toasters July 2005

toasters@lists.teaparty.net

58 participants
59 discussions

Majordomo results: Returned mail: Data format error
by Majordomo-owner＠GreatCircle.COM 12 Jul '05

12 Jul '05

>>>> The original message was received at Tue, 12 Jul 2005 10:55:13 +0200 The command "The" is invalid. Use the "help topics" command to see a list of valid commands. >>>> ----- The following addresses had permanent fatal errors ----- Stopping at signature separator. No more commands will be processed. Discarded 1 line(s) of unrecognized text. Valid commands processed: 0 0 succeeded, 0 stalled, and 0 failed. Ignoring part of type application/octet-stream.

1 0

Your message to Vision2020 awaits moderator approval
by vision2020-bounces＠moscow.com 12 Jul '05

12 Jul '05

Your mail to 'Vision2020' with the subject Returned mail: see transcript for details Is being held until the list moderator can review it for approval. The reason it is being held: Post by non-member to a members-only list Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: http://mailman.fsr.com/mailman/confirm/vision2020/5022d741a8023854e9ea58d35…

1 0

RE: CIFS/Samba Question
by Hill, Aaron 11 Jul '05

11 Jul '05

Is NetApp support of that Novell solution in the Technical Reference (#3343) definitive? I was told by an engineer that it works but isn't a supported or recommended solution. Something to do with Microsoft and licensing when referring to a domain controller. Aaron -----Original Message----- From: Luke Howard [mailto:lukeh@padl.com] Sent: Monday, 11 July 2005 1:32 AM To: bormann(a)bbtel.de Cc: appinenv(a)yahoo-inc.com; toasters(a)mathworks.com Subject: Re: CIFS/Samba Question >on the CeBIT 2005 I talked to an NetApp technican, who told me that the >samba DC is not supported and playing with it is wasting time - so for >me I stop playing. That might be the official line, but don't forget that ONTAP supports NetWare domain controllers, and the Novell code is just SAMBA on top of eDirectory. See: http://www.netapp.com/tech_library/3343.html Alternatively, you can use our XAD identity server, which supports Data ONTAP as well as Active Directory clients. More information at: http://www.padl.com/Products/XAD.html cheers, -- Luke -- ************** IMPORTANT MESSAGE ************** This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ***************************************************************

1 0

RE: CIFS/Samba Question
by Venkat Appineni 10 Jul '05

10 Jul '05

I believe Netapp doesn't support Samba DC's... -Venkat -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Scott Sherrill Sent: Wednesday, July 06, 2005 10:35 AM To: toasters(a)mathworks.com Subject: CIFS/Samba Question I have a 520 filer running 6.1.2 that I am trying to join to my samba domain (3.0.14). I run cifs setup and I get: <snip> CIFS supports three types of user authentication: 1. Windows Domain authentication. 2. Windows Workgroup authentication using the filer's user accounts. 3. /etc/passwd and/or NIS based authentication. What type of authentication will this filer use? [1]: The filer will use Windows Domain authentication. Enter the Windows Domain for the filer []:HPS CIFS - could not determine domain type. Assuming NT4 domain. CIFS - Connecting filer to the NT4 domain. CIFS - Primary Domain Controller must be active for installation. CIFS local server is shutting down... Now the truly sad thing is I did have this filer joined to my domain previously when I was running the beta version of Samba 3, but when I updated this summer, to the latest and greatest no luck. All help is appreciated. Thanks Scott

3 2

Unable to see folder permission in flexvol
by VR, Pramod (Research, Consultant) 10 Jul '05

10 Jul '05

Hi ! We upgraded ontap os from 6.4 to 7.0.1R1P3. And migrated data from old volumes to the new volumes created in aggregate. NOw from windows I am unable to see folder permissions in the new volume. In the old volume I am able to see the permission and everything is working fine in the old volume Can anybody help ? Filer is fAS960c Thanks Pramod

