toasters

toasters@lists.teaparty.net

13531 discussions

Incremental NDMP backup after volume migration.
by Roger Stansfield 20 Sep '05

20 Sep '05

I asked the following on the NOW Backup Community Forum but I haven't yet had any reply. Can anyone help, please? I have upgraded to ONTAP 7.0.1R1. I shall use ndmpcopy to copy vol2 to a new vol2flex- there's enough space. I shall remame vol2 to vol2trad and vol2flex to vol2. vol2 contains files accessed by CIFS. We run nightly ndmp incremental backups (Netbackup, Windows). 1. Will the backup after the volume renaming be as normal (because most file modification times are still prior to the last incremental) or will we get a backup of everything (because some archive status bit shows none of the files have been previously backed up)? 2. To migrate, I may, in the event, do a level 0 ndmpcopy on a live system followed by a level 1 ndmpcopy with the volume restricted. Does this make a difference? 3. Later, I shall handle vol1 which has files accessed by both NFS and CIFS. Will the situation be different on this volume? 4. If a "level 0" backup is going to be produced, is there some way of avoiding this or are there good reasons why we should want to get a full backup? -- > Roger Stansfield, > Rowett Research Institute, Bucksburn, Aberdeen, AB21 9SB, Scotland, U.K. > Telephone: 01224 716677. Fax: 01224 715349. > mailto:R.Stansfield@rri.sari.ac.uk http://www.rowett.ac.uk/

1 0

RE: Windows Explorer directory size discrepancy with home directo ry.
by Kimminau_Eric＠emc.com 19 Sep '05

19 Sep '05

You are seeing user quotas, not share/export/qtree quotas. You need a qtree quota to limit the qtree to 2GB. User quotas define how much of a system/export/share/qtree quota is available per user. The advantage of using a qtree over a directory is that quotas can be set on a qtree and oplocks can be enabled or disabled dynamically on each qtree. For reference: http://ecserv1.uwaterloo.ca/netapp/man/man1/na_quota.1.html http://teaparty.mathworks.com/toasters/0309.html http://teaparty.mathworks.com/toasters/2692.html http://www.mewburn.net/luke/src/quotarep # quotarep -- # parse the output of a NetApp's "quota report" and highlight # which entries may or do exceed their maximum. # (default is to highlight entries within 10%) -- ---------1---------2---------3---------4---------5---------6---------7 Eric Kimminau Email: Kimminau_Eric(a)emc.com Senior Corp. Sales Engineer Cell: 248.766.9921 Rainfinity, an EMC Company Office: 248.393.8037 www.rainfinity.com Optimizing Networked Storage ---------1---------2---------3---------4---------5---------6---------7 Tech support US: 1-800-479-9880 rssupport(a)rainfinity.com KnowledgeBase: http://www.rainfinity.com/private/customer/ > -----Original Message----- > From: owner-toasters(a)mathworks.com > [mailto:owner-toasters@mathworks.com] On Behalf Of Maglinger, Paul > Sent: Monday, September 19, 2005 5:12 PM > To: NetApps list server > Subject: Windows Explorer directory size discrepancy with > home directory. > > Running a 740 filer with Ontap 6.4.5. I have users that are > mapped to their home directories on the filer. We have 2 GB > quotas on the home directories. When one of our users clicks > on her mapped drive, it shows that 12.8MB are used and 1.98GB > are free in the Windows Explorer pane. > When I check it as another user on another system, it says > that 4K is used and 1.99GB is free in the pane. If I > right-click on the folder in the home directory and bring up > the properties of the folder, it shows that there is 1.51GB > of data in there. What's causing the discrepancy? > > > > Paul Maglinger, A+, CA, CCA, CET, MCSE > > Systems Administrator > Shoe Carnival Inc. > (812)867-4674 > pmaglinger(a)scvl.com > > > ________________________________ > > > >

1 0

Windows Explorer directory size discrepancy with home directory.
by Maglinger, Paul 19 Sep '05

