toasters

toasters@lists.teaparty.net

13531 discussions

user accounts on filers
by Kelly McQuarrie 21 Sep '01

21 Sep '01

Hello all: I want to set up separate user accounts for our admins on all of our filers, but I don't want to have to maintain it on all of them. Is there a file I can copy over to the others once I get it set up the way I want it on one of them? Thx Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

1 0

RE:
by Biesot, Gerard 21 Sep '01

21 Sep '01

Hi Jordan, It looks that the memory in slots J27 & J30 is broken. Please send me your filer s/n and shipping details and we will send you the new memory. Rgds, Gerard ******************************** Gerard Biesot Customer Support Manager EMEA phone: +31 (0)23 5686967 cell: +31 (0)6 54315465 ******************************** -----Original Message----- From: Jordan Share [mailto:iso9@phantasticant.com] Sent: Friday, September 21, 2001 3:49 AM To: 'Toasters(a)Mathworks.Com' Subject: We have gotten several messages of the following type: Mon Sep 17 10:25:59 PDT [raid_xor_server:CRITICAL]: 206 CORR SYS ERR 201 eia:1146dc058b20000 fs:254f400 eis:0 isr:80000001 SYS ECC error on DIMM J27 at address=0x1146dc0, bit=31. Mon Sep 17 10:37:28 PDT [idle_thread0:CRITICAL]: 207 CORR SYS ERR 201 eia:f71874058b20000 fs:2b1f400 eis:0 isr:80000001 SYS ECC error on DIMM J27 at address=0xf718740, bit=31.Wed Sep 19 01:03:53 PDT [GbE-II/e8:CRITICAL]: 212 CORR SYS ERR 201 eia:1dc7590058b20000 fs:256f400 eis:0 isr:80000001 SYS ECC error on DIMM J30 at address=0x1dc75900, bit=31. Wed Sep 19 01:25:09 PDT [idle_thread0:CRITICAL]: 213 CORR SYS ERR 201 eia:11149bc058b20000 fs:2b4f400 eis:0 isr:80000001 SYS ECC error on DIMM J30 at address=0x11149bc0, bit=31. Wed Sep 19 01:40:22 PDT [idle_thread0:CRITICAL]: 214 CORR SYS ERR 201 eia:19c54f8058b30000 fs:2b0f400 eis:0 isr:80010001 SYS ECC error on DIMM J30 at address=0x19c54f80, bit=31. Wed Sep 19 07:01:22 PDT [ispfc_main:CRITICAL]: 216 CORR SYS ERR 201 eia:1ecda80058b20000 fs:2d7f400 eis:0 isr:80000001 SYS ECC error on DIMM J30 at address=0x1ecda800, bit=31. As near as I can tell, this indicates that a DIMM (or 2) has gone bad. Is that the case? Or is some level of these errors considered to be normal? Here's the output of "grep -c "CORR SYS ERR" over the last few messages files: messages.5:0 messages.4:3 messages.3:6 messages.2:16 messages.1:160 messages.0:17 messages:14 So, it looks to me like this developed somewhat recently. Should I be worried about this? Thanks, Jordan

1 0

E-mail warning to CIFS users about quota limit remaining
by Grey, Michael 21 Sep '01

21 Sep '01

Does anyone have a script that I can run from within Windows NT that will provide an e-mail notification when a users home directory is above a certain (75%) threshold of available space remaining. I know the script would not be dynamic though running it once a day would be sufficient. I running 6.1R1 on a F740 Regards, Michael Grey Supervisor - Operations Support Information Technology Services Toronto Transit Commission 416-393-6791 michael.grey(a)ttc.ca

4 3

FS: Used F760's with NFS licenses
by ScottUCE＠aol.com 20 Sep '01

20 Sep '01

We have two used F760 systems available with transferable NFS licenses. NetApp hardware add-ons and additional software can be configured to suit. Please call for pricing and other details. Scott Fischmann Union Computer Exchange, Inc. 6233 Idylwood Lane Minneapolis, MN 55436 Phone: 952 935 7282 FAX: 952 935 5056 scott(a)unioncomputer.com

1 0

RE: port 80 answers tcp
by Klinkner, Steve 20 Sep '01

20 Sep '01

Short answer is: No, there isn't currently a way to prevent the filer from listening and accepting socket connections on port 80. Some additional details might be helpful. The httpd.enable option toggles HTTP access to the web hierarchy on the filer, in the case that HTTP is licensed on the filer. Port 80 is left open for purposes of administrative access - for example FilerView and SecureShare Quota Manager, even if HTTP is not licensed on the filer. Access to administrative areas can be toggled using the httpd.admin.enable option. If httpd.enable and httpd.admin.enable are both off, and HTTP is not licensed, then the server will immediately close incoming connections without reading any HTTP headers (this feature appears in 6.0 and higher). We are not currently aware of any flaws in the HTTP server which allow exploitation in the manner of the worms mentioned. Hope that helps, Steve Klinkner > -----Original Message----- > From: Leigh David Heyman [mailto:leigh@ai.mit.edu] > Sent: Wednesday, September 19, 2001 8:34 AM > To: toasters(a)mathworks.com > Subject: port 80 answers tcp > > > Hi, > I've noticed that in DoT, the filer still has tcp port 80 > open and listening > even with "options httpd.enable off." > > Since the nimda and code red worms send attack traffic to any > hosts which > respond on port 80, regardless of whether it's a vulnerable > windows webserver, > is there any way to actually prevent the filer from having > tcp port 80 open > and listening? > > Thanks, > > -Leigh > > > ===================================================================== > Leigh Heyman,GCIA Artificial Intelligence Lab > Systems Administrator Massachusetts Institute of Technology > leigh(a)ai.mit.edu 617-253-1729 > > >

4 3

RE: port 80 answers tcp
by Klinkner, Steve 20 Sep '01

20 Sep '01

> -----Original Message----- > From: Kelsey Cummings [mailto:kgc@sonic.net] > Sent: Thursday, September 20, 2001 2:29 AM > To: Klinkner, Steve > Cc: 'leigh(a)ai.mit.edu'; toasters(a)mathworks.com > Subject: Re: port 80 answers tcp > I think we'd all like to see an option to just shut it > down. Exploitable or not, if nothing more the worms > eat CPU trying to get at the webserver. Bug 53801 has been filed to address this issue. As previously noted, bug 4998 addresses the issue of changing the behavior of port 80 to "answer but hang up on you". Steve Klinkner

1 0

Windows XP and unix style CIFS authentication
by Steve Losen 20 Sep '01

20 Sep '01

We are having trouble with unix style CIFS authentication to DOT 6.0.1R3 and 6.1.1R1 from a client running Windows XP. Has anyone else tried this and perhaps figured out how to get it working? I'm not a Windows person, and I understand that XP is still in beta, but ships soon. Unix style CIFS auth uses clear text passwords, and that may need to be enabled on XP somehow. I have options cifs.trace_login on and here is the /etc/messages output: Thu Sep 20 10:08:23 EDT [CIFSAuthen:info]: Login attempt by ESERVICES\del6n from 128.143.13.181(128.143.13.181) Thu Sep 20 10:08:23 EDT [CIFSAuthen:info]: Attempting to map PC user to UNIX user del6n Thu Sep 20 10:08:24 EDT [CIFSAuthen:info]: password rejected The unix user name is correct, so I think the password is the problem. We are having no problems with W98, NT and W2000. When W2000 first came out, however, we did have problems with this until both Netapp and Microsoft released bug fixes. Steve Losen scl(a)virginia.edu phone: 434-924-0640 University of Virginia ITC Unix Support

1 0

Sun Stordge L1000, Veritas Netbackup
by Fayek, Ahmed 20 Sep '01

20 Sep '01

Hi All Is anybody here using Sun Storedge L1000 library? I'm using it with Veritas Netbackup 3.4 What i'm asking about is the cleaning of the tape drives in the library. there is a note about automatic drive cleaning enabeling in the L1000. Did anyone use it? And if so, How to get a notice that cleaning has been done ? Best Regards Ahmed

1 0

RE: E-mail warning to CIFS users about quota limit remaining
by Marcel Keller 20 Sep '01

