toasters September 2018

toasters@lists.teaparty.net

10 participants
7 discussions

Creating a readonly user to monitor NetApp cluster via check_mk
by Sylvain Robitaille 20 Dec '18

20 Dec '18

Hello fellow toasters users ... We're in the process of deploying a pair of new CDOT filers and one of the things we'd like to setup with them is having check_mk (nagios and rrd, under the hood) monitor various attributes. We have a working instance at the moment using snmp to query the filers, but check_mk also provides a "plugin" that claims to work with the filer's web interface, so we'd like to examine that. To that end, I've setup a read-only user on the filer, that I intend will be able to access the web interface: security login create -vserver fc1-na -user-or-group-name nul_cmk \ -application http -authentication-method password -role readonly \ -comment "check_mk monitoring" The user shows up when I "show": fc1-na::> security login show -vserver fc1-na -user-or-group-name nul_cmk Vserver: fc1-na Second User/Group Authentication Acct Authentication Name Application Method Role Name Locked Method -------------- ----------- ------------- ---------------- ------ -------------- nul_cmk http password readonly no none The readonly role is unchanged from the OS default: fc1-na::> security login role show -vserver fc1-na -role readonly Role Command/ Access Vserver Name Directory Query Level ---------- ------------- --------- ----------------------------------- -------- fc1-na readonly DEFAULT readonly security none security login password all security login role show-user-capability all set all 5 entries were displayed. Trouble is that if I try to login to the web interface as that user, the browser stays "stuck" at the "Loading system details..." spinner widget. It's been there now for about two hours as I type this. Of course, check_mk's plugin logs a timeout while trying to access the interface. I fully suspect that I'm missing something, of course, but I'm afraid I haven't been able to find what that is. If someone out there has experience creating such a user for readonly access, a pointer to where I should be looking and/or documentation I should be reading would be hugely appreciated. (cli is preferred because it's easier to document what I've done that way, but if someone points me to resources in the web interface I'm sure I'll be able to find what I need at the cli.) -- ---------------------------------------------------------------------- Sylvain Robitaille syl(a)encs.concordia.ca Systems analyst / AITS Concordia University Faculty of Engineering and Computer Science Montreal, Quebec, Canada ----------------------------------------------------------------------

1 1

vol clone split
by Chris Hague 12 Oct '18

12 Oct '18

Hi Toasters, I have a number of volumes running from a common snapshot and would like to split them out. All these volumes are snapmirrored to our DR site. However, when I try to perform a vol clone split, it complains about an in-use snapshot. Reading further, it appears that the split will delete all snapshots, so doesn't like the snapmirror snap. What is the best way to split these volumes? Ideally without having to re-baseline \ lose my snapmirror destination volume \ snaps. ONTAP v9.1P2 Error below; Time Node Severity Event ------------------- ---------------- ------------- --------------------------- 8/30/2017 09:02:17 filer1 INFORMATIONAL mgmtgwd.jobmgr.jobcomplete.failure: Job "Clone Split" [id 6716] (Split vol1) completed unsuccessfully: Volume has locked snapshots (1). 8/30/2017 09:02:17 filer1 DEBUG wafl.config.req.error: Config request 'VV_CONFIG_REQ_CLONE_SPLIT_START' by WAFL for volume vol1 is not being processed because of the error: '387 - CR_VV_VOLUME_SNAPSHOTS'. 8/30/2017 09:02:17 filer1 NOTICE wafl.vv.clone.splitBusySnap: Volume 'vol1 has locked snapshots, not splitting. KR, Chris.

4 8

small clarification on adding NTP servers to netapp 7 mode and c-mode
by Yuvaraja Shivaram 27 Sep '18

27 Sep '18

Hi all, Can we add new NTP servers to 7 mode and C-mode on Fly without disrupting any protocols... infact NTP servers are being decommissioned in future, so wanted to add the new NTP servers before decommissioned...so what is the best practise to add the same.... is there any disconnects happens to cifs protocols...? Regards Yuvaraja

2 1

Copying NTFS Data with Orphaned SIDs
by Stephen Stocke 12 Sep '18

12 Sep '18

Hi We’re migrating some data from Windows file servers to CIFS shares on a 9.1p13 cluster (NTFS security style on the vols). We’re getting errors on some files and folders using Robocopy and the common thread seems to be objects with orphaned SIDs for the owner or DACL entries. We’ve tried other tools with the same results. Robocopy to another Windows file share works fine. Has anyone else seen this behaviour? We’re assuming that the CIFS server is stopping the copy because it can’t resolve the SID. Is there any way to control that behaviour and just wrtie the DACL with the unresolved SID? Thanks Steve

3 3

CIFS Access Based Enumeration for Volume in Namespace
by Vanderyt, Jeff 10 Sep '18

10 Sep '18

Replying to an old post; I am just now hitting the same issue. Steve - did you ever find a solution to this issue? (ABE not working on junction paths). 9.1P14 here. -jeff ---------------------------------------------------------------------- Message: 1 Date: Thu, 7 Dec 2017 12:50:05 +0000 From: Stephen Stocke <scstocke(a)gmail.com> To: "<Toasters(a)teaparty.net>" <toasters(a)teaparty.net> Subject: CIFS Access Based Enumeration for Volume in Namespace Message-ID: <CAEGA2qbHgFzNEvKpLa688Syt-197quPEJNz941eYvar3PHKgZg(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hello I have a need to use access-based enumeration within a CIFS share that contains volumes mounted as junction paths within the share volume. ABE is working for normal files and folders but volumes mounted as junction paths are visible even if the user does not have permissions to see the folder representing the junction. Has anyone done this? Or can anyone point to any documentation on whether this is possible? ONTAP 9.1p5, ntfs security style on all volumes. Many thanks Steve

2 1

9.4 oddness
by Peter D. Gray 10 Sep '18

10 Sep '18

Hi toasters We recently upgraded all our netapps to 9.4, from 9.3 Now we see something. The volumes we previously flagged as unprotected under SVM-DR are now displaying as "protected". The only volumes which show as "unprotected" are the root volumes. In reality, the volumes we had previously flagged as "unprotected" still seem to be unprotected, that is they are not being snapmirrored to the destination SVM. This is causing a few issues with our monitoring of our protection status. Has anybody seen this or know something about it? Also, the "volume show" man page does not mention the protection flag, but does display it when asked. I do not know if the man page on 9.3 documented the flag or not. I assume it did else I would not know about it. Regards, pdg Peter Gray Ph (direct): +61 2 4221 3770 Information Management & Technology Services Ph (switch): +61 2 4221 3555 University of Wollongong Fax: +61 2 4229 1958 Wollongong NSW 2522 Email: pdg(a)uow.edu.au Australia URL: http://pdg.uow.edu.au

1 0

Ocum alerts showing as Localhost instead of Ocum Name
by Yuvaraja Shivaram 05 Sep '18

05 Sep '18

Hi All, i have configured new alert setup through OCUM 7.2p1, we are receiving alerts but it is not showing OCUM host name , instead it shows as Local host whenever we receive alerts to our email id's, is anyone aware how to resolve this issue.. here in below statement itstead of localhost , it should reflect OCUM name(oncommand unified manager) "An incident was generated by localhost that requires your attention" Regards Yuvaraj

4 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters September 2018