toasters September 2015

toasters@lists.teaparty.net

34 participants
18 discussions

NetApp API authentication
by Edward Rolison 01 Mar '16

01 Mar '16

Having started to review some of our filer automation scripts, I'm starting to look in a bit more detail at the API. My first conclusion is - the perl SDK doesn't actually seem to do anything much - it seems to be a reimplementation of LWP and and XML Parser. Given I have LWP and XML::Twig installed, and am making API calls just fine, is there anything I'm missing here? Aside from that though - authentication types. I currently use ssh public-private key pairs, in a trusted account on a management station to enable 'doing stuff' with filers. It _looks_ like my only option with the API is to create a designated service account, and assign permissions... and then embed a username and password in a script somewhere. That just doesn't sit well with me - I like what ssh-agent will do in 'unlocking' key files, and I don't like embedding (potentially privileged) usernames and passwords ... anywhere. Does anyone have a better solution than a couple of designated API users (privileged and read only) with a file somewhere embedding their username and password? Does anyone have a better approach?

5 5

Analytics software for NetApp
by Rhodes, Richard L. 09 Oct '15

09 Oct '15

Hi Everyone, I'm not exactly sure what I'm asking for, but here goes . . . Does Netapp, or someone else, have analytics software that will crawl through CIFS shares and provide info on the files? Things like director sizes, storage hogs, size/number of file types, file/size per owner, etc. In other words, software to help understand and manage files in a shares. I didn't see anything on NetApp's web site like this. Thanks Rick ----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.

9 9

BMC access is denied.
by Brad Thompson 30 Sep '15

30 Sep '15

Hi all, Has anyone ever seen a BMC deny access when using the root user password? I'm trying to reconfigure this system and get the BMC working, but whenever I SSH to the BMC it won't let me login using the root user password. I get a permission denied message as if the password were wrong. Things I have tried: BMC setup (several times with different IP addresses) BMC reboot (several times) Changed the root user password several times using passwd. Takeover/Giveback Verified that the password is less than 16 characters. Tried "root", "naroot", and "Administrator" to log into the BMC, all failed the same way. Ran through secureadmin setup again. Tried to SSH to the BMC from different hosts, both Windows and Linux. I can SSH to the controller itself just fine using the root user / password. Anyone have any other ideas or see something that I'm missing? The only thing I haven't done yet is power cycle the controller, and that's just because I'm not anywhere near it. Thanks, Brad

6 12

Cifs share access log
by Jeff Cleverley 30 Sep '15

30 Sep '15

Greetings, Is there a way to have the system log what users connect via cifs AND also show what share they connect to? This is a 7.3.2 system. I've been trying various cifs options. I can see where it log who I am, and where I'm coming from, but not what I'm trying to access, or what share I mounted. Some mystery deletes have been occurring so we are trying to track down who may be accessing that particular share. Ideally I want to know when they connect and disconnect at a minimum so we have an idea when they were there. For now I just have a script checking cifs sessions and logging connections to the share to a file. I'd rather see it in messages or audit instead. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611

3 3

Vol Move Throttling in cDOT
by Alexander Griesser 28 Sep '15

28 Sep '15

Hey there, I did some research already but wasn't able to find what I was looking for, so I'm trying a quick shot here: Does anyone know if it's actually possible to throttle a vol move on cDOT? vol move start does not really list an option for that and once the move is running, there's also no vol move modify or anything like that. *> vol move start ? (volume move start) -vserver <vserver name> Vserver Name [-volume] <volume name> Volume Name [-destination-aggregate] <aggregate name> Destination Aggregate [[-cutover-window] {30..300}] Cutover time window in seconds (default: 45) [ -cutover-attempts {1..25} ] Number of Cutover attempts (default: 3) [ -cutover-action {abort_on_failure|defer_on_failure|force|wait} ] Action for Cutover (default: defer_on_failure) [ -perform-validation-only [true] ] Performs validation checks only (default: false) [ -foreground {true|false} ] Foreground Process [ -bypass-throttling {true|false} ] *Bypass Replication Engine Throttling [ -skip-delta-calculation {true|false} ] *Skip the Delta Calculation I'm currently migrating quite some big volumes from SAS to SATA across heads and the SATA aggregate is of course experiencing some lag now, so I'd love to throttle that a bit if possible. Any idea? Would a QoS policy on the souce volume help here or does NetApp internal stuff (like a vol move) override QoS quotas? Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

8 25

File delete rate
by Edward Rolison 26 Sep '15

26 Sep '15

Apologies if this seems a bit vague - I'm in need of a quick sanity check. Doing a qtree delete - it's taking 'a while'. This seems to be because it's deleting every file at a rate of 50-100 files per second, and there's about a million files in the qtree. Is that a 'reasonable' rate of deletion? (This is using an API based 'file-delete-file' operation, if that's relevant).

4 5

Clustered Ontap - Disk Encryption
by Jordan Slingerland 25 Sep '15

25 Sep '15

Quick and easy question I hope. Is there any reason I would not be able to add a shelf or two of encrypted disks to an existing 8040 with active aggregates and create an encrypted aggregate out the new disks only. (leaving the existing aggr unencrypted) --Jordan For the eighth consecutive year, Independent Health was named one of the best companies to work for in New York State. The Buffalo News also named Independent Health one of the Top Workplaces in Western New York for 2014 and 2015. Go to www.independenthealth.com to view careers and available positions. We are an Equal Opportunity Employer. CONFIDENTIALITY NOTICE: This e-mail and its attachments (collectively referred to as "e-mail") may contain confidential information that is privileged and protected from disclosure by Federal and State confidentiality laws, rules or regulations. This e-mail is intended for the designated addressee only. If you are not the designated addressee, you are notified that any disclosure, copying or distribution of this e-mail may be unlawful and may subject you to legal consequences. If you have received this e-mail in error, please contact me immediately by telephone at (716) 631 - 3001 and delete the e-mail from your computer immediately. Thank you for your attention.

3 5

blatant advertising by competing vendor to netapp contact address?
by Jan-Pieter Cornet 25 Sep '15

25 Sep '15

Anybody else receive a blatant advertising from a competing storage vendor (that doesn't really convert matter to energy), bashing the netapp 7mode to CDOT upgrade, sent to a contact address that is only known by ourselves and netapp? I was baffled by the audacity of it. (Apart from the car analogy in that ad - bad timing). -- Jan-Pieter Cornet <johnpc(a)xs4all.nl> "Any sufficiently advanced incompetence is indistinguishable from malice." - Grey's Law

4 3

Can't rename a vserver in 8.3 and aliasing vserver names?
by Rue, Randy 22 Sep '15

22 Sep '15

It's me again, Another bump we're still on is that due to 8.3's inability to rename a CIFS server and that we just 7MTT'd a home filer with ~3000 CIFS shares on it we instead aliased the new vserver to the old name "home" on our network. We removed the old vFiler from DNS and our AD, and removed all WINS entries. We added SPN's for the name "home" to the AD object for the new vserver. We already had a DNS alias for "homes" for the old vfiler to address some Mac compatibility issues. We added that CNAME in DNS as well, and an SPN for "homes" to the vserver's AD object. And we did take advantage of the 8.3 CLI tool for adding NetBIOS aliases, looks like a hack NA provided until they fix the run "cifs setup" tool without deleting the CIFS server. But we're still having a host of flakey access issues with Mac users who either can't connect to their home drives at all or get weirdness if they open Office documents and the like there. We're also having issues with Windows RDSH connections and User Profile mappings. Anybody else had fallout from the inability to rename a server? Any luck aliasing? Or should we just suck it up, recreate the CIFS server and recreate the shares? Hope to hear from you, Randy

2 1

NFS access to NTFS in 8.3?
by Rue, Randy 22 Sep '15

22 Sep '15

Guys, We've just migrated our 7=mode "home drives" vFiler using 7MTT to a new 8.3 cluster and so far the process has been less than blissful. One immediate hurdle is each division in our organization has mostly CIFS/Windows users and some NFS/Linux users, with some overlap between them (users that need NFS access to NTFS data and vice versa). This means each division has an NTFS volume, with a UNIX qtree within it. And both areas are served via both CIFS and NFS. CIFS access to both file systems seems to be fine. NFS access to the UNIX qtrees is fine. Where we're flailing is getting NFS access to the NTFS volumes. The exports mount just fine (LDAP is set up for the vserver, and client machines are in a nisNetgroup object in our AD). But NFS users connecting to their NTFS home folders get "permission denied," they can't even cd into them. Done some digging with and without NA support with little luck so far. User mapping is correctly configured so that unix user names are mapping to AD names. But the filer isn't getting as far as mapping an incoming NFS connections UID to a user name. NA support seems to think we need to configure an LDAP client for this. But my recollection of setting up our 7-mode system (five years ago) was that none of this was necessary, I think that joining the vfiler's CIFS server to our AD was enough for this to work (it is for Isilon, anyway). Now I'm on the phone with support (literally) while we flail through a bunch of old KB's saying we need to modify our AD schema (vanilla 2K8 RFC-2307) or install MS SFU on our DC's (never needed to before) or create a custom schema for the vserver to accept our obviously exotic RFC-2307. And they're not exactly clear on how we do that. To add to the fun, we're finding that many/most changes to the existing LDAP client settings breaks our so-far-working-OK Export Policies/Rules controlling access to the NFS exports. So. Has anyone set up a vserver with NFS connections to an NTFS volume? How do you map connections? Hope to hear from you very soon... Randy in Seattle

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters September 2015