toasters September 2010

toasters@lists.teaparty.net

18 participants
14 discussions

What do you monitor
by Nicholas Bernstein 30 Sep '10

30 Sep '10

I had an interesting question posed by a student yesterday - "aside from interfaces being up, and volumes being online, what do you typically monitor?" Some of my initial thoughts were: - inodes being available - ifstat on multimode vifs to make sure interfaces are being used - io counts on luns/qtrees/vols/ - client side nfsstat or the equivalent for that protocol from the client side Anyway, I was trying to think of some of the "non-standard" things to monitor, and thought I'd put it out to the list and see what other people are typically doing. Cheers, Nick

3 2

Switching from single network interface to vif live?
by Phelps, Matthew 30 Sep '10

30 Sep '10

Has anyone switched from a single network interface to a vif on a running system? I'd like to avoid a reboot if possible. -- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps(a)cfa.harvard.edu, http://www.cfa.harvard.edu

2 1

Second interface up, routed on
by Kevin Sheen 23 Sep '10

23 Sep '10

Hi, We recently brought up a second interface on our 3070 cluster. I was double checking /vol0/etc/rc on both filers and the interfaces are in there for when we reboot. I also saw that routed was set to on. Should I disable routed? I took the Netapp Fundamentals class over 3 years ago and can't remember if they said it should be disabled. I don't really want our filers to advertise or become a router for the network. If I disable routed, will it require a reboot to take effect? thanks, Kevin

4 3

how do you put "ip.tcp" options into effect?
by Fred Grieco 16 Sep '10

16 Sep '10

Do I need to do anything for "ip.tcp.newreno.enable" and "ip.tcp.sack.enable" options changes to take effect? Is it automatic, or do i need to reboot? Thanks, Fred

1 0

Re: CIFS access question
by Page, Jeremy 11 Sep '10

11 Sep '10

If you are a Windows guy I think you can use the computer management MMC. It also is much nicer than the insanity you get with a "cifs sessions" on a busy filer. You'd think a bunch of Sun and BSD guys would understand why stuff like regex. Please use ^D to delete this post... Romeo Theriault <romeotheriault(a)gmail.com> wrote: > > Any hints appreciated. Hi John, If you want to configure local user accounts on the filer for your cifs users, when you run 'cifs setup' make sure you choose option 3, "Windows Workgroup Authentication". Then you can create a user account on the filer for that cifs user. useradmin group add cifsonly -c "This group is for non-admin CIFS access" -r none useradmin user add appuser -c "Non-administrative CIFS-only user" -g cifsonly Now, because of the way that the filers map windows id's to unix id's you still need to create an entry in the filers /etc/passwd file for the user you just created. Give it a unique uid and gid that are higher than the uid's and gid's that are currently in the /etc/passwd file and just give it a '/' as the home directory. Example: root:_K9..qPPDSr/2SCvwCSTSc:0:1::/: pcuser::65534:65534::/: nobody::65535:65535::/: appuser::65536:65536::/: In my case, due to permissions issues, I needed to map my cifs user to root to get around a permission's issue. You probably don't need it but here is the syntax I used to do so. *\appuser => root Now you should be able to create a share, assign the appuser privs to it and they should be able to get in. If not you can turn on cifs login tracing like so: options cifs.trace_login on Good luck! -- Romeo Theriault System Administrator Information Technology Services Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment.