19 Sep '05

Running a 740 filer with Ontap 6.4.5. I have users that are mapped to their home directories on the filer. We have 2 GB quotas on the home directories. When one of our users clicks on her mapped drive, it shows that 12.8MB are used and 1.98GB are free in the Windows Explorer pane. When I check it as another user on another system, it says that 4K is used and 1.99GB is free in the pane. If I right-click on the folder in the home directory and bring up the properties of the folder, it shows that there is 1.51GB of data in there. What's causing the discrepancy? Paul Maglinger, A+, CA, CCA, CET, MCSE Systems Administrator Shoe Carnival Inc. (812)867-4674 pmaglinger(a)scvl.com ________________________________

1 0

Update Information - Verification Required
by Wells Fargo Online Banking 19 Sep '05

19 Sep '05

1 0

Unified Accounts
by Ryan Kather 19 Sep '05

19 Sep '05

Greetings, I would like some input into how others here are doing multiplatform account management with their NetApp devices. I have an idea of how I would like to proceed, so if anyone would like to sanity check my thoughts and provide some insight I'd greatly appreciate it. I am looking for a way to unify our authentication services at my employer. Presently we have clients authenticating via Windows PDCs, NetWare eDirectory (Novell Client), and UNIX PASSWD file. In evaluating Novell's new Open Enterprise Server line, I realized a big potential of the Linux version of this is to consolidate directories. For example, I can use Samba to emulate a PDC, NCP Server to provide Novell Client services, and eDirectory via LDAP for UNIX authentication. Which brings me to my nifty network layout. I would like to use OES on Linux to centralize all of this. I would have a Samba domain with the NetApp devices able to join (supposedly). I would configure the CIFS and NFS exports on the NetApp devices. Lastly, I would mount the applicable NFS exports on the OES server itself and reexport them with NCP Server as Novell Shares. To Windows clients it looks like they're in a domain and logging in with their eDirectory IDs, to UNIX clients their login works just like passwd except it's over LDAP(TLS) with their eDirectory IDs and mounted NFS paths, and lastly to the existing Novell users who are not in a domain the NetApp filers would look like traditional NetWare volumes. OES does the magic rights translations to convert everything to Posix (I'd have to check about ACL on Posix). So the key barrier I see involves how to train the NetApp devices to correlate Windows SIDs to UNIX UID/GID. This way a user could access their same data regardless of platform with the same eDirectory login. I know this is possible with Mixed mode security and the usermap.cfg. The questions: -------------------- Is this the optimal way to manage this? Would a simple usermap.cfg entry like THEDOMAIN\* == * do the trick, or are things more complicated then that? Has anyone used a Samba PDC to manage NetApp devices? Thank you for any information anyone has Regards, Ryan -- The more we disagree, the more chance there is that at least one of us is right.

1 0

Sophos Antivirus for NetApp anyone?
by Sten Gunterberg 19 Sep '05

19 Sep '05

Hi! While evaluating a virus scanning solution for our FAS270 I noticed that there also is one from Sophos, apparently since November 2004. The latest mails about virus scanning on the list were also in November 2004 and did not mention Sophos, so I guess there cannot be many of you using it. But if someone is, are you willing to share yourexperience? One interesting aspect about it (for a small shop like us), is that it does not need to run on a Windows Server, but is happy with XP, at least according to this page: http://www.sophos.com/products/es/endpoint-server/sav-netapp.html Anybody able to confirm that? Others (Trend, McAfee etc.) require a Windows Server (2000 or 2003) "underneath". Regards, Sten Gunterberg -- sten.gunterberg(a)ergon.ch, +41 44 268 8920, http://www.ergon.ch Ergon Informatik AG, Kleinstrasse 15, 8008 Zuerich, Switzerland _______________________________________________________________ e r g o n smart people - smart software

1 0

Alberto me comento que esto podria interesarte mucho
by Clara Gardella 18 Sep '05

18 Sep '05

Actualmente la sociedad esta muy concientizada de lo importante que es lucir en forma, sea tanto en la relacion de pareja, como en las relaciones en el trabajo y en las relaciones sociales en general. La estetica es la principal razon que regula la autoestima de la persona. Es por eso que estudiosos de la ciencia de alto prestigio se esforzaron con gran dedicacion por mucho tiempo, implementando productos que nos permitan mejorar nuestra vida diaria. Este es uno de ellos y el mejor.