20 Sep '01

You need something like a NT Quota Software with e-mail notification. Example: Highground/SUN Storage Resource Manager with NetApp plugin http://www.sun.com/storage/highground/ Regards Marcel Keller Diwega GmbH mk(a)diwega.ch -----Ursprüngliche Nachricht----- Von: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com]Im Auftrag von Grey, Michael Gesendet: Dienstag, 18. September 2001 13:10 An: 'toasters(a)mathworks.com' Betreff: E-mail warning to CIFS users about quota limit remaining Does anyone have a script that I can run from within Windows NT that will provide an e-mail notification when a users home directory is above a certain (75%) threshold of available space remaining. I know the script would not be dynamic though running it once a day would be sufficient. I running 6.1R1 on a F740 Regards, Michael Grey Supervisor - Operations Support Information Technology Services Toronto Transit Commission 416-393-6791 michael.grey(a)ttc.ca

1 0

RE: port 80 answers tcp
by Bond, Andrew 20 Sep '01

20 Sep '01

options httpd.admin.enable off will stop access to FilerView. If http is unlicensed, and httpd.enable and httpd.admin.enable are both switched off, then any sockets opened on port 80 will be immediately closed (this behaviour was initiated to address BURT 4998). Regards, Andrew > -----Original Message----- > From: Kenneth Whittaker [mailto:kenw@cruzoid.com] > Sent: 20 September 2001 00:51 > To: leigh(a)ai.mit.edu; toasters(a)mathworks.com > Subject: Re: port 80 answers tcp > > > > I think the filer listens on port 80 even when http is > unlicensed so that it > can offer > html-ized man pages. I'm not sure there is a way to turn it > completely > off...? > > ----- Original Message ----- > From: "Leigh David Heyman" <leigh(a)ai.mit.edu> > To: <toasters(a)mathworks.com> > Sent: Wednesday, September 19, 2001 8:34 AM > Subject: port 80 answers tcp > > > > Hi, > > I've noticed that in DoT, the filer still has tcp port 80 open and > listening > > even with "options httpd.enable off." > > > > Since the nimda and code red worms send attack traffic to > any hosts which > > respond on port 80, regardless of whether it's a vulnerable windows > webserver, > > is there any way to actually prevent the filer from having > tcp port 80 > open > > and listening? > > > > Thanks, > > > > -Leigh > > > > > > > ===================================================================== > > Leigh Heyman,GCIA Artificial > Intelligence Lab > > Systems Administrator Massachusetts Institute of > Technology > > leigh(a)ai.mit.edu > 617-253-1729 > > > > > > > > >

2 1

RE: E-mail warning to CIFS users about quota limit remaining
by Israel, Meital 20 Sep '01

20 Sep '01

Hello, If someone has this script Michael is talking about, I will also be glad to have it. Thanks, Meital -----Original Message----- From: Grey, Michael [mailto:Michael.Grey@ttc.ca] Sent: Tuesday, September 18, 2001 14:10 To: 'toasters(a)mathworks.com' Subject: E-mail warning to CIFS users about quota limit remaining Does anyone have a script that I can run from within Windows NT that will provide an e-mail notification when a users home directory is above a certain (75%) threshold of available space remaining. I know the script would not be dynamic though running it once a day would be sufficient. I running 6.1R1 on a F740 Regards, Michael Grey Supervisor - Operations Support Information Technology Services Toronto Transit Commission 416-393-6791 michael.grey(a)ttc.ca

1 0

port 80 answers tcp
by Leigh David Heyman 19 Sep '01

19 Sep '01

Hi, I've noticed that in DoT, the filer still has tcp port 80 open and listening even with "options httpd.enable off." Since the nimda and code red worms send attack traffic to any hosts which respond on port 80, regardless of whether it's a vulnerable windows webserver, is there any way to actually prevent the filer from having tcp port 80 open and listening? Thanks, -Leigh ===================================================================== Leigh Heyman,GCIA Artificial Intelligence Lab Systems Administrator Massachusetts Institute of Technology leigh(a)ai.mit.edu 617-253-1729

2 1

RE: Net boot Linux SUSE 7.2 from a filer F840 or F230
by Fox, Adam 19 Sep '01

19 Sep '01

>From my 6.1.1 machine: f880-rtp> options tftpd tftpd.enable off tftpd.logging off tftpd.rootdir /etc/tftpboot So set the tftpd.enable options to on. Set the tftpd.rootdir option to where ever you like and turn on logging if you want to log all of the gets. That's about it. Just be aware..at this time it only goes gets, no puts. You'll have to write data to that area via an NFS/CIFS client. -- Adam Fox NetApp Professional Services, NC adamfox(a)netapp.com > -----Original Message----- > From: Oye [mailto:Oyegbemi.Akintan@oracle.com] > Sent: Wednesday, September 19, 2001 1:48 PM > To: McCarthy, Tim > Cc: toasters(a)mathworks.com > Subject: Re: Net boot Linux SUSE 7.2 from a filer F840 or F230 > > > This is definitely helpful. I'm going to resolve to using > this solution but > I need more info on setting u p the tftp server. Also I fond > a documentation > on how to do it at > http://cui.unige.ch/info/pc/remote-boot/howto.html . > Thanks > > -Oye > > "McCarthy, Tim" wrote: > > > Well, with the F230 you are almost out of luck. > > The F820, which can run 6.0.3 or later or 6.1.1 or later > > has a tftp server on it! > > > > Enable it, point your clients to use tftp to boot from > > and it may just work!!! > > > > The F230, cannot run 6.0 or higher software. So you could > > take one of your linux boxes, make a dir on the F230, mount it > > and then use said linux box as the tftp server to boot from. > > > > Does this help? > > > > --tmac > > > > -----Original Message----- > > From: Oye [mailto:Oyegbemi.Akintan@oracle.com] > > Sent: Monday, September 17, 2001 12:40 PM > > To: toasters(a)mathworks.com > > Subject: Net boot Linux SUSE 7.2 from a filer F840 or F230 > > > > Does anyone have any idea on how to set up net boot of Suse > Linux 7.2 or > > RedHat on a filer F840 or F230? > > > > Thanks, > > Oye >

1 0

RE: Net boot Linux SUSE 7.2 from a filer F840 or F230
by McCarthy, Tim 19 Sep '01

19 Sep '01

Well, with the F230 you are almost out of luck. The F820, which can run 6.0.3 or later or 6.1.1 or later has a tftp server on it! Enable it, point your clients to use tftp to boot from and it may just work!!! The F230, cannot run 6.0 or higher software. So you could take one of your linux boxes, make a dir on the F230, mount it and then use said linux box as the tftp server to boot from. Does this help? --tmac -----Original Message----- From: Oye [mailto:Oyegbemi.Akintan@oracle.com] Sent: Monday, September 17, 2001 12:40 PM To: toasters(a)mathworks.com Subject: Net boot Linux SUSE 7.2 from a filer F840 or F230 Does anyone have any idea on how to set up net boot of Suse Linux 7.2 or RedHat on a filer F840 or F230? Thanks, Oye

2 1

RE: CIFS
by Ziller, Frank 18 Sep '01

18 Sep '01

During or after setup the filer needs to join the nt domain just like a member nt server would; otherwise, you receive the message you described. Frank -----Original Message----- From: Malek Hamdan [mailto:Malek.Hamdan@davtel.com.au] Sent: Monday, September 17, 2001 8:20 PM To: toasters(a)mathworks.com Subject: CIFS Hi, I have just installed Data ONTAP 6.1R1 with CIFS support. I am using domain authentication, though I am unable to manage shares or permissions through the server manager. Instead I get an "access denied" message. Can anyone shed some light on what I might be doing wrong?? Kind regards MH

1 0

RE: CIFS
by Muhlestein, Mark 18 Sep '01

18 Sep '01

You must be a member of BUILTIN\administrators on the filer to run server manager. Look at the output of "cifs sessions -s" to confirm that. If not, you need to add your account (or a group that your account is in) to BUILTIN\administrators. This situation sometimes arises because by default the filer's BUILTIN\administrators group only has the "domain admins" group for the domain the filer is installed into. If that is a resource domain you may not be a member of the right group. Mark > -----Original Message----- > From: White, Lance [mailto:Lance.White@netapp.com] > Sent: Monday, September 17, 2001 5:38 PM > To: 'Malek Hamdan' > Cc: 'toasters(a)mathworks.com' > Subject: RE: CIFS > > > Check to see if your /etc/password file is missing on the > Filer. Should at least look like: > > root::0:1::/: > pcuser::65534:65534::/: > nobody::65535:65535::/: > > Can you see ANY shares from your client? (i.e. > \\<netapp>\home (where <netapp> is the name of the filer)at least?) > > -----Original Message----- > From: Malek Hamdan [mailto:Malek.Hamdan@davtel.com.au] > Sent: Monday, September 17, 2001 5:20 PM > To: toasters(a)mathworks.com > Subject: CIFS > > > Hi, > > I have just installed Data ONTAP 6.1R1 with CIFS support. I > am using domain > authentication, though I am unable to manage shares or > permissions through > the server manager. Instead I get an "access denied" message. > > Can anyone shed some light on what I might be doing wrong?? > > Kind regards > MH >

1 0

RE: CIFS
by White, Lance 18 Sep '01

18 Sep '01

Check to see if your /etc/password file is missing on the Filer. Should at least look like: root::0:1::/: pcuser::65534:65534::/: nobody::65535:65535::/: Can you see ANY shares from your client? (i.e. \\<netapp>\home (where <netapp> is the name of the filer)at least?) -----Original Message----- From: Malek Hamdan [mailto:Malek.Hamdan@davtel.com.au] Sent: Monday, September 17, 2001 5:20 PM To: toasters(a)mathworks.com Subject: CIFS Hi, I have just installed Data ONTAP 6.1R1 with CIFS support. I am using domain authentication, though I am unable to manage shares or permissions through the server manager. Instead I get an "access denied" message. Can anyone shed some light on what I might be doing wrong?? Kind regards MH

1 0

CIFS
by Malek Hamdan 18 Sep '01

18 Sep '01

Hi, I have just installed Data ONTAP 6.1R1 with CIFS support. I am using domain authentication, though I am unable to manage shares or permissions through the server manager. Instead I get an "access denied" message. Can anyone shed some light on what I might be doing wrong?? Kind regards MH

1 0

Net boot Linux SUSE 7.2 from a filer F840 or F230
by Oye 17 Sep '01

17 Sep '01

Does anyone have any idea on how to set up net boot of Suse Linux 7.2 or RedHat on a filer F840 or F230? Thanks, Oye

1 0

Re: Networker "no output" error?
by mcope＠isisph.com 17 Sep '01

17 Sep '01

Try setting the timeout value in the client setup higher - from 30 to 60. I've seen volumes with thousands of small files timeout while Networker "crawled" the directory structure. Bumping the timeout value has ensured successful/complete backups since then. Although I don't recall ever getting the 'no output' error. Michael Cope UNIX/Linux Systems Administrator Isis Pharmaceuticals mcope(a)isisph.com UNIX is very user friendly... it's just highly selective about who it makes friends WITH! On 9/17/2001 6:46:51 AM, "Weng-Kiam Lim" <wklim(a)rand.com>@mathworks.com wrote: > Had been experiencing on unsuccessful saveset since last week, with > "no > output error". It only fails on one particular volume while other > volumes > are fine. Any hints? > > --- Unsuccessful Save Sets --- > > * netapp1:/vol/vol2/pdm 1 retry attempted > * netapp1:/vol/vol2/pdm ! no output > > --- Successful Save Sets --- > > * netapp1:/vol/vol0/etc Warning: unsynchronized client clock detected > netapp1: /vol/vol0/etc level=incr 547 KB 00:00:31 14 files > netapp1: /vol/vol0/db level=incr 537 MB 00:12:17 929 files > server5: /vol5/netapp1 level=9, 1.4 MB > 00:00:14 4 > files > > Regards, > wk >

1 0

Networker "no output" error?
by Weng-Kiam Lim 17 Sep '01

17 Sep '01

Had been experiencing on unsuccessful saveset since last week, with "no output error". It only fails on one particular volume while other volumes are fine. Any hints? --- Unsuccessful Save Sets --- * netapp1:/vol/vol2/pdm 1 retry attempted * netapp1:/vol/vol2/pdm ! no output --- Successful Save Sets --- * netapp1:/vol/vol0/etc Warning: unsynchronized client clock detected netapp1: /vol/vol0/etc level=incr 547 KB 00:00:31 14 files netapp1: /vol/vol0/db level=incr 537 MB 00:12:17 929 files server5: /vol5/netapp1 level=9, 1.4 MB 00:00:14 4 files Regards, wk

1 0

RE: Problem setting access rights for files on a CIFS share progr amatically
by Muhlestein, Mark 15 Sep '01

15 Sep '01

This is bug 50667. Contact support for the fix. Mark -----Original Message----- From: Michael.Kaercher(a)genorz.de [mailto:Michael.Kaercher@genorz.de] Sent: Friday, September 14, 2001 5:39 AM To: toasters(a)mathworks.com Subject: Problem setting access rights for files on a CIFS share programatically Are you an NT administrator? Have you tried to set up user's rights from a script? If so: Please read on! We have implemented a tool to create user accounts for an NT domain. This tools also creates the user's home, group, and profile directories. Of course, these directories must be properly protected from unauthorized access. To this end, we are using Microsoft's ADsSecurity package (found in the ASDI25SDK resource kit). With the graphical tools for setting permissions on a remote file or directory we can modify ACLs on the filer. However using ADSI doesn't work on the filer. (The filer is running 5.3.7R2; ADSI is version 2.5)) We have found that the following (trivial) example program taken from the Microsoft documentation works perfectly well from an NT4 domain controller to another NT4 domain controller, an NT 4 member server, a Windows 2000 member server (of course, all belonging to the same domain), BUT: Setting the new DACL with a NTFS share on the filer does not work (the existing rights are correctly displayed, but setting just doesn't work - without returning an error code!). Const ADS_RIGHT_GENERIC_READ = &H80000000 Const ADS_RIGHT_GENERIC_EXECUTE = &H20000000 Const ADS_ACETYPE_ACCESS_ALLOWED = 0 Set sec = CreateObject("ADsSecurity") Set sd = sec.GetSecurityDescriptor("FILE://\\SERVER\DIR\FILE.TST") Set dacl = sd.DiscretionaryAcl '-- Show the ACEs in the DACL ---- For Each ace In dacl wscript.echo ace.Trustee wscript.echo ace.AccessMask wscript.echo ace.AceType Next '--- Add a new ACE so that the user can read/execute this file Set ace = CreateObject("AccessControlEntry") ace.Trustee = "DOMAIN\user" ace.AccessMask = ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_EXECUTE ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED dacl.AddAce ace sd.DiscretionaryAcl = dacl sec.SetSecurityDescriptor sd BTW: Using the Win32::Perms perl module shows the same behaviour! Thanks, Michael Kärcher

1 0

RE: Problem setting access rights for files on a CIFS share progr amatically
by Nail, Larry 14 Sep '01

14 Sep '01

Do it every day: File level, we use XCACLS. xcacls \\filer01\wts\%1 /c /g administrators:f %1:c "domain\pc gurus":c system:f /t /y xcacls \\filer01\profiles\%1 /c /g administrators:f %1:F "domain\pc gurus":c system:f /t /y Share level, I use a combination of tools between RMTSHARE & "cifs shares access" rsh filer01 cifs shares -add %1 /vol/vol0/wts/%1 rsh filer01 cifs shares -change %1 -comment \"%1 WTS Home Directory\" rmtshare \\filer\%1 /grant domain\%1:c /grant "pc gurus":c /grant vette01\administrators:f /remove everyone Also note that versions of Ontap less than 6 don't support NTFS5 permissions. -----Original Message----- From: Michael.Kaercher(a)genorz.de [mailto:Michael.Kaercher@genorz.de] Sent: Friday, September 14, 2001 7:39 AM To: toasters(a)mathworks.com Subject: Problem setting access rights for files on a CIFS share programatically Are you an NT administrator? Have you tried to set up user's rights from a script? If so: Please read on! We have implemented a tool to create user accounts for an NT domain. This tools also creates the user's home, group, and profile directories. Of course, these directories must be properly protected from unauthorized access. To this end, we are using Microsoft's ADsSecurity package (found in the ASDI25SDK resource kit). With the graphical tools for setting permissions on a remote file or directory we can modify ACLs on the filer. However using ADSI doesn't work on the filer. (The filer is running 5.3.7R2; ADSI is version 2.5)) We have found that the following (trivial) example program taken from the Microsoft documentation works perfectly well from an NT4 domain controller to another NT4 domain controller, an NT 4 member server, a Windows 2000 member server (of course, all belonging to the same domain), BUT: Setting the new DACL with a NTFS share on the filer does not work (the existing rights are correctly displayed, but setting just doesn't work - without returning an error code!). Const ADS_RIGHT_GENERIC_READ = &H80000000 Const ADS_RIGHT_GENERIC_EXECUTE = &H20000000 Const ADS_ACETYPE_ACCESS_ALLOWED = 0 Set sec = CreateObject("ADsSecurity") Set sd = sec.GetSecurityDescriptor("FILE://\\SERVER\DIR\FILE.TST") Set dacl = sd.DiscretionaryAcl '-- Show the ACEs in the DACL ---- For Each ace In dacl wscript.echo ace.Trustee wscript.echo ace.AccessMask wscript.echo ace.AceType Next '--- Add a new ACE so that the user can read/execute this file Set ace = CreateObject("AccessControlEntry") ace.Trustee = "DOMAIN\user" ace.AccessMask = ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_EXECUTE ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED dacl.AddAce ace sd.DiscretionaryAcl = dacl sec.SetSecurityDescriptor sd BTW: Using the Win32::Perms perl module shows the same behaviour! Thanks, Michael Kärcher

1 0

Problem setting access rights for files on a CIFS share programatically
by Michael.Kaercher＠genorz.de 14 Sep '01

14 Sep '01

Are you an NT administrator? Have you tried to set up user's rights from a script? If so: Please read on! We have implemented a tool to create user accounts for an NT domain. This tools also creates the user's home, group, and profile directories. Of course, these directories must be properly protected from unauthorized access. To this end, we are using Microsoft's ADsSecurity package (found in the ASDI25SDK resource kit). With the graphical tools for setting permissions on a remote file or directory we can modify ACLs on the filer. However using ADSI doesn't work on the filer. (The filer is running 5.3.7R2; ADSI is version 2.5)) We have found that the following (trivial) example program taken from the Microsoft documentation works perfectly well from an NT4 domain controller to another NT4 domain controller, an NT 4 member server, a Windows 2000 member server (of course, all belonging to the same domain), BUT: Setting the new DACL with a NTFS share on the filer does not work (the existing rights are correctly displayed, but setting just doesn't work - without returning an error code!). Const ADS_RIGHT_GENERIC_READ = &H80000000 Const ADS_RIGHT_GENERIC_EXECUTE = &H20000000 Const ADS_ACETYPE_ACCESS_ALLOWED = 0 Set sec = CreateObject("ADsSecurity") Set sd = sec.GetSecurityDescriptor("FILE://\\SERVER\DIR\FILE.TST") Set dacl = sd.DiscretionaryAcl '-- Show the ACEs in the DACL ---- For Each ace In dacl wscript.echo ace.Trustee wscript.echo ace.AccessMask wscript.echo ace.AceType Next '--- Add a new ACE so that the user can read/execute this file Set ace = CreateObject("AccessControlEntry") ace.Trustee = "DOMAIN\user" ace.AccessMask = ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_EXECUTE ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED dacl.AddAce ace sd.DiscretionaryAcl = dacl sec.SetSecurityDescriptor sd BTW: Using the Win32::Perms perl module shows the same behaviour! Thanks, Michael Kärcher

1 0

NBU sets filer attached drive down
by Hannes Herret 14 Sep '01

14 Sep '01

anyone knows this behaviour? we're running 6.1.1 on F740 w/ an direct attached ATL L200 (1 Drive) Backupserver is an E450 w/ Solaris 8 and NBU 3.4 DC. NBU always sets the drive in the L200 down. Also i'm upping the drive it lasts bout 30 sec. till the drive is down again. no ndmp backup is possible. a started dump from the filer is working fine. the nbu config seems ok. authorization works, robtest and tldtest from the nbu-server on the L200 also works. could this be a problem cause of missing /etc/dumpdates? who can read an "ndmpd debug 50"-output? thx h -- ------------------------------------------------------------------- Hannes Herret IT-Service / Storage phone : +43 (1) 60 126-34 Bacher Systems EDV GmbH fax : +43 (1) 60 126-555 Wienerbergstr. 11B mailto:hh@bacher.at A-1101 Wien, Austria www : http://www.bacher.at/ Europe

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters