or directly at the iSeries server and Windows Server consoles.

Windows Server disk images can be saved on a central iSeries server and then transmitted as a save file, or sent on tape to a remote site. This allows the addition or replacement of a complete disk image on a remote server without any hardware changes. For example, this technique could be used when a company periodically needs to distribute a catalogue of parts or sales information to its remote branches. An example of disk administration is shown in Figure 1-3 on page 11.

iSeries

server

Windows Server

2003

(29)

Figure 1-3 Disk administration scenario

Refer to Chapter 5, “Disk Management” on page 113, for more information about disk administration.

1.8 User administration

The user integration function enables the enrollment of OS/400 users and groups in a Windows Server domain or on an individual server. This also enables the synchronization of user passwords from OS/400 to the Windows Server domain or server. This feature can significantly reduce the overhead required to administer two separate operating systems.

For example, when an OS/400 group profile is enrolled in the Windows Server domain or on an individual server, you optionally can enroll user profiles in the group and the group profile itself. A predefined account template on the Windows Server can be used to set up the appropriate Windows Server group memberships and user preferences. As new users are added to the group profile in OS/400, they are propagated automatically to the Windows Server domain or server.

Figure 1-4 User enrollment and password synchronization

When OS/400 users who are enrolled in the Windows Server domain change their passwords, the changes are automatically propagated to the Windows Server domain. As shown in Figure 1-4, password synchronization is from OS/400 to Windows Server only. Refer to Chapter 6, “User enrollment” on page 131, for more information about user administration.

W indows 2003 on the Integrated xSeries S erver Adm inistrator m anages the branch office server New H Disk H Disk G Disk F Disk New Disk New Disk Save File Head office iSeries server Branch office iSeries server

O S /400 users, group s,

an d p assw ord s

W in d ow s 2003

d om ain

(30)

1.9 Backup and restore

Windows 2003 files can be backed up from either OS/400 or Windows Server. (See Figure 1-5.) From OS/400, you can save a complete storage space for disaster recovery purposes or perform a file level backup from the Windows Server server or OS/400.

Figure 1-5 Backup and restore options

The ability to save and restore individual Windows files from OS/400 using CL commands is called

OS/400 file level backup

. It uses the QNTC file system to gain access to directory shares on a Windows server running on the Integrated Netfinity Server.

You can view the backup and restore of Windows files from two perspectives: OS/400-centric or Windows-centric. Currently, the following four methods can be used to back up and restore files on a Windows Server (or Windows NT 4.0) server running on the IXS:

 From the OS/400 side, you can use the following three methods:

– Disaster recovery backup is the term that is used when backing up Windows files at a storage space level.

– OS/400 file level backup can be used to back up individual Windows files using the QNTC file system.

– IBM Tivoli Storage Manager can also be used to back up individual Windows files.

 From the Windows side, you can back up files using Windows backup applications to either an iSeries or PC tape drive.

Most iSeries tape drives can be used by Windows backup applications to provide fast and reliable saves of Windows files.

Refer to Chapter 7, “Backup and recovery” on page 179, for more information about backup and restore.

1.10 Multi-user Windows environment

Many companies that want to consolidate their Windows Servers on the iSeries server are also considering replacement of their PC workstations with network computers, to reduce costs and simplify their operational environment.

The iSeries server is an ideal platform to fulfill the role of a host server for IBM Network Stations. The iSeries can act as a boot manager and as a server for Domino, Internet, and legacy applications.

OS/400-centric Windows 2003-centric Windows 2003 backup applications File level backup using Tivoli Storage

Manager or the QNTC file system

Disaster recovery backup

1

2

(31)

Figure 1-6 Multi-user Windows environment on the IXS

As shown in Figure 1-6, a Windows Server can be added to this environment to provide IBM Network Stations access to Windows-based personal productivity applications, such as Lotus® 1-2-3® and Microsoft Word. Windows Server 2003 Terminal Services provides Remote Desktop Protocol (RDP), which is used to connect Windows clients to Terminal Services on the Windows Server 2003. Citrix MetaFrame provides the ICA protocol, which is used to connect IBM Network Stations or other devices using ICA to Terminal Services.

Another possibility is to use the NetVista™ Windows-based terminal to connect directly to a Windows Server 2003 without using Citrix MetaFrame. This could be a cost-effective and easy way to change to a thin client network architecture if the network has no more than 30 to 50 clients.

Refer to Chapter 10, “Terminal Services and Citrix MetaFrame” on page 271, for more information about Windows Terminal Services.

1.11 PC server consolidation

Many companies deploy multiple PC-based Windows servers, each dedicated and tuned to an individual application. These applications commonly include file and printer sharing, database serving, Internet and intranet serving, remote access capability, fax, groupware, e-mail, firewall, and so on. Although the single-server-per-application concept has availability advantages (for example, a fax server failure does not affect the Internet server), it also introduces significant space, maintenance, and systems management considerations.

These issues often translate into additional costs to the organization. Therefore, a server that can consolidate multiple application servers onto a single physical platform should have inherent advantages over the discrete-server model. A consolidated platform can provide multiple separate Intel-based servers and be housed and managed in a single physical package.

The iSeries server performs this consolidation function by hosting multiple Integrated xSeries Servers or Integrated xSeries Adapter attached xSeries Servers, each running its own copy of the Windows Server.

The iSeries models support up to 60 IXA attached xSeries servers, offering huge

consolidation. Each xSeries server operates as an individual entity, yet can be managed from the iSeries. The disk, backup, restore, and user administration are hosted by iSeries, but the xSeries LAN adapters are located in the actual PC server.

C i t r i x M e t a F r a m e a n d

W i n d o w s 2 0 0 3 T e r m i n a l S e r v i c e s o n t h e I n t e g r a te d x S e r i e s S e r v e r

(32)

The iSeries server accommodates up to 48 Integrated xSeries Servers, depending on the model. Each IXS runs independently but is controlled by the iSeries server for the purposes of disk storage management, backup and restore, and user administration. Figure 1-7 shows an example of server consolidation.

Figure 1-7 Consolidation in iSeries

The iSeries Server platform provides these enhanced features:

 Unique high-availability characteristics improves Windows Server reliability.

 Centralized reset and IPL of individual servers removes the requirement for physical access to the PC reset switch.

 Sharing of disk, tape, DVD, and CD devices between servers optimizes hardware investment.

 Single OS/400 console for centralized administration and error monitoring improves operator productivity and convenience.

 Internal links between OS/400 and Windows Servers enables management of the integrated servers to continue during times of network disruption.

1.12 Remote management of the Windows 2003 Servers

For many iSeries customers, a typical scenario has an iSeries server divided between the head office location and distributed branch offices, sometimes in a single region but often worldwide. In this distributed computing model, operators at the head office are often responsible for administering computing services in the branches. Typically, the branches have few operational skills. Figure 1-8 on page 15 shows an example of remote management.

1 to 59 Windows 2003 Servers

with IX A 48th IX S or 60th IX A

can be a Hot spare 1 to 47 IX S Windows 2003 Servers

2.0 GHz IXS

xSeries 445

+ IXA card

Virtual PC disk

(33)

Figure 1-8 Remote management of branch office servers

Distributed iSeries servers in a network running Windows Server on the IXS can be managed easily from a central location.

Using remote communications (such as Telnet or SNA pass-through), a central administrator can sign on to a remote iSeries server and perform tasks such as bringing the Windows Server up or down, adding new disk volumes, and managing users. These tasks are difficult, if not impossible, to perform on a remote PC server. You can also save a Windows Server disk image on one iSeries server, transmit it across the network, and restore it for use by a Windows Server on another server. With Windows Server, there are now two ways to take over remote control of a Windows server. One way is integrated in Windows Server. You can set up Windows Server 2003 Terminal Services for use by administrators only. This enables you to access the Windows Server console from a remote Windows client to perform any operation that you can do on the console locally. The second method is to use a product such as Tivoli IT Director, with which you can also take over the Windows Server console remotely.

1.13 iSeries and Windows application integration

Many companies that have a mixed iSeries and Windows Server environment want to exchange data between the two operating systems or have a Windows Server application access the OS/400 database directly.

Database integration and other integrated applications are ideally suited to the Integrated xSeries Server environment because of the internal bus-level communication link between the iSeries server and Windows Server. This

internal

virtual Ethernet LAN connection

between the two operating systems provides a secure, reliable conduit between the iSeries server and Windows Server. It is not dependent on token-ring or Ethernet connections to the external LAN. This link emulates an Ethernet LAN and is designed to run the TCP/IP protocol (only) between the Windows Server and the iSeries server. Although the virtual Ethernet LAN is used for some integration functions such as user administration, there is relatively little traffic with this connection. Therefore, you can expect consistent performance across this link.

For example, IBM MQSeries® could be used to write a communications application in which the iSeries server and Windows Server exchange transactions across the virtual Ethernet LAN. Figure 1-9 on page 16 shows an iSeries and Windows 2000 application integration.

Windows Server 2003 on the Integrated xSeries Server

OS/400 operator manages branch

office server Head office

(Chicago) Branch office(San Francisco)

Reboot, add disk, monitor Windows messages

(34)

Figure 1-9 iSeries and Windows 2000 application integration

Modification to the OS/400 Client Access ODBC driver enables it to be used by a Windows Server service. This implementation enables the virtual Ethernet LAN to act as a conduit for Windows Server client applications that need to access the OS/400 database using ODBC. This provides additional flexibility in application design.

Other ways to interchange data in this environment include IBM DataPropagator™, which can be used to replicate data between databases on the iSeries and Windows Server.

1.14 Benefits of running Windows Server on the iSeries server

This section describes some of the benefits of running the Windows Server on an IXS instead of on a separate PC.

1.14.1 Reduced user administration

OS/400 users can be enrolled on a Windows Server 2003 domain and then be maintained automatically by the integration software. This reduces Windows Server administration. For example, you can enroll an OS/400 group profile in a Windows Server 2003 domain. Then, every time a new user is added to this group profile on the OS/400 system, the new user is automatically propagated to the Windows Server 2003 domain.

When enrolled users change their OS/400 passwords, the new passwords are automatically updated on the Windows Server. This can eliminate one of the biggest problems of

maintaining user profiles in two separate operating environments: password synchronization. With this feature, users do not have to change multiple passwords, and Windows Server administrators do not have to waste time continually resetting user accounts.

1.14.2 Higher availability

Running the Windows Server on the Integrated xSeries Server or IXA enables you to take advantage of the following high-availability features of this environment:

 Integrated hardware and software package

All hardware and drivers used to run Windows 2003 on the Integrated xSeries Server or IXA are supplied as a package by IBM. Therefore, the possibility of a conflict between a hardware component and an incompatible driver is unlikely.

DB2/400 Database

Windows Server

applications

Secure, internal Virtual Ethernet LAN connection between the iSeries and Windows Servers

References

Related documents

A transnational policy must extend beyond existing data protection laws by (i) ensuring the access of data subjects to information concerning them; (ii) minimising exceptions

 Continuing and diversified education with experience in: Systems Engineering and Administration; Project Management; Business Operations, Communications, and

cannot be justified solely upon the premise (otherwise sufficient for redress under the Labor Code) that the employer fired his employee without just cause or

thus to rapidly multiply the numbers of infected adult mosquitoes — is the reason why it is important to use insecticide treated-bednets with yellow fever patients.  After

Of all the objects, the most frequently used object is the document object which is used to reference elements of the HTML document currently loaded into the browser window.

Having English as a native language has opened many doors for me, but it occasionally serves as an obstacle to my language learning since so many people all over the world speak

[30] Ambient ionisation techniques can be classified into three groups based upon their different ionisation mechanisms; (1) Spray or jet ionisation technique such as DESI where

Initial, representative Leq,T noise level data shall be collected for similar exposure group (SEG) established IAW AFI 48-145 and AFMAN 48-146, Occupational and