1 0

RE: ONTAP upgrade from 6.4.2P6 to 7.x
by Edwards, John 18 Sep '05

18 Sep '05

One clarification to your first point. Since the flexible volumes are newly created, you have to initialize any snapmirrors between them. If you leave you data in traditional volumes, you do not need to reinitialize the snapmirror transfer. John Edwards -----Original Message----- From: Skottie Miller [mailto:skottie@anim.dreamworks.com] Sent: Friday, September 16, 2005 2:30 PM To: Darren Dunham Cc: toasters(a)mathworks.com Subject: Re: ONTAP upgrade from 6.4.2P6 to 7.x If you use volume snapmirrors, you'll need to re-initialize them when you go to 7G from 6.5. If you aren't upgrading everything at the same time, be sure to update the destinations of the snapmirrors before the sources. If you use qtree snapmirrors, they interoperate OK. This is described in the "important cautions" section of http://now.netapp.com/NOW/download/software/ontap/7.0.1R1/ -skottie

1 0

zum Gratisurlaub
by Einladung 17 Sep '05

17 Sep '05

Ohne jede Verpflichtung können Sie an unserer Verlosung teilnehmen und einen herrlichen Gratisurlaub in Spanien gewinnen. Das einzige, was Sie tun müssen, ist, sich anzumelden. Sie brauchen uns nur Ihren Namen, den Wohnort, die Postleitzahl und das Land anzugeben. Kein Adresse, keine Telefonnummer, nichts weiter Der Hauptgewinn ist ein komplett eingerichtetes Apartment in Montaña del Mar / Spanien während einer Woche. Ausserdem gibt es mehrere "Trostpreise" zur Verlosung anmelden

1 0

RE: ONTAP upgrade from 6.4.2P6 to 7.x
by Geffroy, Emmanuel 16 Sep '05

16 Sep '05

Darren, You mentioned problems with snapmirror with 7G. Could you elaborate? Thanks. -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Darren Dunham Sent: Friday, September 16, 2005 12:52 PM To: toasters(a)mathworks.com Subject: Re: ONTAP upgrade from 6.4.2P6 to 7.x > 2) How long does the upgrade take ? > The docs only say hours (in an event that I need to revert back) On a smaller filer, the filesystem conversion only took a few minutes. But this was a largely empty box. > 3) Has anyone found a need to revert back ? Why ? We ran into to some trouble with snapmirror. Support said that some aspect of it was broken and suggested we revert to 6.5. Here's a hint. In the 3 step procedure to revert (download, revert_to, bye), don't leave out step 2... *ouch* (*blush*) > 4) Available Volume space > I believe that as part of the upgrade DOT has to go and change all > of the inodes. Are there any implications as far as available space > in a volume ? Do I need to make sure that I have some n% of > free space ? It probably needs a bit of space, but I don't know how much. It shouldn't be a large amount. > 5) How did you deal with the new /etc/exports ? > I use /etc/netgroups and it seems that I need to totally rewrite the > /etc/exports file since '-access' is no longer supported They are rewritten by the process. I saved a copy anyway, but didn't end up doing anything with it. -- Darren Dunham ddunham(a)taos.com Senior Technical Consultant TAOS http://www.taos.com/ Got some Dr Pepper? San Francisco, CA bay area < This line left intentionally blank to confuse you. >

3 2

ONTAP upgrade from 6.4.2P6 to 7.x
by George Kahler 16 Sep '05

16 Sep '05

I need to upgrade present productin F840 cluster environment running DOT 6.4.2P6 in order to support LTO3 tape-drives and an ADIC library. This seems like an oportunity to go directly to DOT 7.x (traditional volumes only - no flex vols yet). I've been pouring over the Upgrade Guide and was wondering what experiences/problems others have came across. 1) What are some of the biggest/troublesome issues ? 2) How long does the upgrade take ? The docs only say hours (in an event that I need to revert back) 3) Has anyone found a need to revert back ? Why ? 4) Available Volume space I believe that as part of the upgrade DOT has to go and change all of the inodes. Are there any implications as far as available space in a volume ? Do I need to make sure that I have some n% of free space ? 5) How did you deal with the new /etc/exports ? I use /etc/netgroups and it seems that I need to totally rewrite the /etc/exports file since '-access' is no longer supported 6) Increased disk & CPU activity after the upgrade The Upgrade Guide mentions that there will be an increase. How much of an increase have people seen ? One of my 840s runs at about 90% busy all the time 7) What version of DOT 7.x would you suggest to upgrade to ? Thanks, George

