toasters April 2015

toasters@lists.teaparty.net

45 participants
27 discussions

DFM LDAP auth/Linux
by Edward Rolison 14 Apr '15

14 Apr '15

I've been setting up a new instance of DFM on Linux, and have started configuring up DFM. I've finally figured out why it's not been working though - it's because the 'CN' for all our accounts contains a bracket. CN=Full Name (unixID) This leaves me in a bit of an irritating position. I can't change my account config across my active directory - at least not very easily. Can I do 'LDAP auth' via the local system somehow? I can log in to my DFM box as me, and when I add my user... it recognises the account. But it doesn't seem to allow a password auth (not unless I set a local account, which is a route that'll mean having to wrangle with security). Anyone else run into this problem or got a line of investigation? (I have a ticket open, but this feels like the sort of thing that's irritatingly difficult to 'fix' on the fly).

3 4

gfigueroa@berkcom.com
by Guadalupe Figueroa 10 Apr '15

10 Apr '15

gfigueroa(a)berkcom.com

1 0

FAS8040 network configuration in CDOT
by Sayla, Mustafa 09 Apr '15

09 Apr '15

We are looking to buy new FAS8040 and configure it with CDOT. I am looking for network recommendation with Cisco 6509 VSS. 8040 has four 10G ports per controller and I want to use all four ports to create an interface group with two VLAN, using VLAN tagging. I want 2 ports to go to one VSS switch and 2 ports to go to other VSS switch so I have switch redundancy also. I am not sure if it is doable since I am going to two different switches. Any recommendation is appreciated. Mustafa Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

5 4

Snapvault with system shutdown and rename
by Jeff Cleverley 08 Apr '15

08 Apr '15

Greetings, We're going to be splitting data from a 7-mode cluster (7.3.7). Some data is being SM to an 8.0.2 7-mode cluster with a new name. The remaining data and the original cluster will be moved to a new location and offline for a couple of days. My questions revolve around the snapvault snapshots and relationships. A couple of years ago we replaced the cluster heads and the backup relationships broke because schedule created a new snapshot which did not match the one the secondary was looking for. We had to re-baseline a lot of data. 1. Do I need to disable the SV schedules on both primary and secondary volumes for the cluster that will be offline for a couple of days, or will it be fine and pick up where it left off when it comes back up? 2. I know I'll need to modify the existing SV relationship with the data migrating to the new cluster. Since there are no SV schedules in place on the new cluster, there shouldn't be any issues with a new SV snapshot being created before I do a snapvault start -S with the new relationship to update it. It's 1am so I'm sure I may be missing something and wanted to check. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 1

DFM misbehaving - 'going sluggish' about 10m after restart
by Edward Rolison 02 Apr '15

02 Apr '15

We've a DFM (an older version) that's misbehaving. At startup we get 'Service did not reach 'started' state due to timeout'. It does actually start and we can use the web interface... but after a few minutes (10ish) it starts to get very sluggish. restarting clears it up, but only (very) temporarily. I've turned off PerfAdvisor, because I spotted some substantially large logs. Is anyone able to offer me suggestions of where else to look to troubleshoot? It looks like dbsrv10.exe is consuming all of a processor, trying to do 'something' but I have no idea what that might be. Perhaps a post restart 'tidy up'? I suspect this might be an 'open a case' situation, but I thought I'd seek some wisdom here too. Thanks, Ed.

4 4

Snapmirror relationships
by Jeff Cleverley 02 Apr '15

02 Apr '15

Greetings, We have to split a cluster and one shelf will go to one site, and the rest go to another site. The single shelf (DS4243, 2 TB SATA) comprising 2 aggregates and 11 volumes will get moved to a different NetApp. The shelf will end up on a system with new names and no aliases can be used. There are some variable moving parts so I need a sanity check. FilerA 7.3.7 - owner of the one shelf FilerB 8.1.2P4 - soon to be owner of the one shelf I've setup a snapmirror with a daily cron update that goes from FilerA to FilerB. This seems OK. If we can get the shelf owners to split the same day the other moves, I'm just going to move the shelf, change ownership, import the aggregate/volumes, create cifs shares, and update the snapvault relationship. If they insist on moving before that, I have to break the mirrors after a final sync, rename the current snapmirror destination volumes, update snapvault relationships and create cifs shares. This seems OK. Now the questions :-) 1. Are there any issues associated with this process with the OS differences or snapmirror not keeping filesystem security type, share, permissions, etc? 2. If I have to split the shelf later, I want to add it to FilerB and make that shelf the production shelf. This is a short term solution and the heads and shelves are not supported. Is there a graceful way to sync back to the DS4243 shelf? I don't want to disrupt the CIFS users very much. 3. Any other glaring issues that stand out? Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

6 7

cDOT security best practise reference?
by Martin 01 Apr '15

01 Apr '15

Hi, I've recently written a Netapp security policy for 7-mode Ontap. I used the TRs for reference: Data ONTAP Security Guidance - TR-3950 (November 2011) PCI-DSS Version 2.0 and Data ONTAP 8.1 TR-3996 (August 2012) Both of these are fairly old and not specific to cDOT. I've seen TR-4191 but that is specific to Windows File services: TR-4191 - Best Practices Guide for Clustered Data ONTAP 8.2.x Windows File Services Does anyone know of any best practise documents for cDOT whether Netapp or otherwise? Thanks Martin -- View this message in context: http://network-appliance-toasters.10978.n7.nabble.com/cDOT-security-best-pr… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

9 13

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters April 2015