toasters July 2019

toasters@lists.teaparty.net

18 participants
8 discussions

Re: small query reg upgrade from 9.4p1 to 9.5p6 C-Mode
by Yuvaraja Shivaram 26 Jul '19

26 Jul '19

Hi all, i came accross one volume according upgrade advisor this TMP volume...and found this ariticle.. https://kb.netapp.com/app/answers/answer_view/a_id/1014402 so shall i make the export policy into readonly and make this volume has RW ? please any suggestion.. Regards Yuvaraja On Thu, Jul 25, 2019 at 6:41 PM Jovan Himal <uregmi111(a)gmail.com> wrote: > I can show you how this is done in webex. Just to vouch for my own so that > you would trust me, attaching my profile > > I am in US, east coast. > > We can hookup. > > Let me know > > On Thu, Jul 25, 2019, 6:34 AM Yuvaraja Shivaram <yuvaraja.kishan(a)gmail.com> > wrote: > >> Hi all, >> >> I have uploaded 9.5p6 software to the path /mroot/etc/software/ ... >> Manually(using system shell), in both the nodes >> >> so now would like to validate the version with below command... >> >> cluster image validate -version 9.5p6 >> it is getting failed since package is not there in the system >> repository... >> >> cluster image package show-repository (this commands also does not show >> anything...) >> >> so do I need to enter below command to push the 9.5p6 package into >> repository... >> >> cluster image package get -url mroot/etc/software/9.5p6_q_image.tgz >> >> Regards >> raj >> >> >> _______________________________________________ >> Toasters mailing list >> Toasters(a)teaparty.net >> http://www.teaparty.net/mailman/listinfo/toasters >> >

1 0

9.5 ssh last login output
by Mike Thompson 26 Jul '19

26 Jul '19

Ontap 9.5 added 'Last login' to the output of ssh connections, and optionally puts other things in there, like number of unsuccessful login attempts, etc. Any way to turn that off? It's playing hell with various things I have that scrape output from things I ssh into the filers. This stuff seems to be separate from MOTD/banner messages which are indeed configurable.

4 3

RPC Enumeration security finding
by Alexander Griesser 25 Jul '19

25 Jul '19

Hey there, One of our customers had a pentester onsite who found the following issues with the NetApp filers there. RPC Enumeration discovered By sending a DUMP request to the portmapper, it is possible to enumerate the RPC services running on the remote port. Using this information, an attacker can connect and bind to each service by sending an RPC request to the remote port and exploit the host. Note: Specific Target IPs are included in the "Detailed IP List." nGuard recommends downloading the latest security patches from Microsoft. Does anyone know what exactly the problem here is and if there are any tunables to change the behaviour on NetApp (Ontap9+) filers? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

3 3

small query reg upgrade from 9.4p1 to 9.5p6 C-Mode
by Yuvaraja Shivaram 25 Jul '19

25 Jul '19

Hi all, I have uploaded 9.5p6 software to the path /mroot/etc/software/ ... Manually(using system shell), in both the nodes so now would like to validate the version with below command... cluster image validate -version 9.5p6 it is getting failed since package is not there in the system repository... cluster image package show-repository (this commands also does not show anything...) so do I need to enter below command to push the 9.5p6 package into repository... cluster image package get -url mroot/etc/software/9.5p6_q_image.tgz Regards raj

4 3

Autosupport HTTPs receiver self hosted
by Alexander Griesser 18 Jul '19

18 Jul '19

Hey there, when using SMTP for autosupports, one can add additional e-mail addresses which will also receive the SMTP notifications and we're using this feature to collect autosupports in one of our support mailboxes. If we'd want to move away from SMTP, how could we do that in the future? When we switch to the https transport method, the autosupports most likely will only be posted to NetApp, I suppose. Am I overlooking something or is there really no way to specify an additional URL or something like this so that we can also receive these alerts then? Ideally, I'd either like to run the autosupport receiver locally on our infrastructue and forward the requests to NetApp then. This way, I could parse the requests and (if necessary) create tickets, etc. and archive them internally. Anyone ever worked on something like this or knows where I can find more information about that? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

2 5

Find Chassis PSU Part Number
by Alexander Griesser 16 Jul '19

16 Jul '19

Hey there, on one of my lab systems, a chassis PSU broke (no maintenance anymore). I'm trying to find out what part number I need to replace here, but didn't have any luck so far. ::> system controller fru show-manufacturing-info -instance Node: XXX System Serial Number: XXX Model Name: FAS8020 System ID: XXX Kernel Version: NetApp Release 9.1P12: Mon Mar 5 05:01:09 PST 2018 Firmware Release: 9.5 FRU Description: PSU2 FRU Sub-type: - FRU Serial Number: 1350ABA-1349-XXXX FRU Part Number: 114-00040 FRU Revision of Part Number: +A5 FRU Manufacturer: - FRU Manufacturing Date: - FRU Product Identifier: - When I use part finder, it lists three different compatible models, as it seems: SP-763-R5 SP-763-R6 X763-R6 And I'm not sure which one is the right one here or is any 1300W PSU working in this situation? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

2 2

Need to quickly downgrade from 9.5 to 8.2.4
by Carolyn Chambers 07 Jul '19

07 Jul '19

Hello, We are the middle of move planning and need to snapmirror some 7 Mode data. The gear we have for the destination is from the factory with 9.5. The usual netboot is throwing errors. Any suggestions? Thanks, Carolyn 972.578.2708

7 13

Migrating ONTAP 8.3 to 9.5
by Edward Rolison 01 Jul '19

01 Jul '19

I've got a new cluster in, running the latest and greatest ONTAP version. For reasons, the predecessor cluster is running a 'stable' platform, and hasn't been tracking the most recent updates. It's a snapmirrored cluster. I'm trying to figure out migration routes now. Is there any equivalent of 7-mode -> CDOT TDP replication, or am I going to have to bite the bullet and do an update on the source cluster to a newer version? And if so, because the snapmirror relationship that already exists, does that mean a 'stepped' approach of 8.3->9.1->9.4 (to 9.5 potentially) because that's what I'll need to do to preserve the snapmirror relationship with the replication partner? I'm not overly keen on pushing up a major version number on both our prod/DR environment but if the choice is that or 'rsync/xcp' then I'll probably go with that. I am just hoping there's a migration-assist option that means I don't have to do that, analogous to TDP from 7 mode.

4 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters July 2019