5 4

URGENTE
by PRINCE DONGA GEORGE 16 Sep '05

16 Sep '05

PRINCE DONGA GEORGE OLYMPIC SECURITY & FINANCE HOUSE, 14 DEGBAGO CRECENT, ABOMME. COTONOU - REPÚBLICA DE BENIN. WEST AFRICA E-MAIL:prince_g_donga@yahoo.fr Dear Friend, Clogios, Yo PRINCE DONGA GEORGE de ha decidido a conceder esta confianza en usted, que le ruego no haré caso ni no mí traicionaré de. El appologise para cualquier inconviniences esto puede causarle por adelantado. Soy PRINCE DONGA GEORGE el Directos de la operación y de la entrega, a último Sr. AHMMED ALI SHLEH, que era un contratista aquí en Benin Rep.que, el 25 de dec de 2003, con su familia entera fue fallecido en un acidente de Avion ocurido en la playa de Jcko en el 25/12/2003. De hecho, nustro cliente hizo Sr. Ahmmed Ali Shaleh Lebanes, tine una cantidad del dopsit, valorada en (seguridad y las finanzas de USD$10.7M)con uno contiene aquí en el representante de Cotonou Benin, y sobre la época de la duración de su acuerdo, la casa de las finanzas que entra en contacto con la familia pero ninguna respuesta. Conseqently, la compañía me publicó un toprovide del aviso el siguiente de parentescos a los difuntos como soy el Directos de la operación y de la entrega, o tiene su dinero confiscado después de este período largo, como está en la ley de compañía. Desde entonces, he hecho varios contactos a su embajada de los países para localizar a cualesquiera de mis parientes extendidos los clientes, que también habían sido fracasados. Puesto que he sido unsuccesfull en el localización de los parientes por casi dos años ahora, intento su consentimiento para presentarle como el siguiente de los parentescos de los difuntos puesto que ningunos de sus parientes no eran ninguna manera de ser encontrado de modo que de modo que cambiemos todos los documentos en su nombre como el nuevo beneficiario, después de eso, nosotros quiere ambo la parte él en porcentaje,55% para nosotros aqui,40% para usted y 5% Para los gastos de transacción. Tengo todos los documentos jurídicos necesarios que se pueden utilizar para sostener todas las demandas que haremos. Toda lo que requiero es su cooperación honesta para permitirnos hace esta gran garantía de la transacción que beneficia successfully.que esto será ejecutada bajo arreglo legítimo que le proteja contra cualquier abertura de la ley. Consígame por favor en tacto con tan rápido como sea posible directos este:E-mail:prince_g_donga@yahoo.fr y a través del teléfono también, permitirnos discuten más lejos el progreso de recuerdos de este negocios. Un saludo PRINCE DONGA GEORGE

1 0

Re: Sex pictures
by autoreply-mailadmin＠unipalm.co.uk 16 Sep '05

16 Sep '05

Please note. You have been sent this email as the address you specified tom(a)unipalm.co.uk does not exist. Please resend using the correct email address. Please DO NOT RESPOND to this email address. Thank You

1 0

Two-way mirroring?
by Stewart, John 14 Sep '05

14 Sep '05

We've got two NetApps, an F740 and an F87. The big 'un is in our US office, and the little guy is in our UK office. We've got a T1 between our sites, and of course the performance sucks for those who access files on the other side of the pond. I'm wondering about possible mirroring options. From what I've heard, all of them are one-way. There is no such thing as a two-way style of mirror, is there? For example, if a user opens a file on one side, it would lock the file on both filers, and then when he saves it, it is synced to both sides. Otherwise, the only thing I can do, really, is set up particular directories to mirror over, and so we'd have a read-only copy of the local folder on the other side, and vice versa. Not really the most useful thing for collaboration. Anyone have any good solutions to such a problem? thanks johnS

2 1

RE: Two-way mirroring?
by John Clear 14 Sep '05

14 Sep '05

If the files being accessed across the pond are often the same files, some of NetApp's filer caching products might be of use. That way, once the files were cached locally, only the updates would need to go across the pond. John -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Stewart, John Sent: Wednesday, September 14, 2005 10:07 AM To: 'toasters(a)mathworks.com' Subject: Two-way mirroring? We've got two NetApps, an F740 and an F87. The big 'un is in our US office, and the little guy is in our UK office. We've got a T1 between our sites, and of course the performance sucks for those who access files on the other side of the pond. I'm wondering about possible mirroring options. From what I've heard, all of them are one-way. There is no such thing as a two-way style of mirror, is there? For example, if a user opens a file on one side, it would lock the file on both filers, and then when he saves it, it is synced to both sides. Otherwise, the only thing I can do, really, is set up particular directories to mirror over, and so we'd have a read-only copy of the local folder on the other side, and vice versa. Not really the most useful thing for collaboration. Anyone have any good solutions to such a problem? thanks johnS

1 0

Anyone using WysDM?
by Kennedy, Jeffrey 14 Sep '05

14 Sep '05

I'm curious to hear from anyone using this in conjunction with, or instead of, DFM. What caused you to purchase it with/instead of DFM? Are you getting more information out of it than with DFM? Do you make both available to end users? One? None? Do you use both for notification? Etc... Thanks. ~JK

1 0

RE: NFS Performance
by Ben Kicken 14 Sep '05

14 Sep '05

Can't see what kind of NIC you are working with (100Mbps or Gb Ethernet), but maybe interesting suggestion for you: Check client NIC settings to Switch port settings and from switch port to Filer NIC settings. Ie, obviously Auto-negotiation and Flow-control settings are not always as they should be, had this problem with Cisco switch. After changing switch port settings (negotiation fixed instead of auto and Flow control set as Tx=full rx=full) performance increased to acceptable levels. Hope this helps Ben > -----Oorspronkelijk bericht----- > Van: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] > Namens John Stoffel > Verzonden: dinsdag 13 september 2005 18:05 > Aan: Ben Rockwood > CC: list toasters > Onderwerp: Re: NFS Performance > > > Ben> I've had several filers in production for years but in all that > Ben> time never used NFS, just CIFS. I'm now starting to use NFS for > Ben> some migrations but I'm really baffled by the poor performance > Ben> I'm getting. Part of the problem is that I'm not sure what kind > Ben> of performance people usually get. > > Ben> When I started pulling data off my 940's I was only getting > Ben> around 4-5MB/s. I'm grabbing data by way of GNU Tar on Solaris. > > I just did some tests on my F940 here, talking to a Solaris 8 box over > Gigabit. I had a directory called 'foo' which is 73M in size, with > 2200+ directories and 2300+ files. None of the files was that big I > think. > > Here's my runs with tar and time: > > # time tar cf - foo > /dev/null > 0.32u 1.65s 0:03.09 63.7% > > Pretty fast, 3seconds implies 25mb/sec throughput. But wait... gnutar > can optimize /dev/null writes and not do the work... > > # time tar cf - foo > /tmp/foo.tar > 0.32u 3.27s 0:12.25 29.3% > > Ok, now it took 12secs, which works out to 6+mb/sec. Not great hmmm... > > # time tar cf - foo > /tmp/foo.tar > 0.24u 2.42s 0:03.85 69.0% > # time tar cf - foo > /tmp/foo.tar > 0.31u 2.11s 0:03.18 76.1% > # time tar cf - foo > /tmp/foo.tar > 0.26u 2.09s 0:03.27 71.8% > # time tar cf - foo > /tmp/foo1.tar > 0.30u 2.19s 0:03.08 80.8% > > Ah, but now look what happens. It's back to 3seconds, or 25mb/sec > through put over the wire. It looks like the NetApp cache has kicked > in here. Which is good, since it shows that the network isn't the > bottleneck here. > > So I repeated my tests with another directory, bar, with 500mb total > size, 790 directories, 1000 files. So they're obviously bigger files > in general. > > # time tar cf - bar > /tmp/foo.tar > 0.64u 17.61s 0:31.51 57.9% > # time tar cf - bar > /tmp/foo.tar > 0.62u 14.24s 0:16.01 92.8% > # time tar cf - bar > /tmp/foo.tar > 0.60u 14.80s 0:17.29 89.0% > > This time I was seeing around 30mb/sec for the cached versions, and > around 15mb/sec for the non-cached initial load. Not too bad. > > So for your setup, I suspect that your network is either heavily > loaded, or that you have a bad network cable, or that you have a > switch in the middle which is swamped or just isn't upto snuff. > > I'm also running 7.0.1 on the NetApp. The volume which held the data > was mounted via TCP onto an E450 with 4gb of RAM and 4x450mhz CPUs, > which are certainly not the fastest. > > Ben> The data is web content, so its a mix of images (500K or so), > Ben> HTML (1K), and Thumbnails (<5K). No matter what I seem to do I > Ben> can't boost performance above that 5MB/s mark. I've tried NFSv2 > Ben> and NFSv3, TCP and UDP, 8K and 32K, Gigabit clients and FastEther > Ben> clients, Solaris9/UltraSPARC and Solaris10/AMD64, so on and so > Ben> forth, with no effect. > > This all points me to suspecting that your network hardware or cabling > has problems. What does 'netstat -ni' say on both ends? And can you > setup a direct connection between the filer and a client to see if > that can be made to run better? Get the rest of the network out of > the loop. > > Good luck, > John > John Stoffel - Senior Staff Systems Administrator - System LSI Group > Toshiba America Electronic Components, Inc. - > http://www.toshiba.com/taec > john.stoffel(a)taec.toshiba.com - 508-486-1087

2 1

NFS Performance
by Ben Rockwood 13 Sep '05

13 Sep '05

I've had several filers in production for years but in all that time never used NFS, just CIFS. I'm now starting to use NFS for some migrations but I'm really baffled by the poor performance I'm getting. Part of the problem is that I'm not sure what kind of performance people usually get. When I started pulling data off my 940's I was only getting around 4-5MB/s. I'm grabbing data by way of GNU Tar on Solaris. The data is web content, so its a mix of images (500K or so), HTML (1K), and Thumbnails (<5K). No matter what I seem to do I can't boost performance above that 5MB/s mark. I've tried NFSv2 and NFSv3, TCP and UDP, 8K and 32K, Gigabit clients and FastEther clients, Solaris9/UltraSPARC and Solaris10/AMD64, so on and so forth, with no effect. Because the 940 is in production I decided to use a 760 for testing, although its on FastEther I thought I'd be able to do more testing and check write performance there. The strange thing is that performance levels are about the same on the 760. I even decided to use a large file (700MB) so that I could test for sequentual access and see if the performance improved and it didn't. Interestingly, write performance on the 760 was at line speed (just under the 12.5MB/s limit of FastEther). So on the 760 I can write data twice as fast as I can get it. In both cases I'm using either fast disk (capable of 50MB/s or higher under random or sequential workloads) on the client or testing direct to /dev/null to cut out the middle man. While I don't doubt that the Solaris NFS client isn't as fast as I'd like, I can't believe that read performance is more than twice as slow as write performance. I've called netapp and they just keep wanting me to run tests, which is what I'm doing. Searching NOW hasn't helped, searching Google hasn't helped. Any ideas? What do you consider acceptable read performance from a filer, particularly a 940? So far all I've learned in my tests is that NFSv2 UDP at 8K is the fastest method, but it still hidiously slow. Any ideas are greatly appreciated. benr.

4 3

Question from eBay Member
by eBay 12 Sep '05

12 Sep '05

For example, grain of sand beyond indicates that bonbon from briar patch satiate haunch from toothpick.He called her Rufus (or was it Rufus?).Furthermore, pork chop defined by sweeps the floor, and defined by toothpick a big fan of razor blade about.

1 0

Fw:
by Brandi B. Pilger 11 Sep '05

11 Sep '05

Fw: Hey tm-m3(a)mathworks.com, You can now procure all types of Software from even a small pocket money.