1 0

CIFS access question
by John Stoffel 10 Sep '10

10 Sep '10

Hi all, I'm a Unix/NFS guy, but I've been asked to allow CIFS access from a Windows box to a volume currently mounted by NFS to a Solaris box. Not a problem, I'll just use our existing CIFS setup and setup a share for that volume. The problems are in terms of authentication. I'd like to restrict the CIFS share for /vol/appvol to JUST this single windows host (winbox) and user (appuser). But the user "appuser" is a purely local account on both the Windows and Unix systems. They're the same name luckily, but neither is on the NIS or AD domains. So I've setup the usermap.cfg on the Netapp (3140, OnTap 7.3.1.1) to look like this: winbox\#appuser <= appuser But I've also tried: winbox\appuser == appuser *\appuser == appuser *\appuser => appuser And I've setup the share with: rsh filer cifs share access appvol appuser Full Control but without any luck. It still asks for a password, but then refuses to let me in. Note that the filer doesn't really have a concept of this username, since it's purely local to the Unix and Window hosts. Do I need to add this username into NIS and/or AD to make things work? So I decided to try first by adding the 'appuser' account into my NIS domain, with a matching password to the host local Windows account. No luck so far. Looking at things using 'wcc -u appuser' on the filer, I get "Mapped user not found" even though I can now see that userin NIS on other unix clients. The funky thing is that I can see with 'cifs sessions' that there is a CIFS connection from the Windows box to the filer, but it says: x.y.z.2(WINBOX) is connected, but has no users. so something is working, but not the authentication. I see in the messages file on the netapp the following: Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceIP:info]: AUTH: Login attempt by user appuser of domain WINBOX from client machine x.y.z.2 (WINBOX). Fri Sep 10 10:34:01 EDT [auth.dc.trace.DCConnection.statusMsg:info]: AUTH: Trace DC- attempting authentication with domain controller \\MARL-DC. Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginRejected:info]: AUTH: Login attempt by user rejected by the domain controller with error 0xc0000064: D C indicates user is not from a trusted domain. Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceMsg:info]: AUTH: login from x.y.z.2 rejected because guest account not set. Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceMsg:info]: AUTH: Delaying the response by 5 seconds due to continuous failed login attempts by us er appuser of domain WINBOX from client machine x.y.z.2. So maybe I need to add in a guest user? But I don't want a general guest user at all, I really want a very limited share setup for just two hosts and one username. Any hints appreciated. Thanks, John John Stoffel - Senior Staff Systems Administrator - System LSI Group Toshiba America Electronic Components, Inc. - http://www.toshiba.com/taec john.stoffel(a)taec.toshiba.com - 508-486-1087

