toasters

toasters@lists.teaparty.net

13515 discussions

CIFS Virus Scanning
by Strange, John 16 May '02

16 May '02

Hey Gang, I need to create a cifs share that I can virus scan monthly, I would like to set this up with CIFS, but the underlying unix permissions seem to override and I get permission denied on the files. Is there anyway I can setup a CIFS share that does not use the underlying unix permissions. I had the share set to full permissions and it does get some of the things but a few locked down unix directories seem to get permission denied on. Unless someone knows a good virus scanner that will run on linux/solaris. Thanks, - John

3 2

Re: CIFS Virus Scanning
by Joseph Bishop 16 May '02

16 May '02

John, Our email group has just gone through research on anti-virus for Solaris. They suggest looking into Trend Micro VirusWall . Cheers, Joe At 11:29 AM 5/16/02 -0400, Strange, John wrote: >Hey Gang, > >I need to create a cifs share that I can virus scan monthly, I would like to >set this up with CIFS, but the underlying unix permissions seem to override >and I get permission denied on the files. Is there anyway I can setup a >CIFS share that does not use the underlying unix permissions. > >I had the share set to full permissions and it does get some of the things >but a few locked down unix directories seem to get permission denied on. > >Unless someone knows a good virus scanner that will run on linux/solaris. > >Thanks, > >- John

1 0

Oracle 8.1 vs. netapp
by Chris Moll 16 May '02

16 May '02

Anybody seen any performance changes with going to oracle 8.1.7 (from 8.0.5) with the databases on netapp storage? (host is sun enterprise 5000, solaris 2.6). Many batch jobs ran dramatically slower on a DB that was upgraded from 8.0 to 8.1. Fingers are getting pointed to the netapp, partly 'cause nobody wants to contemplate down-revving the database. The fact that the jobs ran fine on the netapp before the upgrade would seem to exonerate it but it's a convenient target... A few efforts at tuning the DB seemed to reclaim much of the loss; I'm no oracle expert but it sounds to me like the DB is far from optimal, for example it's set to a 2k block size which seems questionable to me. Anyway - anyone encountered anything similar? Chris Moll Lawrence Berkeley Laboratory

2 3

Diskshelf/FC failure modes
by Garrett Burke 15 May '02

15 May '02

Hi All, I'd like to get some feedback on what issues people have seen in the field with diskshelves and/or FC loop that have caused either decreased performance, an outage or cluster failover. In particular I'd like to know if any particular shelves seem more error prone to either failures or operator error e.g. disks not seated properly, misconfiguration etc and also how people have found the DS14 shelves in the field. I've both SCSI ( F230, F520) and FC filers (F720, F740, F740c, C760, F840 and F840c) with FC8, FC9 and DS14 shelves. Thanks, GB ---- Garrett Burke, Operations Manager, Eircomnet. http://www.eircom.net

1 0

NetIO DMA Re-ACLing
by Lim, Weng Kiam 15 May '02

15 May '02

Hi, Seeking feedback from users who had tried using the NetIQ's DMA (Domain Migration Administrator) to migrate from NT to 2000 domain and perform the re-ACL on all files in the Netapp filer. Any issues that I should watch out for? TIA Weng-Kiam Lim

1 0

unable to create files longer than 16 chars?
by Kelsey Cummings 14 May '02

14 May '02

I've got the spooky problem here, NetApp support is working on it now but I thought I'd ask here too. This morning a unix only qtree filled up, we added space and deleted some cruft from it. So now, it's got _plenty_ of room. However, it won't let anything create a file with a name longer than 16 chars: IE: # touch /nfs/mail/kgc.really.long.filename.weirdness touch: /nfs/mail/kgc.really.long.filename.weirdness: No space left on device # touch /nfs/mail/kgc.fubar It's isolated to the single qtree on a 740 cluster running 5.3.7. This is got us spooked. Anyone ever seen this before? (I hear rumors that sometimes this happens in a CIFS environment, but we are 100% NFS.) It's also be verified to _not_ be a client problem. -- Kelsey Cummings - kgc(a)sonic.net sonic.net System Administrator 300 B Street, Ste 101 707.522.1000 (Voice) Santa Rosa, CA 95404 707.547.2199 (Fax) http://www.sonic.net/ Fingerprint = 7F 59 43 1B 44 8A 0D 57 91 08 73 73 7A 48 90 C5

1 0

RE: 740 SCSI tape controller slot assignment?
by Eisler, Alex 13 May '02

13 May '02

Well, if you take a look at /etc/sysconfigtab, you'll be able to see all the "right" configurations. One of the lines read: allow F740 X201X 1 6,2 2 which actually means that it's slots 6 and 2. (This is from a 6.1.1 system also). There are two options: The manual is right and this file has a typo (happened before) which means you can just correct it in this file and that's it (if the tape is working OK, then this should be the fix). The other option is that the manual is wrong and the file right, which means you have to move the adapter to either slot 2 or 6. I would consult NetApp before doing any of these... Alex. -----Original Message----- From: Jim Davis [mailto:jdavis@cs.arizona.edu] Sent: Monday, May 13, 2002 13:39 To: toasters(a)mathworks.com Subject: 740 SCSI tape controller slot assignment? A 740 running 6.1.1 keeps logging sysconfig: SCSI Adapter card (PN X201X) in slot 1 must be in one of these slots: 6,2. and indeed we do have a DLT7000 hooked up to a SCSI adapter in slot 1. But checking the 6.1.1 configuration guide, "SCSI for tape" shows slot 6 as the first choice ("X1") and slot 1 as the second choice ("X2") and doesn't list slot 2 as a valid choice at all. What am I missing?

1 0

re-registering filer in wins
by neil lehrer 10 May '02

10 May '02

data ontap 6.1x, nfs and cifs on f760s we may need to rebuild our wins databases. we can re-register our nt servers after clearing wins by doing nbtstat -RR from the server. how do you re-register a filer? restarting cifs will do it. i tried C:\WINNT>nbtstat -a file1 -RR and got back "Done Release and Refresh of Registered names" but i don't know if it really did anything. has anyone done this before, i didn't see anything in now other than restarting cifs. ---- regards

3 3

Root Volume Free Space Requirement for DataONTAP Upgrade
by Chuah, Nicholas 10 May '02

10 May '02

Hi all, Is there any documentation or guideline out there for free space requirement on DataONTAP upgrade. Root volume is currently about 12G total with 1.5G free space. Roughly 90% full. Will be looking to upgrade from 5.3.5R2 to 6.1.2R3. Unfortunately increasing the disk capacity is not an option right now. Am I out of luck? Any advice would be appreciated. Regard, Nic

1 0

odd netstat indications
by Leonard, Roger 09 May '02

09 May '02

i have filers with ATM interfaces and two ELANS per ATM NIC configured. each of these ELANS is on its own IP network and all the ifconfig info such as netmask and broadcast look fine. each of these interfaces are separatley registered with my naming services and one of them is used for backup only. however, when doing a netstat and looking at the port connections, it appears that some of the traffic from my other networks is going to both interfaces. i am running routed on all filers and have proper default routes set up. the netstat -rn info looks correct as to which interface is getting routed to. i am confused as to why some of these connections in the netstat output appear to be going to my backup network interfaces. does anyone know of any issues with either routed or ATM LANE on the filers that could be causing this? thanks, roger

2 1

RE: re-registering filer in wins
by jwitham＠takedapharm.com 09 May '02

09 May '02

I just ran the 'ifconfig yadda yadda yadda' at the console from /etc/rc and it reregistered with WINS on one of our dev 880 filers. It hung my telnet session for a second, so I'm assuming it dropped and re-brought up the link... YMMV. -john John Witham Infrastructure Security Architect Takeda Pharmaceuticals North America, Inc. e://jwitham@takedapharm.com A computer lets you make more mistakes faster than any invention in human history, with the possible exceptions of handguns and tequila. -Mitch Ratcliffe -----Original Message----- From: neil lehrer [mailto:nlehrer@ibb.gov] Sent: Thursday, May 09, 2002 10:08 AM To: toasters Cc: Dave Simonds Subject: re-registering filer in wins data ontap 6.1x, nfs and cifs on f760s we may need to rebuild our wins databases. we can re-register our nt servers after clearing wins by doing nbtstat -RR from the server. how do you re-register a filer? restarting cifs will do it. i tried C:\WINNT>nbtstat -a file1 -RR and got back "Done Release and Refresh of Registered names" but i don't know if it really did anything. has anyone done this before, i didn't see anything in now other than restarting cifs. ---- regards This message is for the designated recipient only and may contain privileged or confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.

1 0

qtree properties
by neil lehrer 09 May '02

09 May '02

thanks to everyone who contributed. it was very helpful. -- regards

1 0

Do file locks affect snapshots?
by Steve Losen 09 May '02

09 May '02

We are running ONTAP 6.1.1R2. I thought I read somewhere that there are no file locks in a snapshot. The snapshot is read only, but no files are locked, so you can open any file if you have the necessary permissions. However, I was running a virus scan (Norton) on a snapshot and it failed to open a few files, according to the log. I'm pretty sure it was not a permissions problem. We use unix passwd authentication for CIFS and therefore all files have unix permissions. The CIFS user was root (uid 0) and Norton successfully scanned about 180,000 files, many of which are readable only by owner (and superuser). Norton failed to open 16 files. Here is an error from the log: Scan could not open file F:\weekly.0\a\af\afc3f\private\Disparity.doc [00000012] (We made a read only share out of the .snapshot directory and attached it to drive F) So that got me wondering about file locks. If a file is locked when a snapshot is created, is the lock included in the snapshot? And if so, does it lock the file in the snapshot? Or else, if a file in the active filesystem is currently locked, does that affect access to the corresponding file in a snapshot? Later on, using the same share as above, I was able to copy the file to the local desktop, so W2000 was able to open it. Maybe it's a Norton thing. I'll try and look up that error code [00000012]. Is this a CIFS error perhaps? By the way, Norton failed to open some other files with error code [00000003] but the ones I checked were all symlinks that the filer could not follow, so that makes perfect sense. Steve Losen scl(a)virginia.edu phone: 434-924-0640 University of Virginia ITC Unix Support

1 0

RE: SSH on filers
by markallen 08 May '02

08 May '02

Thanks for everyone's feedback. I'm downloading secure admin right now. Thanks Again!! -Mark -----Original Message----- From: Piotr KUCHARSKI [mailto:chopin@sgh.waw.pl] Sent: Wednesday, May 08, 2002 9:14 AM To: 'toasters(a)mathworks.com' Subject: Re: SSH on filers On Wed, May 08, 2002 at 08:12:12AM -0600, markallen wrote: > Is anybody using ssh on their filers? I've checked with netapp tech support > and they aren't supporting it yet. This doesn't mean other people haven't > tried it. Any information would be greatly appreciated. SecureAdmin is the way; I really don't like accessing devices via telnet or plain http. Now I have both ssh and https. p.

1 0

SSH on filers
by markallen 08 May '02

08 May '02

Is anybody using ssh on their filers? I've checked with netapp tech support and they aren't supporting it yet. This doesn't mean other people haven't tried it. Any information would be greatly appreciated. Thanks -Mark

4 3

SV: mixed security style
by Öberg Mats 08 May '02

08 May '02

Hi, We are using mixed-style security on a shared-project-structure with a lot of problems, even though most of them have been resolved by now. We´ve seen a lot of strange things going on with M$-office-files that can't be saved even if it looks like the user has the apropriate rights, files changing permissions when saved. Another major annoyance is the inability to move/rename/delete unix-files from the unix-side if the directory they are in doesn´t allow the user FULL rights, you would think CHANGE is enough. (it´s really strange for me as a unix-guy when I can change the contents of a file, create new files in the same directory, but can´t rename the file). But we have also seen CAD-programs stop working because the structure they access have ACL's set on them. (CATIA, MENTOR, I-DEAS) I'm not sure how compilers, make , stuff like CVS,PVCS work. Another thing to consider is that users can only tell if a file/directory has unix- or nt-security if they have the ssaccess-utility installed (or the commandline version). There is no way of knowing this from the unix-side. This has made administration much more complex, especially since our mixed structure contains around 1-million directories. If I could, I would move away from mixed-security as fast as possible, but right now I have to live with it. ---- Mats

1 0

Re: mixed security style
by kelvin.spaulding＠kodak.com 08 May '02

08 May '02

From: Kelvin D Spaulding We've been using mixed-style qtrees for home directories for a little more than a year with no real problems. At first the users had some difficulties understanding how the permissions worked. The ones who actually cared contacted our IT organization and we explained how it worked. We do the initial setting to NTFS when the home directories are created. This causes the UNIX folk to see what appears to be mode 777 home directories. We needed to belay their concerns that we were creating wide-open areas. Some of our admins had some difficulty grasping the idea also; but we worked our way through that. All-in-all, we've been very happy with the mixed-style qtrees for home directories. Kelly Spaulding Eastman Kodak Co. Commercial & Government Systems kelvin.spaulding(a)kodak.com Kelly McQuarrie <kellym(a)sd.us.am.ericsson.se>@mathworks.com on 05/07/2002 03:05:41 PM Sent by: owner-toasters(a)mathworks.com To: toasters(a)mathworks.com cc: Subject: mixed security style Hello all: I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed! Thank you sooo much for your time 8) Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

1 0

qtree properties
by neil lehrer 08 May '02

08 May '02

i use qtree quotas with ontap 6.1x nfs and cifs. from windows i can just get properties on a qtree and i see its quota and usage. is there anyway to do that from a unix host? du would take a while and i could run a quota report, but i was curious if there were another way? -- regards

4 3

Link Failure Count and High Loss of Sync Count
by Nicholas Chua 08 May '02

08 May '02

Hi all, Based on the info below, is it an indication of poor FC or poor disk? Perhaps 0a.0 and 01.16? Given the short amount of time since last reboot and the amount of data transferred. Thanks for any input. Nic. netapp1> uptime 7:02pm up 22:27 59382160 NFS ops, 182 CIFS ops, 129 HTTP ops netapp1> fcstat link_stats 0a Loop Link Underrun Loss of Invalid Frame In Frame Out ID Failure count sync CRC count count count count count 0a.0 20 0 3893 0 497976 968640 ----- 0a.16 0 0 100 0 4711400 1645910 0a.17 0 0 3 0 4289135 9098615 ----- 0a.12 0 0 15 0 1467678 5654114 __________________________________________________ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com

1 0

Odd Symlink Problem
by Barry Lustig 08 May '02

08 May '02

I have a toaster running 6.1.1R2. On vol0 there is a mixed qtree called public. The NT ACLS on /vol/vol0/public have everything except full control turned on for the domain users. The strangeness occurs when I create a symlink under that directory. the user can create the link but only root can delete it. Any ideas? barry

1 0

Reflection NFS issues on 6.2
by Jeff Kennedy 07 May '02

07 May '02

We use Reflections NFS for PC users to access data on our filers. Up until 6.2 it worked fine, after upgrading we are having what appear to be sporadic issues with users not being able to access/write data that we know they have perissions to. Has anyone experienced or heard of this and whether or not there's a fix? Thanks. -- ===================== Jeff Kennedy Unix Administrator AMCC jlkennedy(a)amcc.com

1 0

mixed security style
by Kelly McQuarrie 07 May '02

07 May '02

Hello all: I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed! Thank you sooo much for your time 8) Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

3 2

RE: FW: mixed security style
by Lupa Paul-ra5507 07 May '02

07 May '02

Mixed Security provides the fine grain access control that I need for various security issues. However if a tree has NT security (with inheritance) a number of UNIX problems rear their ugly head, with UNIX security, I don't have the control that I need. I guess the only solution is to wait for MicroSoft to take over the world, or Sun/HP/Linux to support NFS version 4 (I'm not holding my breath). My current issue centers around gzip/compress which will not work if inheritance is turned on. The different paradigm for security between NT-acls and standard UNIX makes for an ugly solution. Does EMC have a solution?... Cheers, Paul Lupa Sr.System Analyst Motorola, Austin -----Original Message----- From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] Sent: Tuesday, May 07, 2002 3:29 PM To: Maglinger, Paul Cc: 'NetApps list server' Subject: Re: FW: mixed security style People running stuff from unix on an NTFS file system don't run into problems? Do they every lose access to there files from Unix because of changes made from NT? Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems On Tue, 7 May 2002, Maglinger, Paul wrote: > We have mixed NT and Unix environment. If the qtree is strictly Unix, we > set the style for Unix. If both use it, then I have it set for NTFS. We > tried running mixed and sometimes Unix could access it and sometimes it > couldn't. Seemed to be the same with NT, just kinda flaky stuff. I'm an NT > admin, so this works great for me <grin>, but the Unix admin doesn't seem to > have a problem with it set up this way... We also disabled the oplocks. > > -----Original Message----- > From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] > Sent: Tuesday, May 07, 2002 14:06 > To: toasters(a)mathworks.com > Subject: mixed security style > > > Hello all: > > I have a large number of windows/unix home directories on my NetApps all > under unix qtrees. I'm a unix admin so this works great for me but the NT > admins have complained that they can access their users data. I would > like any war stories, opions, etc from people who have tried and or use > the mixed qtrees for this purpose. Any suggestions and what not are > totally welcomed! > > Thank you sooo much for your time 8) > > Kelly McQuarrie > Unix System Administrator > Ericsson CDMA Systems >

1 0

FW: mixed security style
by Maglinger, Paul 07 May '02

07 May '02

We have mixed NT and Unix environment. If the qtree is strictly Unix, we set the style for Unix. If both use it, then I have it set for NTFS. We tried running mixed and sometimes Unix could access it and sometimes it couldn't. Seemed to be the same with NT, just kinda flaky stuff. I'm an NT admin, so this works great for me <grin>, but the Unix admin doesn't seem to have a problem with it set up this way... We also disabled the oplocks. -----Original Message----- From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] Sent: Tuesday, May 07, 2002 14:06 To: toasters(a)mathworks.com Subject: mixed security style Hello all: I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed! Thank you sooo much for your time 8) Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

2 1

Error on Gigabit Card
by Manoj Kolekar 06 May '02

06 May '02

Hello toasters, I am getting the bellow Erros onn my F840 gigabit card, "Mon May 6 10:46:46 GMT [GbE-II/e4:error]: arp: 00:06:5b:3a:1d:0c attempts to modify permanent entry for 192.168.57.63 on e4 Mon May 6 10:51:29 GMT [GbE-II/e4:error]: arp: 00:06:5b:3a:1d:0c attempts to modify permanent entry for 192.168.57.63 on e4 Mon May 6 10:51:38 GMT [GbE-II/e4:error]: arp: 00:06:5b:3a:1d:0c attempts to modify permanent entry for 192.168.57.63 on e4 The filer seems to be working fine. Does any one out there have any idea as to what could be wrong. -- Best regards, Manoj mailto:manoj@apara.com

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters