toasters

toasters@lists.teaparty.net

13531 discussions

VSCAN errors
by SKIP HOFMANN 04 Nov '04

04 Nov '04

Hello all I keep getting these errors on my FAS250. Is this a Trend issue or a filer problem? Thu Nov 4 10:28:00 PST [rpc_0:warning]: CIFS: Virus scanner 10.20.0.58 completed scan on ONTAP_ADMIN$\vol\vol0\data\mfg\JOBS\110088\Impermeable Barriers\CD\Reader\JavaScripts\aform.js but original request was not found. Thu Nov 4 10:28:06 PST [CIFSVScan:warning]: CIFS: Virus scan request to 10.20.0.58 timed out. Skip Hofmann Senior Network Administrator TetraTech Skip.Hofmann(a)ttisg.com <mailto:Skip.Hofmann@ttisg.com> 949 500 5286 cell 949 608 5801 office

1 0

Routing question
by Matt Phelps 04 Nov '04

04 Nov '04

Hi all, I want to add a second nework interface (actually a vif, but it shouldn't make any difference) and attach it to a private network on a beowulf cluster; but I want to also keep the current interface to our public network up. How do I make sure the filer isn't doing any routing? Currently, the vif setup for our public network looks like this (IP addresses removed to protect the innocent): hostname foo vif create multi vif0 e9a e9b ifconfig vif0 `hostname`-vif0 netmask 255.255.248.0 route add default xxx.xxx.xxx.xxx routed on So do I just add a foo-cluster (and foo-cluster-vif1) entry to the hosts file with the appropriate private IP address (e.g. 10.1.200.1) and then do: vif create multi vif1 e11a e11b ifconfig vif1 foo-cluster-vif1 netmask 255.0.0.0 Do I need another "route add" for 10.1.1.1 (the gateway to the private network?). I don't understand this stuff. -- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps(a)cfa.harvard.edu, http://cfa-www.harvard.edu

1 0

CIFS / NFS Authentication problem
by Geoff Hardin 04 Nov '04

04 Nov '04

Ok toasters, I've got a brain buster for you... Here's the situation: I have a filer running ONTAP 6.1R1P1 (and no, I can't upgrade) with a qtree (/vol/vol0/cifs) set to UNIX style security. The qtree is owned by a user and a group. There is a directory, /vol/vol0/cifs/test, in this qtree owned by this same user and group, and the UNIX permissions are 2775 (drwxrwsr-x). From a UNIX system, I can create new files, delete files, edit files, and rename files, and the file permissions are correct (owned by me and the group that owns the directory). Here's where it gets tricky. The qtree is shared via CIFS as \\TOASTER\cifs. The share is set up with everyone / Full Control (because we control access via UNIX groups and users). I can see the directory, I can modify existing files, but I can not delete files, create new files, or rename files. The Windows clients are Windows 2000 and Windows NT 4.0. My UNIX account and my Windows account are set up correctly in the usermap.cfg file. The local /etc/nis_group file is updated and correct. I am able to write to other shares on this filer, even to other directories in the share that have different UNIX permissions (i.e. 0755, 0775, or 0777). What am I missing? Is this a bug, or just an ID-10t error? Thanks, Geoff P.S. - I just checked my credentials using the `cifs sessions -s <username>` command and it came back with only two of my UNIX groups, specifically, not the group that owns the directory in question. I have turned on the `options nis.group_update.enable', and run `options nis.group_update_schedule now'. The local /etc/nis_group file is updated with the correct information, but even after removing myself from one of the additional groups, running `wcc -x`, and `options nis.group_update_schedule now', my credentials still show up with the same two groups (even though I am no longer part of one of them). Hmmm

2 2

aveComm - Installable/On-Premises web-based Collaboration and Communication (with Security, Performance, Scalability and Integration)...
by Glenn Platkin 04 Nov '04

