toasters May 2018

toasters@lists.teaparty.net

17 participants
10 discussions

Creating a readonly user to monitor NetApp cluster via check_mk
by Sylvain Robitaille 20 Dec '18

20 Dec '18

Hello fellow toasters users ... We're in the process of deploying a pair of new CDOT filers and one of the things we'd like to setup with them is having check_mk (nagios and rrd, under the hood) monitor various attributes. We have a working instance at the moment using snmp to query the filers, but check_mk also provides a "plugin" that claims to work with the filer's web interface, so we'd like to examine that. To that end, I've setup a read-only user on the filer, that I intend will be able to access the web interface: security login create -vserver fc1-na -user-or-group-name nul_cmk \ -application http -authentication-method password -role readonly \ -comment "check_mk monitoring" The user shows up when I "show": fc1-na::> security login show -vserver fc1-na -user-or-group-name nul_cmk Vserver: fc1-na Second User/Group Authentication Acct Authentication Name Application Method Role Name Locked Method -------------- ----------- ------------- ---------------- ------ -------------- nul_cmk http password readonly no none The readonly role is unchanged from the OS default: fc1-na::> security login role show -vserver fc1-na -role readonly Role Command/ Access Vserver Name Directory Query Level ---------- ------------- --------- ----------------------------------- -------- fc1-na readonly DEFAULT readonly security none security login password all security login role show-user-capability all set all 5 entries were displayed. Trouble is that if I try to login to the web interface as that user, the browser stays "stuck" at the "Loading system details..." spinner widget. It's been there now for about two hours as I type this. Of course, check_mk's plugin logs a timeout while trying to access the interface. I fully suspect that I'm missing something, of course, but I'm afraid I haven't been able to find what that is. If someone out there has experience creating such a user for readonly access, a pointer to where I should be looking and/or documentation I should be reading would be hugely appreciated. (cli is preferred because it's easier to document what I've done that way, but if someone points me to resources in the web interface I'm sure I'll be able to find what I need at the cli.) -- ---------------------------------------------------------------------- Sylvain Robitaille syl(a)encs.concordia.ca Systems analyst / AITS Concordia University Faculty of Engineering and Computer Science Montreal, Quebec, Canada ----------------------------------------------------------------------

1 1

vol clone split
by Chris Hague 12 Oct '18

12 Oct '18

Hi Toasters, I have a number of volumes running from a common snapshot and would like to split them out. All these volumes are snapmirrored to our DR site. However, when I try to perform a vol clone split, it complains about an in-use snapshot. Reading further, it appears that the split will delete all snapshots, so doesn't like the snapmirror snap. What is the best way to split these volumes? Ideally without having to re-baseline \ lose my snapmirror destination volume \ snaps. ONTAP v9.1P2 Error below; Time Node Severity Event ------------------- ---------------- ------------- --------------------------- 8/30/2017 09:02:17 filer1 INFORMATIONAL mgmtgwd.jobmgr.jobcomplete.failure: Job "Clone Split" [id 6716] (Split vol1) completed unsuccessfully: Volume has locked snapshots (1). 8/30/2017 09:02:17 filer1 DEBUG wafl.config.req.error: Config request 'VV_CONFIG_REQ_CLONE_SPLIT_START' by WAFL for volume vol1 is not being processed because of the error: '387 - CR_VV_VOLUME_SNAPSHOTS'. 8/30/2017 09:02:17 filer1 NOTICE wafl.vv.clone.splitBusySnap: Volume 'vol1 has locked snapshots, not splitting. KR, Chris.

4 8

Mac OS X, SMB NTFS, and chmod/chown
by Ehrenwald, Ian 12 Jul '18

12 Jul '18

Hello I have users on Mac OS X that are unable to uncompress zip files in SMB shares which sit on top of NTFS security style volumes. I hadn't heard of this problem until I started migrating my users to new shares, previously they were all on UNIX security style volumes. If I am understanding my users correctly, they can reliably reproduce this problem this way: - In Finder, right click on a folder on a share, select Compress - Zip file is created successfully on share - Double click on Zip file that was created - Mac OS X archiver utility pops up an error box, "Unable to expand (zip name) into (target dir). (Error 13 - Permission denied). Examining the Zip file from the command line shows that it is a fully formed file, no corruption, etc. When I attempt to uncompress the Zip file using the command line on the same machine that created it, I can see that unzip is attempting to chmod the files and directories and getting a Permission Denied error back from the svm. Output: UserMachine:z TheUser$ unzip 3\:14\:18.zip Archive: 3:14:18.zip creating: 3:14:18/ chmod (directory attributes) error: Permission denied inflating: 3:14:18/FileNameXYZ.FC3.idml fchmod (file attributes) error: Permission denied creating: __MACOSX/ chmod (directory attributes) error: Permission denied creating: __MACOSX/3:14:18/ chmod (directory attributes) error: Permission denied inflating: __MACOSX/3:14:18/._FileNameXYZ.FC3.idml fchmod (file attributes) error: Permission denied inflating: 3:14:18/FileNameABC.ai fchmod (file attributes) error: Permission denied inflating: __MACOSX/3:14:18/._FileNameABC.ai fchmod (file attributes) error: Permission denied inflating: 3:14:18/FileNameLMN.png fchmod (file attributes) error: Permission denied inflating: __MACOSX/3:14:18/._FileNameLMN.png fchmod (file attributes) error: Permission denied inflating: 3:14:18/FileNameXYZ.FC3.indd fchmod (file attributes) error: Permission denied inflating: __MACOSX/3:14:18/._FileNameXYZ.FC3.indd fchmod (file attributes) error: Permission denied warning: cannot set permissions for __MACOSX/3:14:18/ Permission denied warning: set times/attribs failed for __MACOSX/3:14:18/ warning: cannot set permissions for __MACOSX/ Permission denied warning: set times/attribs failed for __MACOSX/ warning: cannot set permissions for 3:14:18/ Permission denied warning: set times/attribs failed for 3:14:18/ UserMachine:z TheUser$ This does make sense, since SMB/CIFS doesn't really understand UNIX ownership and attributes. Is the solution setting the security style of the volume to Mixed? Reading in detail about it at https://whyistheinternetbroken.wordpress.com/2017/01/24/mixed-perceptions-m… makes it seem like that's the right path to follow, but before I start down that trail I wanted to see what other people have done in this situation. Thanks for your help. Ian Ehrenwald Senior Infrastructure Engineer Hachette Book Group, Inc. 1.617.263.1948 / ian.ehrenwald(a)hbgusa.com This may contain confidential material. If you are not an intended recipient, please notify the sender, delete immediately, and understand that no disclosure or reliance on the information herein is permitted. Hachette Book Group may monitor email to and from our network.

7 14

Spare Disks
by Philbert Rupkins 30 May '18

30 May '18

Toasters, Inherited a few production 7-mode systems that are off maintenance, due to be retired and pretty low on spare disks. Migrations to new ONTAP 9 systems (A300's, yay!) are in progress but I'd like to purchase several spare disks for the 7-mode systems as a safety measure. Unfortunately, these disks are so old that NetApp no longer sells them. Is it generally safe to purchase refurbished (or new) NetApp disks from a 3rd party? Can anybody recommend a vendor? I already grabbed quotes from our NetApp account team for lager capacity disks that I'm told won't be a problem for existing RAID groups made up of smaller disks. Primary concern is keeping the data safe/available so, if purchasing 3rd party is a bad idea, we'll definitely to through NetApp. 3rd party options always come up in discussions and we've never gotten outside feedback so just curious if anybody has had good or bad experiences going 3rd party. Thank you. Phil

6 5

administrivia: GDPR
by Tom Yates 29 May '18

29 May '18

This list was originally run by majordomo, and then by mailman. No-one got on this list without asking to be there. You all get emailed every month telling you how to get off it, and on the odd occasions people can't work it out from there I remove them on request. I am not fannying about requiring everyone to re-opt in. The exception to this is people who are subscribed via exploders. I don't approve of exploders, since they give me a headache, but I don't actively hunt them down and remove them. They, and their GDPR implications if any, are the problem of those who run the exploders, not me. Me, my wife (who is co-sysadmin on the hosting box), and Kendall Libby (being co-list-admin) have access to the subscriber list. We won't be telling anyone who's on it. If anyone needs further clarification, email me. While I'm sending this out, I should mention that I have enabled automated message-wrapping from people whose ISPs have, in their infinite wisdom, decided to enable DMARC reject or quarantine policies. People from those domains who post will now get their message "wrapped" in a digest from the list itself. When replying to the senders of list messages, have care to check the sender's email address in case it turns out to be the whole list. I'd hoped DMARC would go away, but no such luck, so this seems least dreadful. ** If for some reason any of this turns out to be contentious, please start with me before discussing it on-list. ** -- Tom Yates - http://www.teaparty.net

1 0

Fwd: Spare Disks
by Sebastian P. Goetze 22 May '18

22 May '18

---------- Forwarded message --------- From: Scott Miller <scott.miller(a)dreamworks.com> Date: Tue, May 22, 2018, 06:49 Subject: Re: Spare Disks To: Sebastian P. Goetze <spgoetze(a)gmail.com> What size and form factor are you looking for? We’re doing s round of retirement and may have some. Also: try the guys at ZeroWait They deal in used and off-lease kit, And have a huge inventory. -skottie (via my thumbs) On May 21, 2018, at 9:40 PM, Sebastian P. Goetze <spgoetze(a)gmail.com> wrote: Hi Phil, hi Alex, Our Admin bought some pallets of old DS14 shelfs some time ago off of eBay for our labs. Like 80%+ of the disks we were able to use, but for some we had to go to maintenance mode and delete labels and stuff to do that... It was about 100€ for a shelf, if I remember correctly, so we didn't mind the 20% that were dead/unusable... A zeroed, unassigned disk should automatically be reformatted with the correct WAFL version, by the way. Up or down. So no worries there with disks from newer ONTAP versions... Sebastian NCI On Tue, May 22, 2018, 06:10 Alexander Griesser <AGriesser(a)anexia-it.com> wrote: > Hi Philbert, > > not sure where you're located but since you didn't mention it, I guess > you're based in the US. > I do not have any recommendations for third-party suppliers in the US, but > I've used some within Europe already for outdated filers of our customers > already and never had real issues with those refurbished or used hard > drives. > > JFTR, here are some suggestions for suppliers based in Germany: > https://www.servershop24.de/ > https://www.miller-anlagen.de/shop > https://www.fibrestore.de/ > > You might experience bad labels on the disks as well as firmware issues > which might need to be sorted out then; sometimes the disks are not zeroed > so when plugging them in, you will see some left over aggregates from the > previous filer they did belong to or the owner ids are still set; you can > work around every single issue that might come up here, as long as your > Ontap version is not too old on the outdated filers. > > Best, > > Alexander Griesser > Head of Systems Operations > > ANEXIA Internetdienstleistungs GmbH > > E-Mail: AGriesser(a)anexia-it.com > Web: http://www.anexia-it.com > > Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt > <https://maps.google.com/?q=Klagenfurt:+Feldkirchnerstra%C3%9Fe+140,+9020+Kl…> > Geschäftsführer: Alexander Windbichler > Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT > U63216601 > > -----Ursprüngliche Nachricht----- > Von: toasters-bounces(a)teaparty.net [mailto:toasters-bounces@teaparty.net] > Im Auftrag von Philbert Rupkins > Gesendet: Dienstag, 22. Mai 2018 05:58 > An: Toasters <toasters(a)teaparty.net> > Betreff: Spare Disks > > Toasters, > > Inherited a few production 7-mode systems that are off maintenance, > due to be retired and pretty low on spare disks. Migrations to new > ONTAP 9 systems (A300's, yay!) are in progress but I'd like to purchase > several spare disks for the 7-mode systems as a safety > measure. Unfortunately, these disks are so old that NetApp no longer > sells them. > > Is it generally safe to purchase refurbished (or new) NetApp disks > from a 3rd party? Can anybody recommend a vendor? > > I already grabbed quotes from our NetApp account team for lager capacity > disks that I'm told won't be a problem for existing RAID > groups made up of smaller disks. Primary concern is keeping the data > safe/available so, if purchasing 3rd party is a bad idea, we'll definitely > to through NetApp. > > 3rd party options always come up in discussions and we've never gotten > outside feedback so just curious if anybody has had good or bad experiences > going 3rd party. > > Thank you. > Phil > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > -- sent from my mobile, spellcheck might have messed up... _______________________________________________ Toasters mailing list Toasters(a)teaparty.net http://www.teaparty.net/mailman/listinfo/toasters -- sent from my mobile, spellcheck might have messed up...

1 0

Restrict VSC to a Subset of SVM's
by Philbert Rupkins 22 May '18

22 May '18

Hello Toasters, Our ontap clusters contain a number of SVM's. For purposes of this post I'll classify our SVM's into two broad categories: * SVM's that host storage resources for our ESXi clusters * SVM's that do NOT host storage resources for our ESXi clusters We initially direct connected VSC to the SVM's hosting VMware resources. As documented by NetApp, this resulted in VSC provisioning volumes (NFS datastores) then mounting them via indirect paths (our SVMs have multiple lifs). We dont want datastores mounted via indirect paths, nor do we want to deal with the other limitations associated with direct connecting VSC to SVM's. Now, AFAIK, the only option we're left with is connecting VSC to the cluster management LIF. The catch is we only want to allow VSC privileges to manage the SVM's hosting VMware resources. VSC should not have privileges to the non-Vmware related SVMs. Is there a way to connect VSC to the cluster management LIF while only allowing VSC the ability to provision storage to and manage a subset of SVM's on the cluster? We're currently running VSC 6.2.1 and ONTAP 9.2P2. -Phil

4 4

Re: moving CIFS shares
by Peter D. Gray 08 May '18

08 May '18

On Tue, May 08, 2018 at 01:33:47AM +0000, Fenn, Michael wrote: > How many total shares do you have? We've had good luck with a 1:1 ratio of volumes to shares since the platform limit is 1000 volumes/node on most recent hardware. With that model, you can shuffle volumes (and thus shares) between aggregates online with vol move, and you get easy access to goodies like QoS. We have about 1300 shares at the moment. More volumes is not manageable IMHO. For example, an altavault restricts snapmirror to 100 volumes. We already have more volumes that that. Regards, pdg

2 1

moving CIFS shares
by Peter D. Gray 08 May '18

08 May '18

Hi people, Background: we have 20 odd volumes for fileshares. We limit the size of the volumes to 10T. When a volume gets near full, we need to shuffle shares to new volumes or volumes with plenty of space. Does anybody have a magical solution for moving fileshares between volumes? With minimal but not necessarily zero downtime? Obvious solutions are: 1) Down share, copy share to new volume, up share 2) Down share, clone volume, up share on new volume, split volume, cleanup mess. I was wondering if anybody has seen a system to proxy the share and move it in the background. I have seen this work with NFS shares but not with CIFS. Any magicians out there? Regards, pdg

4 4

Support WWW site slow?
by Jeffrey Mohler 07 May '18

07 May '18

Anyone else have to wait 1-3 minutes after logging into support.netapp.com staring at a white screen before you can do anything? Asking for a friend. K-thanks.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters May 2018