2 1

RE: CIFS access question
by John Stoffel 10 Sep '10

10 Sep '10

>>>>> "steve" == steve klise <sklise(a)hotmail.com> writes: steve> Can the user \\filer\appshare and see the share? No, it keeps asking for a username/password. steve> If not, that would be a problem, and the share is not setup, or steve> visible. I can browse \\filer from another client (Vista) and see the share (one of a couple on this filer) but I cannot access it, which is ok from that client. Hmm.. when I try to map the \\filer\appvol to my laptop, using the appuser account and password, it doesn't let me on. Which is ok, but ideally should be allowed. Esp since I now have: *\appuser => appuser in the usermap.cfg file, and the password on the Unix side is known. steve> You need to create a local user on the filer with the same steve> password, or add the domain or local user to the NTFS security, steve> and I would add the computerobject account. I don't have any privs to add users to the domain, nor do we want to add this user to the domain, it's a purely local account to the Windows box. Since I'm a unix admin, it's easy enough for me to add the Unix account to NIS for testing, though ideally it would be host local as well. Adding it to the Netapp is possible as well. steve> Usually I do this via the MMC, but that is maybe not an option steve> for you. MMC? I could use the fileradmin web page stuff... Thanks for the quick reply, John John Stoffel - Senior Staff Systems Administrator - System LSI Group Toshiba America Electronic Components, Inc. - http://www.toshiba.com/taec john.stoffel(a)taec.toshiba.com - 508-486-1087 >> Date: Fri, 10 Sep 2010 10:39:00 -0400 >> From: john.stoffel(a)taec.toshiba.com >> To: toasters(a)mathworks.com >> Subject: CIFS access question >> >> >> Hi all, >> >> I'm a Unix/NFS guy, but I've been asked to allow CIFS access from a >> Windows box to a volume currently mounted by NFS to a Solaris box. >> Not a problem, I'll just use our existing CIFS setup and setup a share >> for that volume. >> >> The problems are in terms of authentication. I'd like to restrict the >> CIFS share for /vol/appvol to JUST this single windows host (winbox) >> and user (appuser). >> >> But the user "appuser" is a purely local account on both the Windows >> and Unix systems. They're the same name luckily, but neither is on >> the NIS or AD domains. >> >> So I've setup the usermap.cfg on the Netapp (3140, OnTap 7.3.1.1) to >> look like this: >> >> winbox\#appuser <= appuser >> >> But I've also tried: >> >> winbox\appuser == appuser >> *\appuser == appuser >> *\appuser => appuser >> >> >> And I've setup the share with: >> >> rsh filer cifs share access appvol appuser Full Control >> >> but without any luck. It still asks for a password, but then refuses >> to let me in. Note that the filer doesn't really have a concept of >> this username, since it's purely local to the Unix and Window hosts. >> Do I need to add this username into NIS and/or AD to make things work? >> >> So I decided to try first by adding the 'appuser' account into my NIS >> domain, with a matching password to the host local Windows account. >> No luck so far. Looking at things using 'wcc -u appuser' on the >> filer, I get "Mapped user not found" even though I can now see that >> userin NIS on other unix clients. >> >> The funky thing is that I can see with 'cifs sessions' that there is a >> CIFS connection from the Windows box to the filer, but it says: >> >> x.y.z.2(WINBOX) is connected, but has no users. >> >> so something is working, but not the authentication. I see in the >> messages file on the netapp the following: >> >> Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceIP:info]: AUTH: Login attempt by user appuser of domain WINBOX from client machine x.y.z.2 (WINBOX). >> Fri Sep 10 10:34:01 EDT [auth.dc.trace.DCConnection.statusMsg:info]: AUTH: Trace >> DC- attempting authentication with domain controller \\MARL-DC. >> Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginRejected:info]: AUTH: >> Login attempt by user rejected by the domain controller with error 0xc0000064: D >> C indicates user is not from a trusted domain. >> Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceMsg:info]: AUTH: >> login from x.y.z.2 rejected because guest account not set. >> Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceMsg:info]: AUTH: >> Delaying the response by 5 seconds due to continuous failed login attempts by us >> er appuser of domain WINBOX from client machine x.y.z.2. >> >> >> So maybe I need to add in a guest user? But I don't want a general >> guest user at all, I really want a very limited share setup for just >> two hosts and one username. >> >> Any hints appreciated. >> >> Thanks, >> John >> John Stoffel - Senior Staff Systems Administrator - System LSI Group >> Toshiba America Electronic Components, Inc. - http://www.toshiba.com/taec >> john.stoffel(a)taec.toshiba.com - 508-486-1087 steve> <html> steve> <head> steve> <style> </style> steve> </head> steve> <body class='hmmessage'> steve> Can the user <A href="file://\\filer\appshare">\\filer\appshare</A> and see the share? steve>   steve> If not, that would be a problem, and the share is not setup, or visible. steve>   steve> You need to create a local user on the filer with the same password, or add the domain or local user to the NTFS security, and I would add the computerobject account.  steve>   steve> Usually I do this via the MMC, but that is maybe not an option for you.    steve> > Date: Fri, 10 Sep 2010 10:39:00 -0400 > From: john.stoffel(a)taec.toshiba.com > To: toasters(a)mathworks.com > Subject: CIFS access question > > > Hi all, > > I'm a Unix/NFS guy, but I've been asked to allow CIFS access from a > Windows box to a volume currently mounted by NFS to a Solaris box. > Not a problem, I'll just use our existing CIFS setup and setup a share > for that volume. > > The problems are in terms of authentication. I'd like to restrict the > CIFS share for /vol/appvol to JUST this single windows host (winbox) > and user (appuser). > > But the user "appuser" is a purely local account on both the Windows > and Unix systems. They're the same name luckily, but neither is on > the NIS or AD domains. > > So I've setup the usermap.cfg on the Netapp (3140, OnTap 7.3.1.1) to > look like this: > > winbox\#appuser <= appuser > > But I've also tried: > > winbox\appuser == appuser > *\appuser == appuser > *\appuser => appuser > > > And I've setup the share with: > > rsh filer cifs share access appvol appuser Full Control > > but without any luck. It still asks for a password, but then refuses > to let me in. Note that the filer doesn't really have a concept of > this username, since it's purely local to the Unix and Window hosts. > Do I need to add this username into NIS and/or AD to make things work? > > So I decided to try first by adding the 'appuser' account into my NIS > domain, with a matching password to the host local Windows account. > No luck so far. Looking at things using 'wcc -u appuser' on the > filer, I get "Mapped user not found" even though I can now see that > userin NIS on other unix clients. > > The funky thing is that I can see with 'cifs sessions' that there is a<BR! >> CI F S connection from the Windows box to the filer, but it says: > > x.y.z.2(WINBOX) is connected, but has no users. > > so something is working, but not the authentication. I see in the > messages file on the netapp the following: > > Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceIP:info]: AUTH: Login attempt by user appuser of domain WINBOX from client machine x.y.z.2 (WINBOX). > Fri Sep 10 10:34:01 EDT [auth.dc.trace.DCConnection.statusMsg:info]: AUTH: Trace > DC- attempting authentication with domain controller \\MARL-DC. > Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginRejected:info]: AUTH: > Login attempt by user rejected by the domain controller with error 0xc0000064: D > C indicates user is not from a trusted domain. > Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceMsg:info]: AUTH: > login from x.y.z.2 rejected because guest account not set. > Fri Sep 10 10:34:01 EDT [auth.trace.authenticateUser.loginTraceMsg:info]: AUTH: > Delaying the response by 5 seconds due to continuous failed login attempts by us > er appuser of domain WINBOX from client machine x.y.z.2. > > > So maybe I need to add in a guest user? But I don't want a general > guest user at all, I really want a very limited share setup for just > two hosts and one username. > > Any hints appreciated. > > Thanks, > John > John Stoffel - Senior Staff Systems Administrator - System LSI Group > Toshiba America Electronic Components, Inc. - http://www.toshiba.com/taec > john.stoffel(a)taec.toshiba.com - 508-486-1087 </body> steve> </html>