04 Nov '04

If you're concerned about: Security, Performance, Scalability, Integration or Cost of web-based Collaboration or Conference Calling, please read on... aveComm, our award-winning 'Unified Messaging, Communication and Collaboration' solution, "is an excellent alternative to hosted services, especially for medium to large-sized organizations with security and cost in mind ," says Rich Tehrani, Group Publisher/Editor-in-Chief, Internet Telephony Magazine aveComm is offered as an INSTALLABLE, HOSTED or OEM-friendly alternative to less feature-rich and expensive solutions and offers: True Application Sharing & Annotation Desktop Sharing Secure Remote Desktop Control Document Collaboration Text Chat/Instant Messaging Text Messaging/Paging Voice Mail Whiteboard Session Recording/Playback File Transfer Full Duplex PC-to-PC VoIP (Voice over IP) IP Telephony (PC<->Phone, Phone<->PC, Phone<->Phone) Unlimited Participant Conference Calling/Bridging That's right, Unified Collaboration and Communication inside of a single interface, from a single-vendor!! I welcome you to test-drive aveComm, FREE for 30 days, without any obligation. Just visit: http://run.avecomm.com , sign-up and it's that simple. In fact, invite your friends, co-workers and colleagues - there is no limit to the number of participants and they can be anywhere to join you online for true web-based Collaboration and Conversation. PLEASE, let me know what you think... And by the way, if you'd like to install aveComm in-house, behind your firewall, contact me directly and we'll get you set up right-away! Thanks ! Glenn (Platkin) Vice President gaplatkin(a)atinav.com www.avecomm.com Encouraging Collaboration & Communication, Anytime, Anywhere, with Anybody... P.S. Please feel free read some of our latest headlines: http://www.avecomm.com/CorporateInformation/NewsandEvents/PressReleases/pr0… and, http://www.avecomm.com/CorporateInformation/NewsandEvents/PressReleases/pr0… Note: If you do not wish to receive further marketing e-mails, please reply to this email with UNSUBSCRIBE in the subject - Thank you !

1 0

RE: Backup speeds across the network
by John Clear 04 Nov '04

04 Nov '04

Our FAS250 runs about the same speeds as the F760 it replaced. It can do 2-3 NDMP sessions at 20MB/s. Quantum's newer libraries doesn't have NDMP native drives any more, but use Dinostors instead. 4.5MB/s is pretty bad performance. Unless the Sun is really overworked, it should be able to do better then that. I have a Ultra60 with four local drives (non-NDMP) and it can do >10MB/s per drive. John -----Original Message----- From: Geoff Hardin [mailto:ghardin@dalsemi.com] Sent: Tuesday, November 02, 2004 4:15 PM To: John Clear Cc: 'Geoff Hardin'; toasters Subject: RE: Backup speeds across the network Currently we are seeing about 4.5 MB/s from the filer (F760) to an LTO-2 drive attached to a Sun V240. Unfortunately, we do not have any data on the FAS270 yet, so we can't really test it, which is why I was looking for other's results. We looked at the DinoStor tape hosts and have been interested in using them for years, but we couldn't justify the additional price when there are libraries that have the functionality built-in already. From our own evaluations though, we highly recommend using the DinoStor devices if your library can not be attached to the network. Geoff Hardin UNIX System Administrator / Team Lead Dallas Semiconductor / Maxim Integrated Products 972-371-4630 geoff.hardin(a)dalsemi.com Famous last words: Who? Me? On Tue, 2 Nov 2004, John Clear wrote: > We currently have a Quantum/ATL library with built in > NDMP tape drives (SDLT220) and are moving to a StorageTek > library with Dinostor (http://www.dinostor.com) NDMP bridges > and LTO1 drives. > > We use a separate gigabit network for backups, and see 20MB/s > to the SDLT drives. A FAS960 can push 5-6 streams at 20MB/s. > Even with a single stream, I haven't seen much above 20MB/s, > so the drive seems to be the limiting factor in this case. > Our old F760 used to be able to do 3 streams at 20MB/s, but > would drop to 12-15MB/s if pushed to 4 streams. > > Dropping in a Dinostor in place of your tape host filer would > take the load off that filer. What rates are you seeing? > > John > > -----Original Message----- > From: Geoff Hardin [mailto:geoff.hardin@dalsemi.com] > Sent: Tuesday, November 02, 2004 3:24 PM > To: toasters > Subject: Backup speeds across the network > > > We have several filers and few tape drives so we are looking at doing > 3-way NDMP backups. Right now, we are doing those backups to other > filers, but this is consuming a lot of resources, especially on the tape > host filer. So, we are looking at a new tape library from SpectraLogic, > Overland, Quantum, StorageTek, etc. that has the NDMP "built-in" to the > tape drive. > > Our question is, what kind of speeds are others seeing in their real > environments? Speaking to one vendor, they claimed their library would > work at the rated tape speeds (35 MB/s), while another claimed even > better performance (40 MB/s); to his credit, the second vendor said that > he wasn't the technical guy, but he thought that's what he remembered. > Call me overly cynical, but I find it hard to believe that we will see > speeds comparable to direct attached tape over the network. Our > experience in the past has been somewhere closer to 50% of the rated > tape speed, and even that may be a bit overreaching for some of our > older filers (F760C). > > Thanks, > > Geoff Hardin > geoff.hardin(a)dalsemi.com > UNIX System Administrator > Maxim / Dallas Semiconductor >

1 0

Vscan
by SKIP HOFMANN 03 Nov '04

03 Nov '04

Hi all Quick question how do I add an extension to vscan to not be scanned? If im understanding this correctly the filer has a list be default of extensions that it will scan, and if I remove a extension from the list then the file won't be scanned? Is this correct or do I also have to manually tell the filer not to scan an extension. Also we are using Trends filer protect for our FAS 250, can anyone tell me if intelliscan works on the filer the same way it would work on a windows server. As I understand intelliscan feature if the file is not on the Trend database of known viruses then the file doesn't get scanned . Thanks for any help Skip Hofmann Senior Network Administrator TetraTech Skip.Hofmann(a)ttisg.com <mailto:Skip.Hofmann@ttisg.com> 949 500 5286 cell 949 608 5801 office

2 1

OFF: NEBS compliant NAS
by Edward Hibbert (eh＠dataconnection.com) 03 Nov '04

03 Nov '04

This probably isn't directly NetApp related - though I'd love it if it were. Does anyone know of a rack-mountable NAS which is NEBS compliant and no more than 19" wide and 20" deep? Regards, Edward.

2 1

RE: Backup speeds across the network
by McCarthy, Tim 03 Nov '04

03 Nov '04

I saw a STK-9940B dump at 50+MB/sec via local FC and also 50+MB/sec via 3-way over gigE (standard frames). --tmac ====================== Tim McCarthy Professional Services/Systems Engineer NetApp Federal Systems, Inc. 410-551-3970 (o) 443-363-0208 (f) tmac(a)netapp.com tmac-pager(a)netapp.com ====================== -----Original Message----- From: Geoff Hardin [mailto:geoff.hardin@dalsemi.com] Sent: Tuesday, November 02, 2004 6:24 PM To: toasters Subject: Backup speeds across the network We have several filers and few tape drives so we are looking at doing 3-way NDMP backups. Right now, we are doing those backups to other filers, but this is consuming a lot of resources, especially on the tape host filer. So, we are looking at a new tape library from SpectraLogic, Overland, Quantum, StorageTek, etc. that has the NDMP "built-in" to the tape drive. Our question is, what kind of speeds are others seeing in their real environments? Speaking to one vendor, they claimed their library would work at the rated tape speeds (35 MB/s), while another claimed even better performance (40 MB/s); to his credit, the second vendor said that he wasn't the technical guy, but he thought that's what he remembered. Call me overly cynical, but I find it hard to believe that we will see speeds comparable to direct attached tape over the network. Our experience in the past has been somewhere closer to 50% of the rated tape speed, and even that may be a bit overreaching for some of our older filers (F760C). Thanks, Geoff Hardin geoff.hardin(a)dalsemi.com UNIX System Administrator Maxim / Dallas Semiconductor

1 0

RE: Backup speeds across the network
by Debbie.Lane＠intermec.com 03 Nov '04

03 Nov '04

Wouldn't the speed of the backup only be as fast as the slowest part of the backup environment? If you are using gige, you might want to check out jumbo frames and full flow control. Debbie -----Original Message----- From: Jerry [mailto:juanino@yahoo.com] Sent: Tuesday, November 02, 2004 3:59 PM To: Geoff Hardin; toasters Subject: Re: Backup speeds across the network It depends on your # and type of files. In some cases I get 13 MB/sec, but where I have lots of small files I get as little as 1.5 MB/sec. I am not bound by network at that time either. (This is on super dlt-3 drives, ~22 MB/sec theoretical i believe). Jerry --- Geoff Hardin <geoff.hardin(a)dalsemi.com> wrote: > We have several filers and few tape drives so we are > looking at doing > 3-way NDMP backups. Right now, we are doing those > backups to other > filers, but this is consuming a lot of resources, > especially on the tape > host filer. So, we are looking at a new tape > library from SpectraLogic, > Overland, Quantum, StorageTek, etc. that has the > NDMP "built-in" to the > tape drive. > > Our question is, what kind of speeds are others > seeing in their real > environments? Speaking to one vendor, they claimed > their library would > work at the rated tape speeds (35 MB/s), while > another claimed even > better performance (40 MB/s); to his credit, the > second vendor said that > he wasn't the technical guy, but he thought that's > what he remembered. > Call me overly cynical, but I find it hard to > believe that we will see > speeds comparable to direct attached tape over the > network. Our > experience in the past has been somewhere closer to > 50% of the rated > tape speed, and even that may be a bit overreaching > for some of our > older filers (F760C). > > Thanks, > > Geoff Hardin > geoff.hardin(a)dalsemi.com > UNIX System Administrator > Maxim / Dallas Semiconductor > > __________________________________ Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com "This message is intended only for the named recipient. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited."

1 0

RE: User administration (was ssh scripts)
by Michael Christian 03 Nov '04

03 Nov '04

Yeah, I was looking into using expect, but turns out there is an easier way... The manpage for useradmin gives the following usage: useradmin useradd [ -c comments] login_name And when telneted or consoled into the filer, you get the same usage for useradmin: myfiler> useradmin usage: useradmin useradd [-c "comments"] login_name useradmin userdel login_name useradmin userlist [username list] *However*, if you do the same thing on a non-interactive ssh or rsh, the usage suddenly changes to something much more useable: > ssh myfiler useradmin usage: useradmin useradd [-c "comments"] login_name passwd useradmin userdel login_name useradmin userlist [username list] See, now that's much easier to script. -MikeC (Too lazy to use expect) -----Original Message----- From: Dirk Schmiedt [mailto:Dirk.Schmiedt@munich.netsurf.de] Sent: Tuesday, November 02, 2004 2:55 PM To: Michael Christian Cc: toasters(a)mathworks.com Subject: Re: User administration (was ssh scripts) Michael Christian wrote: > Next question. I want to automate user administration. The whole > 'useradmin useradd' thing with its interactive interface and live > password addition (who the heck only lets root set a user's pasword?) > is probably not going to work with our 500+ filers. > 500xNumberOfAdmins. Yeah, right. > > The docs point to fairly standard /etc/[passwd,shadow,group] files, > but having added a user, I still don't see them on my box. Has anyone > automated user management? > Hello Michael How about using expect? Excerpt from http://expect.nist.gov/ : "Expect is a tool for automating interactive applications such as telnet, ftp, passwd, fsck, rlogin, tip, etc. Expect really makes this stuff trivial. Expect is also useful for testing these same applications. And by adding Tk, you can also wrap interactive applications in X11 GUIs." With the help of "expect" I wrote my own autoinstaller for filers named "NAAI" (NetApp AutoInstaller) who sets up our training machines every week. It's job is to wipe out all(!) tracks of the last week admin class. Connect to the Filers, "set-defaults" the BIOS, boot over TFTP, wipe out all data on the disks, step through the "setup" dialog, install licenses and ONTAP, set date and timezone, vol lang and options, and ... much more. ;-) => I really can recommend expect for automatisation of filer useradmin/password activities. Best regards! Dirk

2 1

RE: Backup speeds across the network
by John Clear 03 Nov '04

03 Nov '04

We currently have a Quantum/ATL library with built in NDMP tape drives (SDLT220) and are moving to a StorageTek library with Dinostor (http://www.dinostor.com) NDMP bridges and LTO1 drives. We use a separate gigabit network for backups, and see 20MB/s to the SDLT drives. A FAS960 can push 5-6 streams at 20MB/s. Even with a single stream, I haven't seen much above 20MB/s, so the drive seems to be the limiting factor in this case. Our old F760 used to be able to do 3 streams at 20MB/s, but would drop to 12-15MB/s if pushed to 4 streams. Dropping in a Dinostor in place of your tape host filer would take the load off that filer. What rates are you seeing? John -----Original Message----- From: Geoff Hardin [mailto:geoff.hardin@dalsemi.com] Sent: Tuesday, November 02, 2004 3:24 PM To: toasters Subject: Backup speeds across the network We have several filers and few tape drives so we are looking at doing 3-way NDMP backups. Right now, we are doing those backups to other filers, but this is consuming a lot of resources, especially on the tape host filer. So, we are looking at a new tape library from SpectraLogic, Overland, Quantum, StorageTek, etc. that has the NDMP "built-in" to the tape drive. Our question is, what kind of speeds are others seeing in their real environments? Speaking to one vendor, they claimed their library would work at the rated tape speeds (35 MB/s), while another claimed even better performance (40 MB/s); to his credit, the second vendor said that he wasn't the technical guy, but he thought that's what he remembered. Call me overly cynical, but I find it hard to believe that we will see speeds comparable to direct attached tape over the network. Our experience in the past has been somewhere closer to 50% of the rated tape speed, and even that may be a bit overreaching for some of our older filers (F760C). Thanks, Geoff Hardin geoff.hardin(a)dalsemi.com UNIX System Administrator Maxim / Dallas Semiconductor

2 1

Backup speeds across the network
by Geoff Hardin 02 Nov '04

02 Nov '04

We have several filers and few tape drives so we are looking at doing 3-way NDMP backups. Right now, we are doing those backups to other filers, but this is consuming a lot of resources, especially on the tape host filer. So, we are looking at a new tape library from SpectraLogic, Overland, Quantum, StorageTek, etc. that has the NDMP "built-in" to the tape drive. Our question is, what kind of speeds are others seeing in their real environments? Speaking to one vendor, they claimed their library would work at the rated tape speeds (35 MB/s), while another claimed even better performance (40 MB/s); to his credit, the second vendor said that he wasn't the technical guy, but he thought that's what he remembered. Call me overly cynical, but I find it hard to believe that we will see speeds comparable to direct attached tape over the network. Our experience in the past has been somewhere closer to 50% of the rated tape speed, and even that may be a bit overreaching for some of our older filers (F760C). Thanks, Geoff Hardin geoff.hardin(a)dalsemi.com UNIX System Administrator Maxim / Dallas Semiconductor

2 1

ssh scripts
by Robert Borowicz 02 Nov '04

02 Nov '04

I want to work with our DBA's to put our Oracle instances in Hot Standby to grab snapshots. Anybody got a script they use that utilizes SSH to run the snap command on a filer? Thanks -Rob

8 14

User administration (was ssh scripts)
by Michael Christian 02 Nov '04

02 Nov '04

Next question. I want to automate user administration. The whole 'useradmin useradd' thing with its interactive interface and live password addition (who the heck only lets root set a user's pasword?) is probably not going to work with our 500+ filers. 500xNumberOfAdmins. Yeah, right. The docs point to fairly standard /etc/[passwd,shadow,group] files, but having added a user, I still don't see them on my box. Has anyone automated user management? -MikeC _____ From: Michael Christian Sent: Friday, October 29, 2004 9:08 PM To: 'Potakamuri, Sreenivasa'; Thorsten.Lemke(a)computacenter.com; bparent(a)calvin.ucsd.edu Cc: toasters(a)mathworks.com Subject: RE: ssh scripts Nice, that did it. Thanks. User-level auditing will be a godsend. -MikeC _____ From: Potakamuri, Sreenivasa [mailto:Sreenivasa.Potakamuri@netapp.com] Sent: Thursday, October 28, 2004 10:53 PM To: Michael Christian; Thorsten.Lemke(a)computacenter.com; bparent(a)calvin.ucsd.edu Cc: toasters(a)mathworks.com Subject: RE: ssh scripts This problem has been fixed in 6.4.5, 6.5.1 and above. Bug number for this problem is 90495. Regards, Sreeni Network Appliance -----Original Message----- From: Michael Christian [mailto:mchristi@yahoo-inc.com] Sent: Thu 10/28/2004 11:07 AM To: Thorsten.Lemke(a)computacenter.com; bparent(a)calvin.ucsd.edu Cc: toasters(a)mathworks.com Subject: RE: ssh scripts On a similar note, I've been trying to get user-level auditing working using ssh. When you telnet in, it logs actions under your userid, but when you ssh in, it logs everything as root. (Presumably because sshd is running as root?) Has anyone else had this problem, or know of a workaround? This is 6.5X18 -Mike ***************************************

3 2

Your help can save children in Pakistan from going blind
by Sakina 02 Nov '04

02 Nov '04

80% of blindness is preventable Are you doing something to help ? "Care and Kindness Society is committed to spreading light in the life of thousand of children who are at the brink of blindness in Pakistan. Only if Sakina and thousands like her had received eye care at an early age her sight could have been saved." Blindness prevention activities: Ø Free eye clinic (on main Korangi Road, Karachi) Ø Free Eye Camps across Pakistan Ø Comprehensive free eye screening school programs in underprivileged areas The society also aims to establish a free Eye Hospital in the future. Send your Donation/Zakat to: Address: 302, Crystal Court, BC-7, Block 5, Clifton, Karachi. Tel: 5376189-5374598 email: cks(a)cyber.net.pk www.careandkindness.org.pk All donations are exempt from income tax vide income tax exemption No.JUD/CIT/ZE/2002-2003/540 This letter can not be considered spam as long as we include Contact information & remove instructions For Unsubscribe, Email at removeemarket(a)gawab.com Send your business offer to more then 500,000 Pakistani Internet Users. Email now: pakemarketing(a)gawab.com

1 0

From : Mr Kingsley Tarawally.
by kingsley tarawally 02 Nov '04

02 Nov '04

From : Mr Kingsley Tarawally. Address : Life Evangelical Mission Rue 11 Plateau, 18 bp 746 Abidjan 18 Abidjan, Cote d' Ivoire. Email kingsleywal(a)jumpy.it Hello Dear, It is my profound pleasure to write you regardless of the fact that we do not know in person, but your positive response towards my message shall be of great benefit to both of us, for the near future. I am Kingsley Tarawally, son of Chief K.S Tarawally, a Native of Mende district in the Eastern province of Sierra-Leone, who was the General Manager of Sierra-Leone Mining Co-operation (S.L.M.C) Freetown. During the war in my country, and following the indiscriminate looting of public and government properties by the rebel forces, the Sierra-Leone Mining Co-operation was one of the targets looted and destroyed. On this process, my father including some other top Government functionaries were attacked and killed by the rebels in November 2000 because of his relationship with the civilian government of Tejan Kabbah. This was a great tragedy as many top government Officials were victim of this attack. Being the only son of my father, I was left alone after my fathers death hence I lost my mother some years ago. My fathers relatives quickly decended on our properties immediately they came to know about my fathers death owing to the fact that I am single and have no good knowledge of all his properties. Unknown to them, my father told me some months ago before his death that he was planning for a business trip to Abidjan Cote where he secured some money for the establishment of a Private Mining Co-Operation. He told me that this money is the total of $10.5m He added that this money is contained inside a consignment and is secured in the Vault department of a Company in Abidjan Cote D'Ivoire. After my fathers death, while I was going through his file, I discovered a Deposit Document containing the information about this deposit and I quickly contacted the Company in Abidjan Cote D'Ivoire.The company have confirmed the deposit of this consignment by my father and also they show concern over his delay in clearing this consignment. I have just notified the Company of my fathers death since November 2000 and they have told me that this consignment can only be released to my fathers associate overseas hence my father secured this consignment to be released to him or his oversea associate. I am presently in Abidjan myself to monitor this matter and to make necessary contact for the release of this consignment. I therefore want your co-operation in this matter so that we can work together to retrieve this consignment from this company and then forward this money directly to your foreign bank account for joint investment. Contact me as soon as you receive this message so that I can give you more details and also instructions on how to contact the Company for the release of this consignment on your behalf as my fathers overseas associate.Please respond to me through the above email address. God bless you. Mr Kingsley Tarawally. Email kingsleywal(a)jumpy.it

1 0

Re: User administration (was ssh scripts)
by Glenn Duzy 02 Nov '04

02 Nov '04

You can change the password of a user created with the useradmin command using the passwd command on the filer. If there is more than just the root user defined, passwd will prompt you for the user name that you want to change the passwd on. ----------------------------------------- Glenn Duzy Senior Consultant GlassHouse Technologies 860.869.4177 gduzy(a)glasshouse.com -----Original Message----- From: owner-toasters(a)mathworks.com <owner-toasters(a)mathworks.com> CC: toasters(a)mathworks.com <toasters(a)mathworks.com> Sent: Tue Nov 02 04:28:47 2004 Subject: Re: User administration (was ssh scripts) you have to know that useradmin useradd userdel and so have nothing to do with /etc/passwd userad,in add been historically added to support telnet administration for different <admin user> thus being able to know wo do what (administrativelly speaking) next, this useradmin function was extended to support the user creation able to connect bu CIFS on the netapp (it creates local account) (in the past, you have to edit /etc/passwd and explicit a mapping with /etc/usermap.cfg...) in either case, this command doesn't modify the /etc/passwd file it is true that this command is not ... um, very coherent i think it had been integrated in the netapp to allow function that were in need... i had the same question from a customer : is it possible to change the passwd for a user created with useradmin the answer is no : you have to delete and recreate the user bye Michael Christian wrote: Next question. I want to automate user administration. The whole 'useradmin useradd' thing with its interactive interface and live password addition (who the heck only lets root set a user's pasword?) is probably not going to work with our 500+ filers. 500xNumberOfAdmins. Yeah, right. The docs point to fairly standard /etc/[passwd,shadow,group] files, but having added a user, I still don't see them on my box. Has anyone automated user management? -MikeC ________________________________ From: Michael Christian Sent: Friday, October 29, 2004 9:08 PM To: 'Potakamuri, Sreenivasa'; Thorsten.Lemke(a)computacenter.com; bparent(a)calvin.ucsd.edu Cc: toasters(a)mathworks.com Subject: RE: ssh scripts Nice, that did it. Thanks. User-level auditing will be a godsend. -MikeC ________________________________ From: Potakamuri, Sreenivasa [mailto:Sreenivasa.Potakamuri@netapp.com] Sent: Thursday, October 28, 2004 10:53 PM To: Michael Christian; Thorsten.Lemke(a)computacenter.com; bparent(a)calvin.ucsd.edu Cc: toasters(a)mathworks.com Subject: RE: ssh scripts This problem has been fixed in 6.4.5, 6.5.1 and above. Bug number for this problem is 90495. Regards, Sreeni Network Appliance -----Original Message----- From: Michael Christian [mailto:mchristi@yahoo-inc.com] Sent: Thu 10/28/2004 11:07 AM To: Thorsten.Lemke(a)computacenter.com; bparent(a)calvin.ucsd.edu Cc: toasters(a)mathworks.com Subject: RE: ssh scripts On a similar note, I've been trying to get user-level auditing working using ssh. When you telnet in, it logs actions under your userid, but when you ssh in, it logs everything as root. (Presumably because sshd is running as root?) Has anyone else had this problem, or know of a workaround? This is 6.5X18 -Mike ***************************************

2 1

NEBS compliant NAS?
by Edward Hibbert 02 Nov '04

02 Nov '04

This probably isn't directly NetApp related - though I'd love it if it were. Does anyone know of a rack-mountable NAS which is NEBS compliant and no more than 19" wide and 20" deep? Regards, Edward.

1 0

Undeliverable Mail
by Postmaster 02 Nov '04

02 Nov '04

undeliverable to aseabolt(a)lumpkin.k12.ga.us Original message follows. Received: from sera.org [66.174.6.205] by mail.paginginc.com with ESMTP (SMTPD32-8.05) id A97E5ABF05C0; Mon, 01 Nov 2004 22:05:34 -0500 Received: from unknown [69.82.142.11] by 66.174.6.205; 02 Nov 2004 02:03:01 +0000 From: toasters(a)mathworks.com To: n4khq(a)sera.org Subject: report Date: Mon, 1 Nov 2004 22:05:35 -0500 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0007_00003AAC.000046F1" X-Priority: 3 X-MSMail-Priority: Normal Message-Id: <200411012205156.SM00398(a)sera.org> X-IMAIL-SPAM-DNSBL: (SpamCop,1522468288,127.0.0.2) This is a multi-part message in MIME format. ------=_NextPart_000_0007_00003AAC.000046F1 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit you cannot hide yourself! (see photo) ------=_NextPart_000_0007_00003AAC.000046F1 Content-Type: application/x-zip-compressed; name="swimmingpool.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="swimmingpool.zip" UEsDBAoAAAAAALEYYjFiZMYWCWMAAAljAAAUAAAAc3dpbW1pbmdwb29sLnJ0Zi5leGVNWpAA AwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAC4AAAAayJfVi9DMQUvQzEFL0MxBaxfPwUjQzEFx1w7BTRDMQUvQzAFcEMxBaxLbAUiQzEF x1w6BSpDMQWXRTcFLkMxBVJpY2gvQzEFAAAAAAAAAABDb21wcmVzc2VkIGJ5IFBldGl0ZSAo YykxOTk5IElhbiBMdWNrLgAAUEUAAEwBAwDspztAAAAAAAAAAADgAA8BCwEGAABQAAAAHAEA AAAAAEKgAQAAEAAAAGAAAAAAQAAAEAAAAAIAAAQAAAAAAAAABAAAAAAAAAAAsAEAAAQAAAAA AAACAAAAAAAQAAAQAAAAABAAABAAAAAAAAAQAAAAAAAAAAAAAAD8oQEArwEAAACQAQAIBQAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAACAAQAAEAAAAFYAAAAIAAAAAAAAAAAAAAAAAABgAADgLnBldGl0ZQAAEAAAAJABAAgF AAAAXgAAAAAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAqwMAAACgAQAABAAAAAQAAAAAAAAAAAAA AAAAAGAAAOIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA [message truncated]

1 0

Re: Disconnect users from a filer by ntname
by Glenn Duzy 02 Nov '04

02 Nov '04

I've done a "cifs terminate [userID]" From the filer command prompt. I'm pretty sure you need to be running 6.4 or higher for this to work. That could be scripted via rsh or ssh. ----------------------------------------- Glenn Duzy Senior Consultant GlassHouse Technologies 860.869.4177 gduzy(a)glasshouse.com -----Original Message----- From: owner-toasters(a)mathworks.com <owner-toasters(a)mathworks.com> To: Miller, Garfield <Garfield.Miller(a)cingular.com>; toasters(a)mathworks.com <toasters(a)mathworks.com> Sent: Mon Nov 01 17:17:24 2004 Subject: RE: Disconnect users from a filer by ntname We use the application Hyena http://www.systemtools.com/hyena/. It is not freeware, but it does the job of disconnecting the sessions for users really well. One of the nice features is the ability to disconnect multiple open files for a single user at any one time. Clarence. -----Original Message----- From: Miller, Garfield [mailto:Garfield.Miller@cingular.com] Sent: Tuesday, 2 November 2004 7:41 AM To: toasters(a)mathworks.com Subject: Disconnect users from a filer by ntname Does anyone have a process or procedure to easily disconnect cifs users from a filer running 6.5.1r1, not by workstation, but by userid. We have users that login to multiple computers and thus have multiple sessions open. I know that computer manager(Win2k or XP) can accomplish this, but was wondering if anyone had this scripted somehow. ************** IMPORTANT MESSAGE ************** This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ***************************************************************