1 0

options cifs.trace_login is very chatty
by Steve Losen 08 Sep '05

08 Sep '05

We like to keep track of when our users login to CIFS so we use options cifs.trace_login on but under 7.0.1R1 this is extremely chatty. We are getting bombarded by messages where Windows machine accounts (not user accounts) login to the filer and that sometimes fails, or else the machine account logs in to the domain, but then the filer tries to map the machine account to a Unix user, which fails. Sometimes this is followed by a valid login by a user account from the same IP (which also generates several log messages) and sometimes not. But most of the noise seems to be caused by Windows machine accounts. It's Thursday afternoon and our /etc/messages file is 260M. There's so much crap in it, it would be very difficult to diagnose a real problem. The console was totally unusable with messages scrolling by continuously, until I tweaked /etc/syslog.conf. We're even getting messages from syslog saying that it dropped some messages! I tried options cifs.trace_login off and that quieted things down completely, but then I didn't have any record of when folks logged in to CIFS. I suppose I can muck some more with syslog.conf. Any other suggestions? Steve Losen scl(a)virginia.edu phone: 434-924-0640 University of Virginia ITC Unix Support

1 0

NTFS qtree access as root from NFS
by Adrian Gschwend 08 Sep '05

08 Sep '05

Hi all, Me again, yeah I like this mailinglist :) We have several qtrees with NTFS only permissions, on one of them I would like to install some binaries from Linux, so I created the following NFS share: /vol/volX/apps -sec=sys,ro=192.168.0.0/16,rw=192.168.1.2,root=192.168.1.2 Now I try to connect as root from 192.168.1.2 and to install the files, but no luck, I get a permission denied. I found this option: options cifs.nfs_root_ignore_acl on (was off before) but still no luck. That should be possible somehow I suppose? For sure I can mount other (Unix) qtrees without problems as root. BTW what's the reason for the rather high amount of spam on this list, is posting allowed for non-members as well? cu Adrian -- Adrian Gschwend System Administrator Berne University of Applied Sciences Biel, Switzerland

4 3

Mtime goes wonkie via Sharity
by Ben Rockwood 08 Sep '05

08 Sep '05

Hey All. I'm using Sharity 2.10 on Solaris 9 to access CIFS shares that won't properly map over for access via NFS. For whatever reason when using CPIO or TAR to migrate data off the Filer shares some files end up with mtimes gone wonkie. mtimes can be off by an hour (plus or minus) or by a day (plus or minus) almost at random. If all the times were off by some constant value it'd be an easy fix. I'm running out of ideas. Has anyone seen a problem like this before? Do I need to try and redouble efforts to map permissions properly and do this via NFS? I'll take any ideas at this point. :) benr.

1 0

Be a real man. Rolex Watch
by Marci Moran 06 Sep '05

06 Sep '05

REPLICASONLINE - WE NEVER COMPROMISE ON QUALITY Rolex replica is our speciality We guarantee lowest prices and highest quality We are the Direct manufacturers. For top quality rolex watchs pleas visit: Goto Our Website --------> oneblingwatchs.net <--------- uduhrkfw tpuaarc

1 0

NFS access problem going from 6.4.4 to 7.0.1R1
by Steve Losen 06 Sep '05

06 Sep '05

We recently replaced our F820c pair running 6.4.4 with a FAS3050c pair running 7.0.1R1. Formerly we were doing something admittedly questionable to protect unauthorized NFS mounts from networks where we do not have complete physical control. We have a public lab of Unix workstations that NFS mount home directories from our filers. This is insecure because someone can bring in a Unix laptop configured with the same IP address as a workstation and move the network cable from the workstation to the laptop, and thereby get NFS access on the laptop. The laptop owner has root so he can su to any UID that he wants, thereby getting access to any user's files. Our solution was to write a "netgroup server" that temporarily added a NFS client to a netgroup just long enough for the client to mount and then removed the client from the netgroup. Only root on the NFS client had access to the shared secret that authenticated the client to the netgroup server. While not perfect, this made the laptop attack much more difficult. This worked fine under 6.4.4. Once the NFS client had its mounts, it did not seem to matter to the filer that the client disappeared from the netgroup. However, this is not the case under 7.0.1R1. We have found that certain NFS operations cause the filer to recheck the netgroup information and when it discovers that the client is no longer in the netgroup, it denies further access. I realize that we need to be looking at a "real" solution (NFSv4 ? NFS over IPsec ?). But I was wondering if there was something simple that I could do in the meantime, perhaps an obscure NFS option on the filer. Steve Losen scl(a)virginia.edu phone: 434-924-0640 University of Virginia ITC Unix Support

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters