toasters

toasters@lists.teaparty.net

13531 discussions

CIFS home directory permissions
by Eino Tuominen 18 Sep '15

18 Sep '15

Hello, I'm trying to debug a weird phenomenon here. We see user home directories permissions change "automagically" so that there is full access granted to the user himself and the same access also to ther SYSTEM account. I'm pretty sure this has started after we migrated our home directories from 7-mode to Clustered OnTAP (8.2.3P3 at the moment). Does anybody have a clue what's going on? -- Eino Tuominen

2 1

Anyone able to install OnCommand Performance Manager on CentOS 6 machine?
by Scott Classen 18 Sep '15

18 Sep '15

Hello, I'm trying to install OnCommand® Performance Manager on a freshly installed CentOS 6.7 machine. Has anyone done this? or is RHEL the only linux distro supported? snippet from yum install *.rpm command: Unsupported operating system version detected. This installation requires Red Hat Enterprise Linux 6.5 or later. The installation will terminate now. error: %pre(ocie-serverbase-1.3.0-2015.06.119.x86_64) scriptlet failed, exit status 255 Error in PREIN scriptlet in rpm package ocie-serverbase-1.3.0-2015.06.119.x86_64 error: install: %pre scriptlet failed (2), skipping ocie-serverbase-1.3.0-2015.06.119 Verifying : ocie-serverbase-1.3.0-2015.06.119.x86_64 1/1 Failed: ocie-serverbase.x86_64 0:1.3.0-2015.06.119 Thanks, Scott

5 7

Cifs administrative access push to the entire qtree
by Jeff Cleverley 18 Sep '15

18 Sep '15

Greetings, I inherited a group of filer that are heavily cifs. There are multiple clusters of different hardware and different OS levels. All are 7-mode. What the managers found is that people have changed directory permissions and excluded administrators or people with full control. When a problem pops up they have to find one of the directory owners to get added in order to fix an issue. We don't really want to push the permissions to all sub-directories in an overwrite mode because we could break tool access, or grant access people may not have had before, etc. Is there a way to add administrators to a tree from the NetApp or a way to do this that doesn't remove previous access control? The managers already have full control at the share level. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611

3 4

DFM and SnapVault
by Eric Peng 15 Sep '15

15 Sep '15

I am hard pressed to find good documentation on this.. Has anyone had success in setting up SnapVault relationships in DFM so they can be more easily managed and alerted on? Found some forum postings that seemed to suggest that SnapVault relationships could be created in OnCommand System Manager or CLI and then "imported" into DFM, but so far have not had any luck in getting DFM to detect these so called "external relationships".. =( Am using the IBM version of DFM (version 5.1) by the way. Any helpful links or suggestions on this would be appreciated. Thanks, Eric Peng | Systems Administrator Esri | 380 New York St. | Redlands, CA 92373 | USA T 909 793 2853 x3567 | M 909 367 1691 epeng(a)esri.com<mailto:epeng@esri.com> | esri.com<http://esri.com/>

1 0

Qtree exporting
by Fred Grieco 02 Sep '15

02 Sep '15

I'm transitioning a volume with a qtree in it from 7 Mode to c mode. I have the volume replicated and the cluster sees the qtree. Is there a way to nfs export that /vol/qtree qtree as "/qtree?" I don't see any way to actually mount a qtree into the namespace. I can make an export policy on a qtree, but that just creates alternate permissions. You can do this on the CIFS side... Looks like I can share anything as anything. This is 8.2.3 cmode ontap. Tia, Fred

2 1

DFS referrals and 7TT?
by Basil 01 Sep '15

01 Sep '15

I just discovered automatic node referrals <https://library.netapp.com/ecmdocs/ECMP1366834/html/GUID-0A5772A4-A6D7-4A00…> and I was wondering: could this be used to migrate CIFS workloads from 7-mode to CDOT in a more granular way than the current 7TT? Right now, if I transition a subproject in 7TT, it finishes by removing the IP address from the 7-mode box. This is sensible, because if it didn't, there would be a collision. This is a problem for me because I am unlikely to be able to find a common outage window for the hundreds of applications that use this IP address for file repositories. Right now, my plan is to schedule an omnibus outage window, and anyone who can't live with that will be welcome to migrate manually ahead of time. Based on my understanding of how automatic node referrals use DFS referrals, shouldn't it be possible to use this within 7TT? Basically, I am imagining a scenario where a share migration to a CDOT SVM would look like: -snapmirror volume to CDOT -disconnect clients -final sync -restart share on 7-mode, but now all SMB session requests get DFS redirected to the LIF on CDOT When all data on 7-mode is migrated, the IP address would be added to the CDOT SVM and the redirection could be stopped (or turned into an automatic node referral setup). Basil

1 0

cifs_other_ops and cifs_ops
by Rhodes, Richard L. 01 Sep '15

01 Sep '15

I'm looking at the Performance Manager graph for a volume that is a CIFS share. It graph has 4 stats: cifs_read_ops, cifs_write_ops, cifs_other_ops, cifs_ops. CIfs_reads_ops and Cifs_write_ops are VERY few totaling only 0-30/sec, but mostly at 0. Cifs_other_ops is a constant 130/s to 180/s, but NEVER dropping below a floor of 130/s. Cifs_ops is similar to Cifs_other_ops, but somewhat higher. The help metrics don't exactly help explain these. Q) What is cifs_other_ops and cifs_ops? Q) What would a CIFS client be doing to cause few reads/writes, but lots of cifs_other_ops and cifs_ops? For example, at one point I have these values: cifs_read_ops 3 cifs_write_ops 28 cifs_other_ops 135 cifs_ops 160 Thanks Rick ----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.

3 2

RE: Questions about Cert CAs with software updates in CDOT
by Vanderyt, Jeff 28 Aug '15

28 Aug '15

We use http to do the software loads. We use one of OnCommand servers we have, which have self-signed certs. We temporarily disable https, and pull the code onto the controllers: system node image get–node *–package http://x.x.x.x:8080/ontap/image_name This has worked for through going from 8.1 and up to 8.2.3P3. ********************************************************** Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues

2 1

Questions about Cert CAs with software updates in CDOT
by Tony Bar 28 Aug '15

28 Aug '15

Toasters - This is a new one to me, but I'm sure my customer here isn't the only one out there who issues self-signed certs with custom names. Has anyone else run into this before and if so, what did you have to do to resolve? We've tried doing a symlink from her cert to the expected name/path but that doesn't help. Is there perhaps a hidden option like "-k -O" in Unix application "curl" or an alternate method for downloading the updates? Output of what I'm seeing below, any help would be appreciated: <clustername>::> system node image update -node <cluster>-01 -package https://<webhost>/util/83P2_q_image.tgz<https://monitor1.sjc1.prod.ce/util/83P2_q_image.tgz> -replace-package true Install Failed. Failed to download package from https://<webhost>/util/83P2_q_image.tgz<https://monitor1.sjc1.prod.ce/util/83P2_q_image.tgz>. Error: Problem with the SSL CA cert (path? access rights?) : error setting certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none Error: command failed: Install Failed. Failed to download package from https://<webhost>/util/83P2_q_image.tgz<https://monitor1.sjc1.prod.ce/util/83P2_q_image.tgz>. Error: Problem with the SSL CA cert (path? access rights?) : error setting certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none We do not have access to FTP or TFTP options, the customer is a financial services company so their network is pretty locked down without many (if any) options to work with. Thanks again! Anthony Bar tbar(a)berkcom.com<mailto:tbar@berkcom.com> (650) 207-5368 www.berkcom.com<http://www.berkcom.com/>

3 3

cDOT: CN1610 interconnehct switch monitoring
by Momonth 28 Aug '15

28 Aug '15

Hi, I wonder what you guys employ for cDOT interconnect switches monitoring? I assume SNMP is the way to go, maybe you can share some scripts with this community? Cheers, Vladimir

1 0

Deswizzle
by Mike Michalakis 25 Aug '15

25 Aug '15

Hi I have a storage system that is under stress, and as luck has it I need to added more stress by loading it with a large cifs related volume, this is a transition from a 7-Mode ontap system Every time we complete the transition, the system spikes disks 100%, cpu 100%, etc. On the perfstat we see deswizzling running. This is a normal operation every time a snapmirror break-off occurs, that is the deswizzle part of the equation.. When we take this volume offline, operations go back to normal. My question, what is the result of disabling deswizzle is the short term, do I look functionality, e.g. vol move? To turn off deswizzle: Nodeshell*> options wafl.deswizzle.enable off To turn on deswizzle: Nodeshell*> options wafl.deswizzle.enable on Backround: FAS3210, C-Dot 8.2.3, SAS disks

9 18

RBAC - Capabilities
by Philbert Rupkins 25 Aug '15

25 Aug '15

Hello Toasters, The DATA ONTAP documentation notes the following in regard to "cli" related capabilities: ---begin doc----- cli-* grants the specified role the capability to execute all supported CLI commands. cli- cmd* grants the specified role the capability to execute all commands associated with the CLI command cmd. For example, the following command grants the specified role the capability to execute all vol commands: useradmin role modify status_gatherer -a cli-vol* ------end doc---- Based on this info, I know that granting cli-vol* grant the role the capability to execute all commands associated with the CLI command vol. I found another KB article that instructs me to grant the cli-vol (no asterisk) capability to a role. Is there a difference between "cli-vol" and "cli-vol*" ? Thanks, Phil

1 0

Checksums for array LUNs
by Basil 23 Aug '15

23 Aug '15

Does anyone have any advice regarding checksums for array LUNs? My understanding is that AZCS saves you about 12% capacity but requires more filer CPU utilization for reads. What kind of impact does it have?

2 2

OCUM 6.2
by Sayla, Mustafa 18 Aug '15

18 Aug '15

I recently installed OCUM 6.2 and performance manager appliances in our environment. After few days I have started receiving the following messages from both our production and DR cluster every 15 minutes. I have checked the cluster but I don't see anything wrong with it. Any ideas? "Trigger Condition - The cluster (cluster name and IP) is not reachable. Cluster (cluster name) performance events have stopped being sent by Performance Manager server (oncommand server name) This condition could be caused by a communication issue between Unified Manager and Performance Manager, or between Performance Manager and cluster (cluster name)" Mustafa Sayla Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

4 12

What vserver group-mapping in cDOT 8.3 does?
by Borzenkov, Andrei 07 Aug '15

07 Aug '15

All documents I can find (including multi-protocol FAQ) say that group mapping is not supported. Then what "vserver group-mapping" does and when these mappings are applied? TIA -andrei

2 1

FAS2554 \ ADP
by Mike Gossett 06 Aug '15

06 Aug '15

Hi all, First, things for a great forum. I learn a lot from reading these posts, and I appreciate everyone sharing their experiences. I am in the middle of a transition for a client whom had 2 2040 systems (HA pair at primary site; single controller at DR) to an 8020 c-mode system at HQ, and a FAS2554 at DR. We are using hybrid sata\flash pool at the primary, and will have 3 total shelves (including the onboard shelf in the 2554) of 2TB sata out of the gate. Typically, I am deploying smaller systems with 24 disks where the ADP is highly desirable from a performance and capacity standpoint. However, in this instance, I am leaning towards converting the system over to using dedicated cluster disks, such that the balance of the disks onboard the FAS2554 are the same size as the other two shelves, so I can have 1-2 large aggregates, and not be limited by the boundary of the artificially smaller shared ADP disks. So, I really have two questions. First, what have your experiences been? Would you agree with my gut feeling that I am better off having the dedicated cluster disks? Capacity in this environment is growing somewhat rapidly, and I would expect that in 2 years we will be adding at least one more shelf to the mix. Second, assuming you feel that moving off ADP is the right approach, can anyone point me in the direction of an article or high level steps in terms of how to accomplish this? I'm fine with disruptive or destructive activities as the system is not yet in DR (though I've completed the transition at HQ to the new cluster and decommed the legacy 7m system, and as such am anxious to resume replication). Thanks in advance, Mike

1 0

Re: CIFS on Mac
by Ryan Pugatch 06 Aug '15

06 Aug '15

Just wanted to follow up - does anyone have shares with significant amounts of data and experience slow directory listings when accessing from Mac via CIFS? Thanks, Ryan On Tue, Aug 4, 2015, at 05:24 PM, Ryan Pugatch wrote: > Actually, to Andre's point, spotlight doesn't work on CIFS, only AFP. > > In talking with one of our desktop team folks, the specific issue > isn't due to indexing (though that is an issue, not having it..) but > specifically getting directory listings on the CIFS share from OS X is > very slow. Windows users do not have that problem. > > > On Tue, Aug 4, 2015, at 05:22 PM, Tony Bar wrote: >> Ryan – >> >> You can disable spotlight on a per-filesystem basis, see the bottom >> of the link for details. >> >> *Anthony Bar* >> 650.207.5368 >> tbar(a)berkcom.com >> *Berkeley Communications* >> www.berkcom.com[1] >> >> *From:* Ryan Pugatch [mailto:rpug@lp0.org] >> >> *Sent:* Tuesday, August 4, 2015 2:19 PM *To:* Tony Bar *Cc:* >> Toasters(a)teaparty.net *Subject:* Re: CIFS on Mac >> >> I don't think we would want to disable spotlight across the board. >> It is useful in some cases. >> >> Thanks, >> Ryan >> >> >> On Tue, Aug 4, 2015, at 04:03 PM, Tony Bar wrote: >>> Ryan - >>> >>> This may help: >>> >>> http://recomhub.com/blog/how-to-disable-or-enable-spotlight-in-mac-os-x-yos… >>> >>> Anthony Bar >>> 650.207.5368 >>> >>> tbar(a)berkcom.com Berkeley Communications >>> >>> www.berkcom.com[2] >>> >>> On Aug 4, 2015, at 1:01 PM, Ryan Pugatch <rpug(a)lp0.org> wrote: >>> >>>> Hi all, >>>> >>>> Performance when accessing netapp CIFS shares from a Mac is >>>> frustrating, >>>> and in some cases downright unusable. >>>> >>>> It seems mostly related to OS X's desire to index everything with >>>> Spotlight. Directory listings are slow, and if you're any way >>>> distant >>>> from the netapp, you'll find latency makes it completely unusable. >>>> >>>> Have any of you found how to deal with this? >>>> >>>> Thanks, >>>> Ryan >>>> _______________________________________________ >>>> Toasters mailing list >>>> Toasters(a)teaparty.net >>>> http://www.teaparty.net/mailman/listinfo/toasters > > _________________________________________________ > Toasters mailing list Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters Links: 1. http://www.berkcom.com/ 2. http://www.berkcom.com/

1 0

Virtualized Exchange 2010 on cDOT
by Milazzo Giacomo 05 Aug '15

05 Aug '15

Hi all, we're going to migrate a running environment in 7Mode to cDOT and, nevertheless I've studied all docs about best practice and DR scenarios I've a lot of doubts about best architecture. Now we have. Production site. 2 E2K10 virtualized Server with a two copies of db in DAG environment These 2 servers have their data on different controllers of an HA system and db are balanced on two controllers/server some as active and some as passive (but you can imagine also one server running active copies and the second the passive ones) Servers are this way built: C:\ system disk with Windows and Exchange binaries on a NFS vmdk with vmx in the same path Database disks on VMware iSCSI raw devices (this because Microsoft does not support NFS vmdk for its data...no comment!..we know...) For obvious reason there's also another little iSCSI datastore containing the "pointer" to those raw device, the mapper (rdm). This is the way it works Raw devices are managed by SnapDrive for there's also SME running for backup/mirror. DR site At recover site there's an identical enviroment with all the volumes replicated using SnapMirror modulated by SME VMware SRM together with SRA mount, in case of disaster, the right vmdk, LUNs and so on using its own script so the E2K10 servers at DR can start with all DAG One of the constrain of SRM/SRA in 7Mode is that ALL the volumes with NFS vmdk, iSCSI raw devices and iSCSI ds with rdm MUST belong to the same controller; so that is not possible to spread volumes on different controller/aggregates maybe to increase resiliency...Otherwise SRA will fail. What's about cDOT? Can I create two different SVM, one just for NFS vmdk for binaries and the second one for iSCSI contents? Or have/may have I to put all togheter? Have I to create, as stated in DR scenarios TR from NetApp, two SRM to manage the two Exchange servers or, maybe, to relocate data on different aggregates? Have these two aggregates to be resident on the same node or they can belong to the same node? What's about SRM/SRA constrain? Thanks a lot for any suggestion/idea. Regards,.

2 2

CIFS on Mac
by Ryan Pugatch 04 Aug '15

04 Aug '15

Hi all, Performance when accessing netapp CIFS shares from a Mac is frustrating, and in some cases downright unusable. It seems mostly related to OS X's desire to index everything with Spotlight. Directory listings are slow, and if you're any way distant from the netapp, you'll find latency makes it completely unusable. Have any of you found how to deal with this? Thanks, Ryan

7 10

Re: CIFS on Mac
by Ryan Pugatch 04 Aug '15

04 Aug '15

Yeah, we tried that - no difference. Ryan On Tue, Aug 4, 2015, at 04:26 PM, Clark, André M. wrote: > Spotlight is only supported on AFP-based network volumes. CIFS and > NFS volumes aren’t indexed. > > Are you connecting to those shares via cifs://server/share or > smb://server/share? There was an issue with performance if you were > mounting via cifs:// vs. smb://. > > Regards, > > André M. Clark[1]| Sr. Solutions Architect | 917.388.8236 *Tell me I > will forget... Show me I may remember... Involve me I WILL > UNDERSTAND!!! > Start by doing what's necessary, then what's possible, and suddenly you are doing the impossible!!!* > *Red8*[2], An Insight Investments Company > www.red8.com[3] > > *From:* toasters-bounces(a)teaparty.net [mailto:toasters- > bounces(a)teaparty.net] *On Behalf Of *Tony Bar *Sent:* Tuesday, 4 > August, 2015 16:04 *To:* Ryan Pugatch <rpug(a)lp0.org> *Cc:* > Toasters(a)teaparty.net *Subject:* Re: CIFS on Mac > > Ryan - > > This may help: > > http://recomhub.com/blog/how-to-disable-or-enable-spotlight-in-mac-os-x-yos… > > Anthony Bar > 650.207.5368 > tbar(a)berkcom.com > Berkeley Communications > www.berkcom.com[4] > > > On Aug 4, 2015, at 1:01 PM, Ryan Pugatch <rpug(a)lp0.org> wrote: >> Hi all, >> >> Performance when accessing netapp CIFS shares from a Mac is frustrating, >> and in some cases downright unusable. >> >> It seems mostly related to OS X's desire to index everything with >> Spotlight. Directory listings are slow, and if you're any way distant >> from the netapp, you'll find latency makes it completely unusable. >> >> Have any of you found how to deal with this? >> >> Thanks, >> Ryan >> _______________________________________________ >> Toasters mailing list >> Toasters(a)teaparty.net >> http://www.teaparty.net/mailman/listinfo/toasters Links: 1. mailto:Andre.Clark@redeight.com 2. http://www.red8.com/ 3. http://www.red8.com/ 4. http://www.berkcom.com/

1 0

stuck on a configuation puzzle: NFSv3 in 8.3, netgroups and export rules
by Rue, Randy 04 Aug '15

04 Aug '15

Hello All, Sent the below to our NetApp contacts but often you beautiful people have the answers I need, better and before the vendor does. Need to limit an NFS export on an 8.3 SVM to either a NIS netgroup or an AD/LDAP nisNetgroup, preferably the LDAP. See the below. Since I wrote the below, I've also determined that the working vserver appears to have a working copy of the netgroups in cache and the broken one does not: gold::*> vserver export-policy netgroup cache show -vserver foo There are no entries matching your query. gold::*> vserver export-policy netgroup cache show -vserver pyrite-gold Vserver Netgroup State -------- ---------- ------------ pyrite-gold netgroup-cluster-rcs.fhcrc.org ready The documentation says that "One of the methods you can use to match clients in export policy rules is by using hosts listed in netgroups. You can load netgroups from a uniform resource identifier (URI) into Storage Virtual Machines (SVMs) as an alternative to using netgroups stored in external name servers (vserver services name-service netgroup load)." I'm specifically hung up on "as an alternative to using netgroups stored in external name servers." What is the method I'm missing that manually loading the netgroups via a URL (yuck) is an alternative to? Hope to hear from you, Randy in Seattle (sent to NetApp) ----------------------------------------------------------- Guys, We're attempting to set up NFS access for an SVM to a NIS netgroup or its LDAP equivalent and while I was able to do this once on a test SVM we're now unable to recreate it. On our old gear, we had some issues trying to make NIS work and eventually scripted a flat file dump of our netgroup file to the vFilers, then used the local file for hostgroup based access to NFS exports. That group name is @CLUSTER in /etc/exports That same script also takes the members of our netgroup file and exports them to an LDAP object in our AD, a nisNetgroup object called netgroup-cluster-rcs.xxx.org. That group is currently added to the export policy as @netgroup-cluster-rcs.xxx.org Listing the AD object as above works for an SVM called pyrite-gold, a test vserver. My recollection is I set that one up pretty easily after realizing NIS wasn't working. I don't recall doing anything at the CLI. I can mount an export quickly and correctly from a linux host that is a member of the group. Now we're trying to set up the same config on other SVMs ("foo") and document the steps for production and can't make it work. We've compared the config on the new SVM and pyrite-gold every which way with no luck. Gone over the GUI config a handful of times. I've also looked deeper from the CLI and found a few differences but changing them didn't solve the problem. When we try to mount the export, the attempt retries a handful of times and eventually times out: [root@RANDINO mnt]# mount foo:foo_nfs foo/ mount: mount to NFS server 'foo' failed: timed out (retrying). mount: mount to NFS server 'foo' failed: timed out (retrying). mount: mount to NFS server 'foo' failed: timed out (retrying). mount: mount to NFS server 'foo' failed: timed out (retrying). mount: mount to NFS server 'foo' failed: timed out (giving up). [root@RANDINO mnt]# >From the CLI, I did find that ns-switch for "foo" was set only for "files." Fixed that using vserver services modify with no improvement. Now all matches: gold::*> vserver services name-service ns-switch show Source Vserver Database Order --------------- ------------ --------- foo hosts files, dns foo group files foo passwd files foo netgroup ldap, nis, files foo namemap files pyrite-gold hosts files, dns pyrite-gold group files pyrite-gold passwd files pyrite-gold netgroup ldap, nis, files pyrite-gold namemap files I also took a look at LDAP client settings: gold::*> vserver services ldap client show -instance Vserver: foo Client Configuration Name: foo LDAP Server List: xxx Active Directory Domain: fhcrc.org Preferred Active Directory Servers: xxx Bind Using the Vserver's CIFS Credentials: true Schema Template: RFC-2307 LDAP Server Port: 389 Query Timeout (sec): 3 Minimum Bind Authentication Level: anonymous Bind DN (User): sops-ldap Base DN: dc-xxx,dc=org Base Search Scope: subtree User DN: - User Search Scope: subtree Group DN: - Group Search Scope: subtree Netgroup DN: - Netgroup Search Scope: subtree Vserver Owns Configuration: true Use start-tls Over LDAP Connections: false Allow SSL for the TLS Handshake Protocol: false Enable Netgroup-By-Host Lookup: false Netgroup-By-Host DN: - Netgroup-By-Host Scope: subtree Vserver: pyrite-gold Client Configuration Name: pyrite-gold LDAP Server List: xxx Active Directory Domain: fhcrc.org Preferred Active Directory Servers: xxx Bind Using the Vserver's CIFS Credentials: true Schema Template: RFC-2307 LDAP Server Port: 389 Query Timeout (sec): 3 Minimum Bind Authentication Level: anonymous Bind DN (User): tinsel-ldap Base DN: dc=xxx,dc=org Base Search Scope: subtree User DN: - User Search Scope: subtree Group DN: - Group Search Scope: subtree Netgroup DN: - Netgroup Search Scope: subtree Vserver Owns Configuration: true Use start-tls Over LDAP Connections: false Allow SSL for the TLS Handshake Protocol: false Enable Netgroup-By-Host Lookup: false Netgroup-By-Host DN: - Netgroup-By-Host Scope: subtree 2 entries were displayed. gold::*> Note that "Bind Using the Vserver's CIFS Credentials" was set to false for foo, but again, changing that from the CLI didn't make any difference. I know I never touched that setting on pyrite-gold, is it set that way because (maybe) I ran or re-ran CIFS setup after setting up NIS? We need help on this pretty quickly: either a way to make NIS work for netgroup control of an NFS export policy, or a way to make it work based on the AD nisNetgroup. Given a choice we'd prefer the LDAP way. Is there a NetApp doc I've overlooked? Randy

4 3

OCUM 6.3RC1 CLI?
by Scott Eno 30 Jul '15

30 Jul '15

Hi, Anyone know how exactly to utilize the “cli” commands in OCUM 6.3RC1? It’s listed as a new feature, but nothing much in the docs on how to run these commands. Is this only for the Linux or Windows install and not available on the VMware appliance? Thanks. — Scott Eno s.eno(a)me.com

1 0

fsecurity job monitoring.
by Jeff Cleverley 30 Jul '15

30 Jul '15

Greetings, We have a filer running 7.3.7P1 and we had to run fsecurity to correct permissions/ownership of a tree. Is there any way to see anything to check the progress, see what path it is updating, etc? We have no idea how long this job will take and it would be nice if there was something showing what it was doing. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 2

NDO & CIFS
by Milazzo Giacomo 29 Jul '15

29 Jul '15

Hi all, with cDOT is there a way to avoid that CIFS sessions fall during a takeover? In 7 Mode when an NDU operation is performed CIFS must is interrupted and open CIFS sessions fall if not closed before. Is there a way using failover groups of the data LIF to avoid this? Regards,

4 9

I've created a slack chat for Netapp users
by Woods, Bill 29 Jul '15

29 Jul '15

I would like access as well. Regards, Bill -----Original Message----- From: toasters-bounces(a)teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of toasters-request(a)teaparty.net Sent: Wednesday, July 29, 2015 5:49 AM To: toasters(a)teaparty.net Subject: Toasters Digest, Vol 48, Issue 70 Send Toasters mailing list submissions to toasters(a)teaparty.net To subscribe or unsubscribe via the World Wide Web, visit http://www.teaparty.net/mailman/listinfo/toasters or, via email, send a message with subject or body 'help' to toasters-request(a)teaparty.net You can reach the person managing the list at toasters-owner(a)teaparty.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Toasters digest..." Today's Topics: 1. Re: Deleted Performance Manager (Bachman, Philip) 2. Re: Deleted Performance Manager (John Stoffel) 3. Re: Deleted Performance Manager (John Stoffel) 4. fsecurity job monitoring. (Jeff Cleverley) 5. I've created a slack chat for Netapp users (Basil) 6. Re: I've created a slack chat for Netapp users (Tony Bar) 7. Re: I've created a slack chat for Netapp users (Ed Morgan) ---------------------------------------------------------------------- Message: 1 Date: Mon, 27 Jul 2015 14:39:41 +0000 From: "Bachman, Philip" <Philip.Bachman(a)netapp.com> To: John Stoffel <john(a)stoffel.org> Cc: "toasters(a)teaparty.net" <toasters(a)teaparty.net> Subject: Re: Deleted Performance Manager Message-ID: <C90B474F-1E25-4677-91E9-07F4C2665692(a)netapp.com> Content-Type: text/plain; charset="us-ascii" John, Sounds like you are still running 1.1 or 1.0. Upgrade to 2.0RC1, currently posted on the NetApp support site and you will find the drill up/drill down you are looking for. -Phil Philip Bachman Consulting Systems Engineer Storage Management Solutions NetApp (908) 420-7800 philip.bachman(a)netapp.com Sent from my iPhone > On Jul 27, 2015, at 8:15 AM, John Stoffel <john(a)stoffel.org> wrote: > > > So has anyone actually found a good use for performance manager? I'm > running the latest version against a fairly busy but unbalanced two > node cluster and I keep getting frustrated that I can't drill down or > move up to get a better overview of things. > > I *know* I've got some performance and space issues, but I'd like to > be able to see the overall system state and then drill down into > things so I understand them better before I make changes or try to fix > stuff. > > Maybe I'm just not using it right, wouldn't be the first time... > > John > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters ------------------------------ Message: 2 Date: Mon, 27 Jul 2015 14:14:17 -0400 From: "John Stoffel" <john(a)stoffel.org> To: Matthew Kleifgen <matthew.kleifgen(a)rackspace.com> Cc: "toasters(a)teaparty.net" <toasters(a)teaparty.net> Subject: Re: Deleted Performance Manager Message-ID: <21942.29945.566566.676308(a)quad.stoffel.home> Content-Type: text/plain; charset=utf-8 Matthew> If you missed it, there was a release on Friday of 2.0RC1. I Matthew> upgraded the 1.1 vsphere version I was using, and I?m very Matthew> impressed with the new version. Instead of having to search Matthew> for only a few object types, the new version has drill down Matthew> from the cluster level and data on lifs, ports, nodes, etc. Matthew> The upgrade was basically painless, also. Totally missed it... now I'll be doing an upgrade on this as well to see how it is improved. It can't get much worse in my book... John ------------------------------ Message: 3 Date: Mon, 27 Jul 2015 22:12:53 -0400 From: "John Stoffel" <john(a)stoffel.org> To: "Waltham\, Christopher" <Christopher.Waltham(a)netapp.com> Cc: "toasters(a)teaparty.net" <toasters(a)teaparty.net> Subject: Re: Deleted Performance Manager Message-ID: <21942.58661.533816.429159(a)quad.stoffel.home> Content-Type: text/plain; charset=utf-8 I've done the upgrade to v2.0RC1 and it's *much* more useful. The upgrade was easy, esp since I only had a week or so's worth of data to convert and upgrade. Still not ideal... I semi wish there was more of a 'top' command. I have used 'qos statistics workload performance show' but it has a bug where you can't see the volume names because they're truncated, which makes it difficult to use. And it doesn't pay attention to the width of the terminal... And you can refresh the display nicely too. But I can't figure out how to widen some of the columns without doing something like: set -showseperator " : " but that still doesn't work properly, the various fields are truncated in 8.2.3P2, though it's also useful to look at statistics show-periodic but it's still not quite there in my mind. Christopher> If you're still on OPM 1.0, upgrading to 1.1 and then to Christopher> 2.0 RC is a little easier than going to 2.0 directly. Christopher> From: <toasters-bounces(a)teaparty.net> on behalf of Matthew Christopher> Kleifgen < matthew.kleifgen(a)rackspace.com> Christopher> Date: Monday, July 27, 2015 at 8:54 AM Christopher> To: Basil <basilberntsen(a)gmail.com>, John Stoffel Christopher> <john(a)stoffel.org> Christopher> Cc: "toasters(a)teaparty.net" <toasters(a)teaparty.net> Christopher> Subject: Re: Deleted Performance Manager Christopher> If you missed it, there was a release on Friday of 2.0RC1. I upgraded the 1.1 vsphere version Christopher> I was using, and I?m very impressed with the new version. Instead of having to search for Christopher> only a few object types, the new version has drill down from the cluster level and data on Christopher> lifs, ports, nodes, etc. The upgrade was basically painless, also. Christopher> -- Christopher> Matt Kleifgen Christopher> From: <toasters-bounces(a)teaparty.net> on behalf of Basil <basilberntsen(a)gmail.com> Christopher> Date: Monday, July 27, 2015 at 7:35 AM Christopher> To: John Stoffel <john(a)stoffel.org> Christopher> Cc: "toasters(a)teaparty.net" <toasters(a)teaparty.net> Christopher> Subject: Re: Deleted Performance Manager Christopher> No, it's barely functional. It's got a lot of promise, but lacks some very basic features I'd Christopher> have expected in 1.0. Storage performance management is the achilles heel of most storage Christopher> vendors, and this is no exception. I hope Netapp will put together some sort of focus group to Christopher> guide the next few iterations. It really does have promise- of all the useless performance Christopher> applications I've used, this one does the coolest useless tricks... like their algorithm for Christopher> determining bully volumes and telling you which layer the problem is at. Christopher> On Mon, Jul 27, 2015 at 8:14 AM, John Stoffel <john(a)stoffel.org> wrote: Christopher> So has anyone actually found a good use for performance manager? I'm Christopher> running the latest version against a fairly busy but unbalanced two Christopher> node cluster and I keep getting frustrated that I can't drill down or Christopher> move up to get a better overview of things. Christopher> I *know* I've got some performance and space issues, but I'd like to Christopher> be able to see the overall system state and then drill down into Christopher> things so I understand them better before I make changes or try to fix Christopher> stuff. Christopher> Maybe I'm just not using it right, wouldn't be the first time... Christopher> John Christopher> _______________________________________________ Christopher> Toasters mailing list Christopher> Toasters(a)teaparty.net Christopher> http://www.teaparty.net/mailman/listinfo/toasters ------------------------------ Message: 4 Date: Tue, 28 Jul 2015 17:00:47 -0600 From: Jeff Cleverley <jeff.cleverley(a)avagotech.com> To: "<Toasters(a)teaparty.net>" <Toasters(a)teaparty.net> Subject: fsecurity job monitoring. Message-ID: <CAANBop2m_QLh=pTHZ+Ctgrg8OJWgmgFLFw_q_7rfFwAQEB0-Xw(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Greetings, We have a filer running 7.3.7P1 and we had to run fsecurity to correct permissions/ownership of a tree. Is there any way to see anything to check the progress, see what path it is updating, etc? We have no idea how long this job will take and it would be nice if there was something showing what it was doing. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters