toasters

toasters@lists.teaparty.net

13531 discussions

Domain trust
by Camillo Gornati 12 Nov '14

12 Nov '14

Hello all! Is it possible to map users on a different domain on a netapp CIFS? Maybe using domain trusts? We are starting migrating data from domain A to domain B, but after data migration, users will also be moved to a difference domain... Sent using morse code!

2 1

Subsecond Timestamps?
by Steven Kreuzer 12 Nov '14

12 Nov '14

Did NetApp add sub second timestamps? I had a conversation with a NetApp engineer in 2011 saying that it won't be possible to add support for subsecond timestamps in nfsv3. However, if I stat a file via nfs on a filer running 8.1.2 I appear to be getting something back steven@warthog1:~ $ python -c "import os; print '%.6f' % os.stat('foo').st_mtime" 1415818448.392293

1 0

cdot NFS exports
by Iluhes 12 Nov '14

12 Nov '14

Hi toasters, NFS export in CDOT (ouch) I understand I have to have a default policy and a rule.. 1. Must it have 0.0.0.0/0 read only? What if I dont want to give read-only to entire name space to all clients? 2. Qtrree exports: can I restrict qtree A to host A, and qtree B to host B, but then what about volume and it is policy? Can qtree be more restrictive than volume (and why dont qtree show up in GUI?) 3. Does showmount -e LIF of NFS filer still produce good information. It does not look like, so how do I check what my exports are? 4. What does it buy me with qtree exports, what? If I have to give access to server A and B to volume that has qtree A and B

3 5

Flash Pool on a 2240-2 Running 8.1.3 7-Mode
by Philbert Rupkins 11 Nov '14

11 Nov '14

Hello, We are considering the addition of a Flash Pool to our 2240 arrays. We currently run ONTAP 8.1.3 7-mode with no plans of upgrading to 8.2.x. Per the docs, 8.1.3 allows us a total Flash Pool SSD cache capacity of 400G for the entire 2240 array. We're told we can't get 100G drives so our next best option is 200G drives. The problem with using 200G drives for the Flash Pool aggregate's SSD cache is that we'll be limited to a single 200G SSD drive to be used for cache behind each 2240 controller. Why is the is a problem? Well, the Flash Pool TR and FAQ touches on the possibility of the SSD cache becoming a bottleneck. I'd imagine this is more likely with just a single 200G data disk in the RAID-DP SSD cache. What makes it more of a concern is NetApp stating that a single SSD drive is capable of roughly 5,000 IOPS (I assume at a 4K 70r/30w workload) while the 2240 is capable of 15,000+ IOPS while processing the same workload. Note: We'd like to flash pool enable both controllers in the array and the SSD cache is required to be RAID-DP as the aggregate is RAID-DP and we are running 8.1.3. My questions: Are my concerns warranted? Has anybody had good or bad experiences with Flash Pool and the 2240 arrays? Anybody running a similar configuration to what is outlined above? I'd love to hear about your experiences. Thanks, Phil

2 1

Setting Flow Control to None on Production Filers
by Philbert Rupkins 11 Nov '14

11 Nov '14

Hello, Anybody have experience setting Flow Control to none on an array (controllers) that are already being used in production? We have a number of filers that were deployed with Flow Control set to Full on the 10GE interfaces. NetApp best practices recommend setting Flow Control to none. Is it preferable to: a) Update the RC file with the Flow Control settings and do a takeover/giveback to apply the new flow control settings? b) Modify the interface Flow Control settings directly with the system up and running? Then update the RC file so those settings will persist across future takeover/givebacks? I know the interface would 'reset' and I'm not sure how long of an outage we can expect. c) Something else? Our busiest ethernet based clients are VMWare ESXi hosts with pretty busy NFS datastores. Thank you all in advance! Phil

5 5

"Sensitive data" storage needs
by Michael Garrison 10 Nov '14

10 Nov '14

We currently offer a NFS v3 service that people can purchase. It's relatively inexpensive and basic, but thats what folks like. They can access it from their desktop and then access the data on a cluster to do compute jobs. However, it doesn't meet the requirements of being able to store sensitive data - like ePHI. I've been exploring the route of NFS v4 with Kerberos, but the Linux client leaves a lot to be desired. Additionally, folks are so used to how NFS v3 works that introducing Kerberos into the mix is challenging. How are other groups (business, academic, whatever), addressing security, yet doing it in an inexpensive manner and allowing cross-platform access? Is anyone doing NFS v4 (or v3) with Kerberos today? Thanks, Mike Garrison

6 10

Converting to ipspace config
by Fletcher Cocquyt 10 Nov '14

10 Nov '14

We have a mgmt directive to migrate our vfilers to use distinct ipspaces. The procedure as described by Netapp support involves major downtime (destroying vfiler containers and rebuilding with the volumes served within the new ipspace) I'm looking for advice for anyone who has been through this procedure - any way to minimize downtime (already looking at using VMware storage vmotion to migrate VMs to pre-ipspaced vfiler datastores) Thanks for any info, tips Fletcher

2 1

Cluster OS snapmirror how to's
by Iluhes 04 Nov '14

04 Nov '14

Hi Folks, Need your help I am used to do snapmirrors from within vFilers. i would add a second nick into vFiler in 7-mode, for network that is used for replication and than setup snapmirror inside the vFiler. How does it work in CDOT? Can I setup snapmirror on vserver level? If yes, than can I add replication network as second LIF inside vserver (if yes, what is the protocal type?) If not, how is it done? Snapmirror on cluter level? Can I use intercluster LIFS for that? I dont want the peering relationship, I just want qtree/volume level snapmirror between vserver volumes, but yet over specific replication network

3 4

StoreVault Chassis Swap
by Stephen Stocke 03 Nov '14

03 Nov '14

Hi We have a need to recover some data which was stored on a StoreVault S550. We have all the disks from the original system and a spare S550 chassis. Unfortunately, we don't have the CF card from the original system but the spare chassis still has its original CF card and we have licenses for the protocols required on the spare. Does anyone have any insights as to how we can accomplish this? I'm hoping it will be as easy as booting the spare chassis to maintenance mode and changing ownership of the disks and then booting from vol0 on the newly found aggregate. We're a little nervous to just try it without some guidance in case there's any chance that the new controller might do something drastic to the "foreign" disks. We're obviously out of other options if we're considering this path... Finally, Netapp have taken down the old KB which provided the procedure for a chassis swap (KB42667) and unfortunately I don't have a copy anywhere. I don't think it quite covered our scenario but if anyone has a copy and can forward it, I would be grateful! Kind regards Steve -------------------------------------------------------------------------------- This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal -------------------------------------------------------------------------------- disclaimer This email communication does not create or vary any contractual relationship between LogicalisCI and you. Internet communications are not secure and accordingly LogicalisCI does not accept any legal liability for the contents of this message. The contents of this email are confidential to the intended recipient at the email address to which it has been addressed. It may not be disclosed to or used by anyone other than this addressee, nor may it be copied in any way. If received in error, please contact LogicalisCI on the above number (listed as Main) quoting the name of the sender and the addressee and then delete it from your system. Please note that neither LogicalisCI nor the sender accepts any responsibility for viruses and it is your responsibility to scan the email and attachments (if any). Please be aware that LogicalisCI may monitor email traffic data and also email content for security purposes. The following companies are collectively referred to in the above statements as LogicalisCI: Logicalis Channel Islands Limited, Registered in Jersey No: 67161, Registered Office: Rue A La Dame, Five Oaks, St. Saviour, Jersey, JE2 7NH Logicalis Jersey Limited, Registered in Jersey No: 10124, Registered Office: Rue A La Dame, Five Oaks, St. Saviour, Jersey, JE2 7NH Logicalis Guernsey Limited, Registered in Guernsey No: 10896, Registered Office: Pitronnerie Road, St. Peter Port, Guernsey, GY1 2RF

2 2

AW: Cannot login to service processor on FAS2240-4
by Alexander Griesser 01 Nov '14

01 Nov '14

Issue resolved, I fell for it again and forgot that I had this problem already years ago. When the root password of the filer is > 16 characters, you may only use the first 16 characters of this password for the service processor, so while it seems to automatically shrink the password string when setting it onto the service processor, it does not just ignore the excess characters at the end, you need to shorten the password to 16 characters to be able to login on the SP then. Best, Alexander Griesser System-Administrator ANEXIA Internetdienstleistungs GmbH E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: Alexander Griesser Gesendet: Samstag, 01. November 2014 21:01 An: toasters(a)teaparty.net Betreff: Cannot login to service processor on FAS2240-4 Hi, I'm currently experiencing a strange issue with one of our FAS2240-4 systems - I am unable to login to the service processor using the username "naroot" and the password for the normal root account. I've rebooted the service processor several times and have also reset the password of the root account on the system itself, but it does not change the behaviour. I've also just updated the filer to 8.2.2P1, SP is 2.2.2P2 (latest available version) - any ideas what else could cause this issue of not being able to log in to the service processor? Best, Alexander Griesser System-Administrator ANEXIA Internetdienstleistungs GmbH E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

1 0

Cannot login to service processor on FAS2240-4
by Alexander Griesser 01 Nov '14

01 Nov '14

Hi, I'm currently experiencing a strange issue with one of our FAS2240-4 systems - I am unable to login to the service processor using the username "naroot" and the password for the normal root account. I've rebooted the service processor several times and have also reset the password of the root account on the system itself, but it does not change the behaviour. I've also just updated the filer to 8.2.2P1, SP is 2.2.2P2 (latest available version) - any ideas what else could cause this issue of not being able to log in to the service processor? Best, Alexander Griesser System-Administrator ANEXIA Internetdienstleistungs GmbH E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

1 0

working with oplocks
by Eric Peng 31 Oct '14

31 Oct '14

I have an end user who would like to be able to use a "veto oplock files" setting (found in Samba) on the NetApp, but from what I can tell this feature does not appear to be available. Seems to me that oplocks handling on the NetApp is more simplified (either enabled or disabled). Wanted to confirm if this is the case, or are there ways to emulate the "veto oplock files" setting feature on the NetApp? I am running SMB 2.0 on our NetApp (7-mode), DOT 8.1.4 P1. Thanks, Eric

3 5

C-mode 8.3
by Mike Gossett 31 Oct '14

31 Oct '14

Hi all: It looks like the ontap 8.3 release is out. Does anyone have any information about the upgrade process from 8.2.2 c-mode? My NetApp SE informed me that with 8.3 they are doing away with the required 6 dedicated disks for the cluster storage... i'm curious if this upgrade path is minimally disruptive. Thanks, Mike

5 4

cDOT cluster net flow control?
by Mike Thompson 31 Oct '14

31 Oct '14

Hey all, I have two ancient 8.0.5 cDOT clusters running several 6080s with pairs of Cisco 5010s for 10gig cluster net, 2 x 10gig cluster ports per filer (can't upgrade them, no support, long story..) Anyway, just recently one of these clusters started periodically spewing some partial and full packet loss errors on the cluster net - multiple filers, multiple ports, not local to a specific cluster switch. Tried powering off each cluster switch, I get the same thing whether it's one, the other, or both switches in play. I notice that flow control is enabled on the ports filer-side, but not on the cluster switches. I never really paid any attention to that, as they came from NetApp in this config, and have been working fine to date. However now that I've been doing some digging, I see a lot of mentions that it's recommended that flow-control be disabled completely on 10 gigabit gear with NetApp. Since it's enabled on the filers, but not on the cluster switches, it's effectively off anyway, right? Or am I missing something? The switches see plenty of pause frames coming in from the filers, so it would appear they are wanting things to slow down. I'm wondering if I'm hitting some threshold on the filers that's causing this periodic packet loss. It's not associated with a specific port, so doesn't appear to be a specific optic burning out, and it's present regardless of using either or both switches. stats periodic only shows a GB or so passing over the net between these 8 x 6080s, and ops cluster wide are not that high at all, so I'm kinda stumped. I've dealt with plenty of bad optics in the past, and we usually run out of steam and the disk or head level, so these cluster net issues are new to me. My thought is to go ahead and try enabling flow control on the switches, but that seems to be recommended against. Any ideas?

2 2

Job Posting: Looking for someone in Canada
by Basil 24 Oct '14

24 Oct '14

As per Tom's email, I figured I'd reach out here. We're hiring a Netapp admin to work in Montreal, Canada. If you have questions or are interested, please email me.

1 0

SP Firmware Failing
by Steven Kreuzer 23 Oct '14

23 Oct '14

Hello- I have a 2240-2 and I am attempting to upgrade to SP firmware to version 2.2.2P2. I keep getting 'ERROR: Metadata absent in new package' when attempting to install the firmware. The filer I am testing on is running version 2.1, and I was able to upgrade it to version 2.1.3 without error. However, attempting to upgrade to 2.2, 2.2.1 or 2.2.2P2 are failing SP toaster> version Booted primary firmware version 2.1.3 Booted primary ACP version 01.10 Primary firmware version 2.1.3 Primary ACP version 01.10 Backup firmware version 2.1.3 Backup ACP version 01.10 SP toaster> sp update http://www/~steven/306-02160_A0_SP_2.2_SP_FW.tar.gz Downloading package... Uncompressing package... Unarchiving package... Inspecting firmware...ERROR: Metadata absent in new package Installing package... FW package install failed.....FAILED Cleaning up... ERROR : SP FW Update Unsuccessful. As far as I can tell, everything looks good in the firmware tarball $ tar -ztf 306-02160_A0_SP_2.2_SP_FW.tar.gz ./ ./RLM_FW/ ./RLM_FW/linux/ ./RLM_FW/linux/uImage ./RLM_FW/root-fs-image/ ./RLM_FW/root-fs-image/Root.bin ./RLM_FW/root-fs-image/Config.bin ./RLM_FW/uboot/ ./RLM_FW/uboot/u-boot.bin ./RLM_FW/uboot/secondary-u-boot.bin ./RLM_FW/uboot/tiny-rom.bin ./RLM_FW/install/ ./RLM_FW/install/Metadata ./RLM_FW/install/info.symlinks ./RLM_FW/install/post-install-script ./RLM_FW/install/checksum.regfiles.0 Has anyone seen this before? Thanks

4 5

storage / linux admin job
by Momonth 22 Oct '14

22 Oct '14

Hi, // sorry, if it's offtopic Is advertising jobs allowed here? I'd post more details if it's allowed. A company I work for looks for storage / linux sysadmin. Cheers, Vladimir

3 4

In place 32-64bit aggr upgrade
by Fred Grieco 22 Oct '14

22 Oct '14

Has anyone tried the priv set diag "aggr 64bit-upgrade start aggr1 -mode grow-all" command? I am entertaining doing this in 7 mode. Also, it says something about growing the volume. How much does it grow the volume by? TIA, Fred

2 1

Antwort: Re: Access to deprecated home share
by Markus.Schlegel＠roto-frank.com 21 Oct '14

21 Oct '14

Hi Basil, thank you for your reply. I found out that \\filer\%username% works, but \\filer\~ does not. Thats why it worked with some userprofiles. We've changed the profiles to point to \\filer\%username% and it works now for everyone, but i still receive a lot of these warning inside my messages log. Maybe it has something to do with these undocumented options i couldn't find any info to. cifs homedir showuser always points to the correct directory. Ownership is also correct. Mit freundlichen Grüßen / Best Regards Markus Schlegel Von: Basil <basilberntsen(a)gmail.com> An: Markus Schlegel/RFLE/ROTO_FRANK@ROTO_FRANK Datum: 20.10.2014 15:57 Betreff: Re: Access to deprecated home share You say some user profiles- does that mean some work? For a user where this doesn't work, please try cifs homedir showuser hute, as well as check that the owner of the folder is the user. I know the user has access, but apparently ownership matters with some configurations. On Mon, Oct 20, 2014 at 4:40 AM, <Markus.Schlegel(a)roto-frank.com> wrote: Hello everyone, i've migrated an old 2020-Filer (7.3.5) to a 2520-Filer (8.2.2 7-mode). Everything seems to work except the CIFS homedirectories. I'm unable to access the filer via \\filer\~, so some userprofiles are unable to load. On the console i receive Warnings like this: [filer:cifs.homedir.accessRejected:warning]: CIFS: Access to a deprecated home share from station 10.12.1.240(RFVETS03) for user RFVE_DOMAIN\hute. The request was rejected. Everything i can think about is configured like on the old filer (cifs_homedir.cfg, cifs_share.cfg and other cifs options) I found two options where i'm unsure what they do, and i couldn't find any info about it: cifs.home_dir.generic_share_access_level 3 cifs.home_dir.generic_share_access_warn on The other home_dir options: cifs.home_dir_namestyle ntname cifs.home_dirs_public_for_admin on cifs homedir = /vol/vol_userhome The directory /vol/vol_userhome/hute exists and is accessible by the user. So a user should be able to access his homedir via \\filer\~ without the need of a own share Any ideas? Mit freundlichen Grüßen / Best Regards Markus Schlegel Roto Frank AG Wilhelm-Frank-Platz 1 . D-70771 Leinfelden-Echterdingen . Telefon +49 711 7598 0 Sitz der Gesellschaft: Leinfelden-Echterdingen . Amtsgericht: Stuttgart . HRB 222 698 . Ust-IdNr.: DE147843524 Aufsichtsrat: Dr. Michael Stahl (Vorsitzender) Vorstand: Dr. Eckhard Keill (Vorsitzender), Leonhard Braig, Christoph Hugenberg, Michael Stangier _______________________________________________ Toasters mailing list Toasters(a)teaparty.net http://www.teaparty.net/mailman/listinfo/toasters Roto Frank AG Wilhelm-Frank-Platz 1 . D-70771 Leinfelden-Echterdingen . Telefon +49 711 7598 0 Sitz der Gesellschaft: Leinfelden-Echterdingen . Amtsgericht: Stuttgart . HRB 222 698 . Ust-IdNr.: DE147843524 Aufsichtsrat: Dr. Michael Stahl (Vorsitzender) Vorstand: Dr. Eckhard Keill (Vorsitzender), Leonhard Braig, Christoph Hugenberg, Michael Stangier

1 0

I can't seem to reply?
by Basil 21 Oct '14

21 Oct '14

Hi there, I replied to a recent message to the mailing list and I don't see my reply on the site. Is there something special I need to do?

2 1

Access to deprecated home share
by Markus.Schlegel＠roto-frank.com 20 Oct '14

20 Oct '14

Hello everyone, i've migrated an old 2020-Filer (7.3.5) to a 2520-Filer (8.2.2 7-mode). Everything seems to work except the CIFS homedirectories. I'm unable to access the filer via \\filer\~, so some userprofiles are unable to load. On the console i receive Warnings like this: [filer:cifs.homedir.accessRejected:warning]: CIFS: Access to a deprecated home share from station 10.12.1.240(RFVETS03) for user RFVE_DOMAIN\hute. The request was rejected. Everything i can think about is configured like on the old filer (cifs_homedir.cfg, cifs_share.cfg and other cifs options) I found two options where i'm unsure what they do, and i couldn't find any info about it: cifs.home_dir.generic_share_access_level 3 cifs.home_dir.generic_share_access_warn on The other home_dir options: cifs.home_dir_namestyle ntname cifs.home_dirs_public_for_admin on cifs homedir = /vol/vol_userhome The directory /vol/vol_userhome/hute exists and is accessible by the user. So a user should be able to access his homedir via \\filer\~ without the need of a own share Any ideas? Mit freundlichen Grüßen / Best Regards Markus Schlegel Roto Frank AG Wilhelm-Frank-Platz 1 . D-70771 Leinfelden-Echterdingen . Telefon +49 711 7598 0 Sitz der Gesellschaft: Leinfelden-Echterdingen . Amtsgericht: Stuttgart . HRB 222 698 . Ust-IdNr.: DE147843524 Aufsichtsrat: Dr. Michael Stahl (Vorsitzender) Vorstand: Dr. Eckhard Keill (Vorsitzender), Leonhard Braig, Christoph Hugenberg, Michael Stangier

1 0

CIFS joining a filer to a read only domain controller.
by Edward Rolison 14 Oct '14

14 Oct '14

I've found: https://kb.netapp.com/support/index?page=content&id=1012918 Which basically says - try pointing your filer at a writable DC. That's difficult, for a variety of reasons - not least because this is an isolated network segment, and the vfiler is in it's own IP space. Does anyone know a better way of joining the domain? On a standalone Linux/Windows box, I can manually create machine accounts and set necessary passwords. The firewall is run by a separate team, and so temporary rules for this purpose is a nuisance. (Probably not _completely_ impossible though). Has anyone done this and come up with a better solution? The 'domain join' process isn't _that_ complicated, in that all it's doing is generating a local kerberos keytab and setting a local shared secret. Thanks and regards, Ed Rolison

1 0

Question regarding NVRAM battery
by Camillo Gornati 08 Oct '14

08 Oct '14

Hello all! We have 4 net app systems a FAS2020, 2 x FAS2020a and one FAS2040. The FAS2040 had a NVRAM battery losing power until it shut down because of the battery not having power. Purchased a battery, replaced, and still no charge. Now we though the problem was the controller, so i purchased a new controller, replaced CF CARD and inserted back in the chassis, noticed battery wasn’t charging either, now controller has shut down again and battery is not charging. Could someone give me a light on this one? Firmware issue? Thanks again!

5 6

FAS2040 config
by Camillo Gornati 06 Oct '14

06 Oct '14

Hello all! What is the best/most popular way to connect and configure network on a FAS2040? We have 2 controllers, e0a-e0d on wach controller. LACP trunk on e0a-e0b on both controllers each one connected to a diff. switch. Dont know exactly what to do with e0c, e0d. Should i add to the actual trunk and connect to a diff. switch? Should i create a new trunk and connect to what? Thanks very much in advance.

1 0

looking for thoughts on NetApp high end storage
by Rhodes, Richard L. 02 Oct '14

02 Oct '14

Hi Everyone, We currently use some low end IBM NSeries for a specific application. All of our other storage is from a large three letter vendor. We have never really considered NetApp for our high end Tier 1 storage. For our T1 three letter vendor storage we replicate bi-directionally between two datacenters. Years ago we used synchronous replication, but at the last rollover have changed to async replication due to write latencies. It's worked very well. The storage systems are roughly 5-10 seconds out of sync. I was looking at what OnTap supports for this kind of work. I see that in 7-mode it supports sync and semi-sync. Semi-sync seems interesting for what we do, except that you have to replicate within a Consistency Point. You have until the other half of nvram fills up to complete the current CP with replication. When I looked at C-mode, I can find no mention of sync or semi-sync at all. Q) Does C-mode support semi-sync? Q) If not, can normal async snapmirror support replication into the 10-15 second lag range? (note - T1 storage is almost all large Oracle DB's) Q) Any other idea on how you would implement a low lag async replication with NetApp? Thanks Rick ----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters