toasters June 2000

toasters@lists.teaparty.net

121 participants
153 discussions

RE: Unix group permission and NT access on a filer
by rob.hawley＠netapp.com 13 Jun '00

13 Jun '00

What version of the filer are you running? Is it 5.3 or later? The filer has always supported multiprotocol access to files. With 5.3 we have completed our security model that is described in the following paper. http://now.netapp.com/NOW/knowledge/docs/olio/guides/53_troubleshooting/con… .shtml Assuming you are using a UNIX qtree (the default) then you have two options of how the NT users will interact with the UNIX style security. The first option is to use strict UNIX type security. Each NT user is mapped to a UNIX identity and vanilla UNIX type security is used. In this case option cifs.perm_check_use_gid should be set to ON. The second option is closer to the NT style of FAT security. If cifs.perm_check_use_gid is OFF, then everyone except the owner is considered a member of the "group". The main control on security is the share level ACL (just like NT). This is controlled by cifs access entries. We allow a further tuning of the ACL by also requiring any access be permitted by the group permissions on the file. The world permissions are not used by PCs (if everyone is permitted access by the share ACL, then world is a member of the "group"). The filer will appear to be a FAT file system to the PC clients. They will probably want to install Secure Share Access to allow them to control the security on files. SecureShare(tm) Access (176KB) SecureShare Access is a DLL for Win95 and Windows NT 4.0 which adds a page to the Properties... sheet for files which reside on NetApp filers. Double-clicking SSACCESS.EXE causes a self-extracting installer to run, installing the DLL and making the appropriate registry entries. The DLL can be uninstalled at any time by using the Add/Remove programs utility on the Control Panel. SecureShare Access is believed to work on Win98 and Windows NT 5.0, but has not been tested on these platforms and is not supported on them. http://now.netapp.com/NOW/tools/supported.shtml You may also wish to look at the following burt since that affects some of the fine points of UNIX style access. http://now.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=21019 -----Original Message----- From: Elizabeth Schwartz [mailto:eschwart@genuity.net] Sent: Friday, June 09, 2000 12:55 PM To: Muhlestein, Mark Cc: eschwart(a)genuity.net; toasters(a)mathworks.com Subject: RE: Unix group permissiosn and NT access on a filer Thanks! IT sounds like what we need is a "cred-GID" am I reading this right? I want to give an NT user the right to access files from his NT box that members of his unix group can access on the Unix side, on a filer set to unix file perms At 11:21 AM 6/9/00 -0700, mark.muhlestein(a)netapp.com wrote: >This is controlled via the option cifs.perm_check_use_gid. See > >http://now.netapp.com/NOW/knowledge/docs/olio/guides/53_troubleshooting/faq >.shtm >l#anchor1392048 > >"My CIFS clients are seeing strange group access with UNIX-style security >files" > >Mark Muhlestein -- mmm(a)netapp.com > > > -----Original Message----- > > From: Elizabeth Schwartz [mailto:eschwart@genuity.net] > > Sent: Friday, June 09, 2000 8:19 AM > > To: toasters(a)mathworks.com > > Subject: Unix group permissiosn and NT access on a filer > > > > > > Please forgive any NT terminology mangling, I'm a Unix person: > > > > We've got a filer that is set up as a Unix filesystem (as opposed to > > multiprotocol.) > > Our NT users access their home directories as NT shares on > > this filer. > > Their NT login names match their Unix user id's. > > > > On the unix side, I created a group and made a > > group-writeable directory > > that is not readable to others. When the NT users log into our unix > > machine, they can write files in this directory. When they > > access this > > directory from the Unix side, only the owner can write files. > > > > Is this fixable? Without making dramatic changes to the > > filer? (I do have > > enough space to make a small extra partition if I really had to) > > -- > > Elizabeth Schwartz 781-262-6565 > > Unix System Administrator eschwart(a)bbnplanet.com > > Genuity, Inc > > -- Elizabeth Schwartz 781-262-6565 Unix System Administrator eschwart(a)bbnplanet.com Genuity, Inc

1 0

Spam from ScottUCE@aol.com
by Brian Tao 13 Jun '00

13 Jun '00

Anyone else get this spam? At first, I was puzzled by the sender's address... "ScottUCE" seems to imply the guy knows he is spamming people with this advert. Then I realized the unfortunate (yet ironically appropriate) name of the business... >;-) -- Brian Tao (BT300, taob(a)risc.org) "Though this be madness, yet there is method in't" ---------- Forwarded message ---------- Received: from imo-r17.mx.aol.com (imo-r17.mx.aol.com [152.163.225.71]) by tor-vs1.nbc.netcom.ca (8.9.1/8.9.1) with ESMTP id AAA17365 for <taob(a)risc.org>; Tue, 13 Jun 2000 00:30:37 -0400 (EDT) From: ScottUCE(a)aol.com Received: from ScottUCE(a)aol.com by imo-r17.mx.aol.com (mail_out_v27.10.) id f.42.6b6d5ee (16789); Tue, 13 Jun 2000 00:12:51 -0400 (EDT) Message-ID: <42.6b6d5ee.26770ec1(a)aol.com> Date: Tue, 13 Jun 2000 00:12:49 EDT Subject: Netapp F330 systems and parts available MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit To: undisclosed-recipients:; X-Mailer: AOL 5.0 for Windows sub 108 Dear Netapp user: We have a number of F330 systems available that can be configured to your requirements and priced VERY inexpensively. F330 parts are also available, CHEAP, for sale as add-ons, upgrades, spares and spares kits. All equipment is genuine Netapp, fully tested, and carries a six-month exchange warranty. Low-cost extended warranties are also available. Please contact me if we can be of any assistance. (If appropriate, would you please forward this message to individuals in your organization whom are responsible for your Netapp hardware decisions.) Sincerely, Scott Fischmann Union Computer Exchange, Inc. 6233 Idylwood Lane Minneapolis, Minnesota 55436 www.unioncomputer.com PHONE: 952 935 7282 FAX: 952 935 5056 Union Computer Exchange buys, sells, leases and maintains used Network Appliance hardware. You can save thousands of dollars on your next Netapp purchase.

2 1

Re: Help With Firmware Upgrades.
by Moshe Linzer 13 Jun '00

13 Jun '00

disk firmware is installed along with the ontap software, in the /etc/disk_fw dir. To upgrade, first upgrade the filer firmware, if necessary for this ontap release. Then upgrade ontap. when the new ontap starts up, it will notify you if there are disks that are downlevel on firmware. Then you issue the disk_fw_update command on the filer to update the disks. Moshe >From owner-toasters(a)mathworks.com Tue Jun 13 13:54:02 2000 >From: "Lobban, Robert W SSI-ISEP-3" <Robert.W.Lobban(a)is.shell.com> >To: "'toasters(a)mathworks.com'" <toasters(a)mathworks.com> >Subject: Help With Firmware Upgrades. >Date: Tue, 13 Jun 2000 10:30:42 +0200 >MIME-Version: 1.0 >Precedence: bulk > > > >I am looking for some help with Disk firmware upgrades. Specifically do the >updated .LOD files for Disk Firmware Upgrades come with the Filer Firmware >Upgrades or do they need to be downloaded from the now site? If they do >need downloaded from the now site, can you point me in the right direction >as I can't seem to find them. > >We also plan to upgrade the version of Ontap we are using and I presume that >I need to perform the Disk firmware updates first and then the Filer >Firmware upgrades before attempting the Ontap upgrade?. > >Any help would be appreciated as we are a fairly new Toaster site performing >our first complete upgrade. > >Regards >Robert Lobban > >Shell Services International Ltd, Northern Area Office >Robert.W.Lobban(a)IS.Shell.Com > ----------------------------------------------------------------------------- Moshe Linzer | On the Internet, Unix Systems Manager | National Semiconductor, Israel | nobody knows you're a moron. Phone: 972-9-970-2247 | Fax: 972-9-970-2001 | - Network Magazine Email: moshel(a)nsc.com | -----------------------------------------------------------------------------

1 0

Re: UNIX volume and root
by Moshe Linzer 13 Jun '00

13 Jun '00

The data on the filer is administered thru a Unix host mounted to the root of the volume. You can allow each admin root access to only his own volume. Moshe >From owner-toasters(a)mathworks.com Tue Jun 13 14:56:51 2000 >From: "Uros Lampret" <uros.lampret(a)ourspace.si> >To: <toasters(a)mathworks.com> >Subject: UNIX volume and root >Date: Tue, 13 Jun 2000 11:30:37 +0200 >MIME-Version: 1.0 >X-Priority: 3 >X-MSMail-Priority: Normal >X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 >Precedence: bulk > >Hi! > >Another question. >I have F740 with single CIFS volume. (I'm an NT person) >Now I'll have to add 2 UINIX volumes. >I'll substitute two UNIX servers with it. >I have some security considerations. The two UNIX servers were administrated by two admins. >Is it possible to have diferent root passwords for this two volumes? > >Uros Lampret >Our Space d.o.o. >Malnarjeva ulica 47 >1000 Ljubljana - Slovenia >tel. +386 1 2425 372 >fax +386 1 5000 959 >email: Uros.Lampret(a)ourspace.si >internet: www.ourspace.si ----------------------------------------------------------------------------- Moshe Linzer | On the Internet, Unix Systems Manager | National Semiconductor, Israel | nobody knows you're a moron. Phone: 972-9-970-2247 | Fax: 972-9-970-2001 | - Network Magazine Email: moshel(a)nsc.com | -----------------------------------------------------------------------------

1 0

Re: DLT backups capacity
by Moshe Linzer 13 Jun '00

13 Jun '00

Did you use the nrst0a device name, indicating compression? Moshe >From owner-toasters(a)mathworks.com Tue Jun 13 15:02:29 2000 >Date: Tue, 13 Jun 2000 11:28:13 +0200 >From: Krzysztof Miller <tytus(a)lucent.com> >X-Accept-Language: en,pdf >MIME-Version: 1.0 >To: toasters(a)mathworks.com >Subject: DLT backups capacity >Content-Transfer-Encoding: 7bit >Precedence: bulk > >Hi, > >I have faced interesting problem. When I backup my 740 >using "dump" or Veritas 3.2 with NDMP, I got max. 30GB >per DLT-IV tape with DLT7000 drive. >It is interesting , because "Compression" LED on tape drive >is "on" during backup. Have anybody had something similiar ? > >regards >-- > >Krzysztof > ----------------------------------------------------------------------------- Moshe Linzer | On the Internet, Unix Systems Manager | National Semiconductor, Israel | nobody knows you're a moron. Phone: 972-9-970-2247 | Fax: 972-9-970-2001 | - Network Magazine Email: moshel(a)nsc.com | -----------------------------------------------------------------------------

1 0

Re: Spares Kit
by Rune Bakken 13 Jun '00

13 Jun '00

Brian Tao <taob(a)risc.org> writes: > Still, it's nice having a fully functional Netapp head ready to > slide into a cabinet when needed, plugging in PCI cards as needed. Or even better, standardize your heads and just replace and boot. :-) >>>>>>>>>>>.rune -- Rune Bakken System Administrator Nextra, a Telenor Company

1 0

UNIX volume and root
by Uros Lampret 13 Jun '00

13 Jun '00

Hi! Another question. I have F740 with single CIFS volume. (I'm an NT person) Now I'll have to add 2 UINIX volumes. I'll substitute two UNIX servers with it. I have some security considerations. The two UNIX servers were administrated by two admins. Is it possible to have diferent root passwords for this two volumes? Uros Lampret Our Space d.o.o. Malnarjeva ulica 47 1000 Ljubljana - Slovenia tel. +386 1 2425 372 fax +386 1 5000 959 email: Uros.Lampret(a)ourspace.si internet: www.ourspace.si

1 0

Re: Data OnTap 5.3.5P2 and NDMP Backups
by Moshe Linzer 13 Jun '00

13 Jun '00

Thanks for confirming this, Greg. I have seen this problem with 5.3.5P2 and Budtool 4.6.1a. I had downgraded to 5.3.5 to continue backing up. Now I was informed that 5.3.5 is buggy, and have gone to 5.3.5R2P2. Initial testing indicates that NDMP is working with Budtool 4.6.1a. We'll know for sure after the weekend... Moshe >From: "Linn, Greg" <Greg.Linn(a)netapp.com> > >A NDMP-based backup problem has been identified in our Data OnTap 5.3.5P2 patch >release. > >During development of Data OnTap 5.3.6, a deadlock condition was discovered >which impacted the NDMP Java implementation. This condition typically manifests >itself as an NDMP connection failure during resource depletion conditions. We >believe it was first introduced 5.3.5P2. The problem has been resolved in >5.3.5R2P2 and in the forthcoming 5.3.6 release. > >If you are running 5.3.5P2, and are experiencing NDMP backup problems similar to >the connection failure described above, we recommend that you upgrade to >5.3.5R2P2. > >Greg Linn >Manager, NDMP Development >linn(a)netapp.com >408.822.3752 telephone >408.822.4457 fax > > ----------------------------------------------------------------------------- Moshe Linzer | Mastery of Unix offers real freedom. Unix Systems Manager | The price of freedom is always dear, but National Semiconductor, Israel | I'd rather pay for my freedom than live in Phone: 972-9-970-2247 | a bitmapped, pop-up-happy dungeon like NT. Fax: 972-9-970-2001 | Email: moshel(a)nsc.com | - Thomas Scoville, Unix Review -----------------------------------------------------------------------------

5 4

Help With Firmware Upgrades.
by Lobban, Robert W SSI-ISEP-3 13 Jun '00

13 Jun '00

I am looking for some help with Disk firmware upgrades. Specifically do the updated .LOD files for Disk Firmware Upgrades come with the Filer Firmware Upgrades or do they need to be downloaded from the now site? If they do need downloaded from the now site, can you point me in the right direction as I can't seem to find them. We also plan to upgrade the version of Ontap we are using and I presume that I need to perform the Disk firmware updates first and then the Filer Firmware upgrades before attempting the Ontap upgrade?. Any help would be appreciated as we are a fairly new Toaster site performing our first complete upgrade. Regards Robert Lobban Shell Services International Ltd, Northern Area Office Robert.W.Lobban(a)IS.Shell.Com

1 0

RE: ONTAP 5.3 is evil!! ;)
by Green, Arthur 13 Jun '00

13 Jun '00

> > Humm... I just noticed the ONTAP 5.3 System Administrator's Guide > that came with our new filer has 666 pages - should I be afraid? > What happens if you read it backwards? > :-o > > ----------- > Jay Orr > Systems Administrator > Fujitsu Nexion Inc. > St. Louis, MO > -- Arthur Green Internet Operations Manager Ocean Communications ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please email the system manager at Administrator(a)Ocean.ie This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **********************************************************************

1 0

← Newer
1
...
7
8
9
10
11
12
13
...
16
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters June 2000