1 0

Netapp with ZenDesktop or View 4.5
by steve klise 08 Sep '10

08 Sep '10

Just wondering what folks are doing for making a decesion for View 4.5 (yeah, I know it just came out) or zendesktop. I was at VMWorld and I am drinking the View cool-aid. I know in the past vdi could deploy thousands of vdi machines with flexclone, thin provisioning, etc on Netapps. We have a 6040 with a PAM card and we use ESX 4.x over FC on it (DOT7.3.2x). No flexclone license on it,but I will on a 6080 (DOT 7.3.2.x) with a PAMII card. Couple questions. Are the dedupe numbers the same for both solutions (VM vs Citrix) ? Is the solution a moot point, or would one be better from a performance, and or dedupe savings perspective? Most likely we will have the storage between 2 HA heads, so we try to design redundancy as much as possible. I was hoping to serve up 2000 users on a SAS fully populated shelf on a 6040 and another shelf on a 6080 for 2k users each. These are just rough numbers and I will read the best practices for each solution. Just looking for any feedback. -- View this message in context: http://old.nabble.com/Netapp-with-ZenDesktop-or-View-4.5-tp29643248p2964324… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

1 0

Netapp with ZenDesktop or View 4.5
by steve klise 08 Sep '10

08 Sep '10

Just wondering what folks are doing for making a decesion for View 4.5 (yeah, I know it just came out) or zendesktop. I was at VMWorld and I am drinking the View cool-aid. I know in the past vdi could deploy thousands of vdi machines with flexclone, thin provisioning, etc on Netapps. We have a 6040 with a PAM card and we use ESX 4.x over FC on it (DOT7.3.2x). No flexclone license on it,but I will on a 6080 (DOT 7.3.2.x) with a PAMII card. Couple questions. Are the dedupe numbers the same for both solutions (VM vs Citrix) ? Is the solution a moot point, or would one be better from a performance, and or dedupe savings perspective? Most likely we will have the storage between 2 HA heads, so we try to design redundancy as much as possible. I was hoping to serve up 2000 users on a SAS fully populated shelf on a 6040 and another shelf on a 6080 for 2k users each. These are just rough numbers and I will read the best practices for each solution. Just looking for any feedback. -- View this message in context: http://old.nabble.com/Netapp-with-ZenDesktop-or-View-4.5-tp29643247p2964324… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

1 0

Netapp with ZenDesktop or View 4.5
by steve klise 08 Sep '10

08 Sep '10

Just wondering what folks are doing for making a decesion for View 4.5 (yeah, I know it just came out) or zendesktop. I was at VMWorld and I am drinking the View cool-aid. I know in the past vdi could deploy thousands of vdi machines with flexclone, thin provisioning, etc on Netapps. We have a 6040 with a PAM card and we use ESX 4.x over FC on it (DOT7.3.2x). No flexclone license on it,but I will on a 6080 (DOT 7.3.2.x) with a PAMII card. Couple questions. Are the dedupe numbers the same for both solutions (VM vs Citrix) ? Is the solution a moot point, or would one be better from a performance, and or dedupe savings perspective? Most likely we will have the storage between 2 HA heads, so we try to design redundancy as much as possible. I was hoping to serve up 2000 users on a SAS fully populated shelf on a 6040 and another shelf on a 6080 for 2k users each. These are just rough numbers and I will read the best practices for each solution. Just looking for any feedback. -- View this message in context: http://old.nabble.com/Netapp-with-ZenDesktop-or-View-4.5-tp29643246p2964324… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters September 2010