2 1

NFSv4 and access circumvention
by Brian Parent 08 Jul '05

08 Jul '05

If you're the main administrator for a Network Appliance filer, and you did *not* receive the following field alert from NetApp, please let me know. I'm trying to determine whether a wider publication effort is warranted. This is not a new bug, but it is a critical one. I discovered it one day (June 8, 2005) on accident, while experimenting with mounts and exports on one of my filers. I dug around in NetApp's NOW site, but didn't find any reference, partly because I didn't know what I was looking for, so I submitted a case. A bit more research revealed the relation to NFSv4, and then I was able to find the bug report on NOW. June 10 is when I suggested that before they close my case, they alert the rest of their customers. It took nearly 30 days for NetApp to finally post a field alert. I think that posting it was the right thing to do, but I'm not pleased that it took so long, and that they hadn't already posted it prior to my discovering it. ---------------------------------------------- From: "Nagabhushan, Dinesh" <Dinesh.Nagabhushan(a)netapp.com> Date: Wed, 6 Jul 2005 18:19:34 -0700 Subject: Field Alert #249: NFSv4 does not perform per operation access checks To: <bparent(a)ucsd.edu> Field Alert #249: NFSv4 does not perform per operation access checks SUMMARY: There is a defect (Bug 132072) in the NFSv4 implementation of Data ONTAP releases 6.4 through 6.5.3 that can allow access to exported filesystems in violation of the settings in the /etc/exports file. The unauthorized access would occur using NFSv4 only, which is enabled by default on systems licensed for NFS in Data ONTAP 6.4 and above. DETAILS: NFS provides the capability to restrict access to a set of specified client systems by using the access rw, ro, and root options in the /etc/exports file or when using the exportfs. The above referenced bug allows certain NFSv4 clients to bypass these restrictions and connect from a host that is not listed in the export options. Once the filesystem is mounted from an unauthorized host, the client has the capability to perform operations like read, write, or modify data within the filesystem PROVIDED THAT the standard filesystem permissions and ACLs allow for those operations to be performed. However, unless the export is configured to allow ONLY Kerberos authentication, the file permission lock-down does not help to mitigate the problem (because the user can choose the UID presented to the filer in the NFS request). WHO IS AFFECTED: You are affected if ALL of the following are true: * You do NOT have bugfix for bug 132072 (i.e. you have Network Appliance system(s) that are running Data ONTAP versions later than or equal to 6.4 but earlier than 6.5.4) , and * You have NFS clients in your environment that support NFSv4, and * NFSv4 is enabled on the above Network Appliance systems. This can be checked by typing "options nfs.v4.enable" at the command prompt. A value of "on" indicates that NFSv4 is enabled. WORK-AROUND: The workaround is to disable NFSv4 on all filers, NearStore systems, and ONTAP simulators. This can be accomplished by typing "options nfs.v4.enable off" at the system console prompt. In the event that you must use NFSv4 ,it is critical that Kerberos authentication be the only authentication system enabled. It is not sufficient to simply add krb5, krb5i, or krb5p to the export configuration; it is also necessary to ensure that sec=sys is NOT specified. SOLUTION: Network Appliance recommends that the workaround of disabling NFSv4 as stated above be used. Furthermore, if there is an opportunity to upgrade the systems please upgrade to Data ONTAP 6.5.4 or later. For any further assistance with upgrading and downloading software, please follow this link: http://now.netapp.com/NOW/cgi-bin/software ADDITIONAL INFORMATION: Online report for bug 132072 http://now.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=132072 ----------------------------------------------

1 0

Aggregate inodes
by Chris Thompson 08 Jul '05

08 Jul '05

What does the output of "df -A -i" mean for a non-traditional aggregate? For example: > df -A -i main Aggregate iused ifree %iused main 108 31034 0% Such aggregates always seem to have 30000+ "inodes", regardless of size, and to use 3 more each time a flexible volume is allocated inside the aggregate. -- Chris Thompson Email: cet1(a)cam.ac.uk

1 0

Hey, Toasters join the LakeChapalaWebBoard
by cgesp.pr＠correo.mae.es 08 Jul '05

08 Jul '05

1 0

huge space reservations for LUN snapshots, max RAID-DP
by Rob Winters 07 Jul '05

07 Jul '05

Imagine my surprise upon discovering that the space reservation for LUN snapshots is 120%, instead of 20% to 30% for a file system. I think I understand why. I wonder what the practical field experience is with trimming that figure down to something the guy who paid for the NetApp will accept. Specifically, if what is on the LUN is a relatively stable NTFS file system, is "blocks changed" similar enough to "files changed", or are there "catastrophic events" that go out and touch many disk blocks at once, thus mandating the huge space reservation? If you under-allocate the reservation, then all disk blocks are suddenly written to, can you configure the NetApp to release the snapshots and commit the writes, or must it look like a premature disk full condition? It seems like a much more economical path will be to ignore the SnapDrive approach, ignore snapshots, and just use Volume Shadow Copy on the windows servers hosting the filesystem. This would get my space reservation back down to 20% to 30%. Any thoughts? Oh, a bonus question: I had a NetApp PS guy recommend 28-disk RAID-DP over 14-disk RAID-DP, saying that there is absolutely no significant difference in re-build time or any other down side. Any thoughts on that? Thanks! /// Rob -- Rob Winters SAIC, NASA Headquarters ISEM Contract

3 3

(no subject)
by coati11＠gmx.net 07 Jul '05

07 Jul '05

Hi all, who has experience with the new sun java messaging server ? We want to centralize the mailbox store on a filer via a nfs mount ( It is supported since february from sun ) The mailbox store on the filer should be in a consistent state after a snapshot was created ? right ? thx in advance -- Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie! Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters July 2005