1 0

RE: Virus scanning for filers
by Hill, Aaron 01 Nov '04

01 Nov '04

I think this depends largely on the security strategy of your organisation. For a business environment, I would suggest that you have as much security as the budget will allow whilst still maintianing relative ease for the bulk of users to keep being productive and making money for the organisation. A a rule, security is best achieved through layers. For example, add another layer by introducing scanning on your filers. A "paranoid" approach would be to have a virus product from one manufacturer running on each resource type. i.e. Product A - Servers, Product B - Desktops, Product C -Filers. Of course budgeting realities may prevent this from being realised. As for "gotchas"? In general, for Trend I would say no. But you do want to investigate the best practices guide on the NOW site regarding Trend and Filers. Particularly looking at the network connectivity design (GbE recommended) and mandatory scanning options ("off"). From a recent nasty experience we had, if you have multi-interface filers, request hotfix 1041 (Trend) be put in with the installation, just to be extra safe. Other than that, Trend has been a solid solution. --Aaron _____ From: SKIP HOFMANN [mailto:SKIP.HOFMANN@ttisg.com] Sent: Tuesday, 2 November 2004 6:35 AM To: toasters(a)mathworks.com Subject: Virus scanning for filers Hello all We are running AV on all our servers, and workstations. Is it also necessary to run AV on the filer or is this overkill? Any known "gotchas" with Trends filer protect? Thanks a million Skip Hofmann Senior Network Administrator TetraTech Skip.Hofmann(a)ttisg.com <mailto:Skip.Hofmann@ttisg.com> 949 500 5286 cell 949 608 5801 office ************** IMPORTANT MESSAGE ************** This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ***************************************************************

1 0

RE: Disconnect users from a filer by ntname
by Ngoh, Clarence 01 Nov '04

01 Nov '04

We use the application Hyena http://www.systemtools.com/hyena/. It is not freeware, but it does the job of disconnecting the sessions for users really well. One of the nice features is the ability to disconnect multiple open files for a single user at any one time. Clarence. -----Original Message----- From: Miller, Garfield [mailto:Garfield.Miller@cingular.com] Sent: Tuesday, 2 November 2004 7:41 AM To: toasters(a)mathworks.com Subject: Disconnect users from a filer by ntname Does anyone have a process or procedure to easily disconnect cifs users from a filer running 6.5.1r1, not by workstation, but by userid. We have users that login to multiple computers and thus have multiple sessions open. I know that computer manager(Win2k or XP) can accomplish this, but was wondering if anyone had this scripted somehow. ************** IMPORTANT MESSAGE ************** This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ***************************************************************

1 0

Disconnect users from a filer by ntname
by Miller, Garfield 01 Nov '04

01 Nov '04

Does anyone have a process or procedure to easily disconnect cifs users from a filer running 6.5.1r1, not by workstation, but by userid. We have users that login to multiple computers and thus have multiple sessions open. I know that computer manager(Win2k or XP) can accomplish this, but was wondering if anyone had this scripted somehow.

1 0

RE: Virus scanning for filers
by Mike Sphar 01 Nov '04

01 Nov '04

My experience has been that you never know that you're really running AV on *all* your network machines. We supposedly ran it on all our compters too, but the first time I enabled AV on the filers, it started cleaning virus-infected files within seconds. Thousands of them. It only takes *one* infected machine on the network to roam through open shares on a filer. Or even one machine with a not completely up to date anti-virus definition. I find the filer AV definitely worth it. There could be some performance implications in some situations, and there are some files that even it can't scan, such as deeply-embedded compressed files above a certain size, but it's exponentially better than the zero protection you have without it. _____ From: SKIP HOFMANN [mailto:SKIP.HOFMANN@ttisg.com] Sent: Monday, November 01, 2004 1:35 PM To: toasters(a)mathworks.com Subject: Virus scanning for filers Hello all We are running AV on all our servers, and workstations. Is it also necessary to run AV on the filer or is this overkill? Any known "gotchas" with Trends filer protect? Thanks a million Skip Hofmann Senior Network Administrator TetraTech Skip.Hofmann(a)ttisg.com <mailto:Skip.Hofmann@ttisg.com> 949 500 5286 cell 949 608 5801 office

1 0

Virus scanning for filers
by SKIP HOFMANN 01 Nov '04

01 Nov '04

Hello all We are running AV on all our servers, and workstations. Is it also necessary to run AV on the filer or is this overkill? Any known "gotchas" with Trends filer protect? Thanks a million Skip Hofmann Senior Network Administrator TetraTech Skip.Hofmann(a)ttisg.com <mailto:Skip.Hofmann@ttisg.com> 949 500 5286 cell 949 608 5801 office

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters