toasters

toasters@lists.teaparty.net

1 participants
13532 discussions

Authentication Issues w/ SCCM talking to filer via CIFS w/ Computer Account
by Ray Van Dolson 05 Feb '13

05 Feb '13

We're having authentication issues with SCCM pointed at a CIFS share on a filer running ONTAP 8.0.x. SCCM uses a domain computer account to authenticate (our filer is also joined to our domain). We've added the computer account at the share level (as well as "Domain Computers") with full permissions, but continue to get authentication denied errors back from the filer. Speficially: Fri Feb 1 16:28:27 PST [red-str-napc2-p2: auth.trace.authenticateUser.loginTraceIP:info]: AUTH: Login attempt by user red-inf-cm-p01$ of domain DOMAIN from client machine 1.1.1.1 (RED-INF-CM-P01). Fri Feb 1 16:28:27 PST [red-str-napc2-p2: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- attempting authentication with domain controller \\REDDC1. Fri Feb 1 16:28:27 PST [red-str-napc2-p2: auth.trace.authenticateUser.loginRejected:info]: AUTH: Login attempt by user rejected by the domain controller with error 0xc0000199: STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT. Fri Feb 1 16:28:28 PST [red-str-napc2-p2: auth.trace.authenticateUser.loginTraceIP:info]: AUTH: Login attempt by user red-inf-cm-p01$ of domain DOMAIN from client machine 1.1.1.1 (RED-INF-CM-P01). This reads like the problem is with AD rejecting the login, but when we point to another CIFS share on a real Windows box we don't get the same problem, so we don't think that's the case. We came across this KB article[1] which seems to disable the use of the computer account for authentication. However, this seems to send *no* authentication information at all (anonymous?) which of course is rejected as well. Help? We'll be reaching out to support as well. Thanks, Ray [1] https://kb.netapp.com/support/index?page=content&id=2013374

3 6

NT_STATUS_NO_MEMORY
by Ray Van Dolson 05 Feb '13

05 Feb '13

Anyone ever encountered this error when attempting to access a CIFS share on an ONTAP 8.0.x system? ("NT_STATUS_NO_MEMORY"). We encountered reports from users of intermittent failures to connect to CIFS shares. From Windows hosts, things would just time out. From Samba clients, the above NT_STATUS_NO_MEMORY error was the result. The "fix" ended up being to restart the CIFS service on the system, but wondering what the true root cause here might be. I'm unsure how accurate the error returned by the Samba client is -- in any case there doesn't appear to be a way to query memory utilization on the NetApp. Thanks, Ray

2 2

VSC 4.1 & Online alignments
by Scott Eno 05 Feb '13

05 Feb '13

Hi, We're trying to get some VM's aligned in our NFS-based VMware environment using the "online" alignment tool packaged in VSC. Since we are NFS, the tool needs a VMFS datastore to use to align the VM. When we run the tool and it moves the VM to the VMFS datastore, the VM no longer shows up as misaligned. However, if we move the VM back to an NFS datastore, it shows up as misaligned again. So, is this a one-way trip? NFS --> VMFS, but that VM can never go back?

4 10

RE: nasty virus
by Klise, Steve 04 Feb '13

04 Feb '13

To fast on the trigger.. I don't want to start up the thread about AV on or not on the filers (I run it on my filer), but we got hit with a nasty variant of this. Not sure why Trend didn't block it, but basically a bunch of my CIF folders were set to read only/hidden.. Not fun. There are some other reasons that need to be mitigated that I wont go into, but this is the virus. http://about-threats.trendmicro.com/Malware.aspx?id=47409&name=WORM_VOBFUS.… To unhide the share, we were mapped to the share location, and ran this.. It unhides the shares lick-ity split. >From an XP box.. Cmd "usebackq delims=#" %i in (`dir *. /ah /s /b`) do attrib -s -h "%i" Just share because I care..

2 1

instantaneous snap restore ?
by Avi Ben Emanuel (Wollman) 04 Feb '13

04 Feb '13

marketing continuously claim that snap restore is instantaneous. yet I have yet to succeeded doing so. "snap restore" of files to a location quite a while and is "copying the files" nothing close to instantaneous. i would be happy to understand what i am missing. the following is a example of a virtual disk that was restored, it took quite a while to "restore"=copy this 80gb file. snap restore -t file -s nightly.0 /vol/vmsata/vmfs1/lms-client/lms-clinet-flat.vmdk Avi -- ------------ Avi Ben Emanuel (Wollman) (אבי בן עמנואל (וולמן Systems Engineer | Unix Microsoft Vmware Jerusalem College of Technology מחלקת תקשוב בית הספר הגבוה לטכנולוגיה - מכון לב POB 16031 Jerusalem 91160 Israel הועד הלאומי 21 ירושלים Email: avi(a)jct.ac.il | Office: +972-2-6751036 | Mobile: +972-52-3809107 ------------

4 3

Re: Aggregate Disk Busy 100% with volume IOPS low
by Fletcher Cocquyt 27 Jan '13

27 Jan '13

Indeed, We are considering replacing our premium support with next day and using the savings to buy some professional services - we've heard other groups see better support ROI with this combination. On the wafl block reclamation - are you talking about options wafl.trunc.throttle.vol.max etc? we had to tune that back in 2010 7.3x days: http://www.vmadmin.info/2010/11/vfiler-migrate-netapp-lockup.html But not sure this is still a hidden option in 8.1.x? I read references to a tool called perfviewer - anyone still using that? thanks On Jan 26, 2013, at 1:45 PM, Isaiah <zoratu(a)gmail.com> wrote: > If I were you, I would purchase some incident-based support from Berkeley Communications ("Berkcom"). They're the only reseller of both used and new NetApp gear in the world. They know more about NetApp than NetApp. I've been a customer for nine years and they're the first number I call--because they're all experts. No escalation yadda yadda. Completely worth the modest fees to support gear not purchased through them. > > The last time your situation happened to me I ended up having to tune the wafl block reclamation aggressiveness. There were so many snapshots happening on the system with lots of gradual changes that the disk utilization was high just reclaiming blocks that used to be dirty. > -- > - Isaiah > > On Jan 26, 2013, at 10:15, Fletcher Cocquyt <fcocquyt(a)stanford.edu> wrote: > >> On Nick's advice I setup a job to log both wafltop and ps -c 1 once per minute - and we had a sustained sata0 disk busy from 5am-7am as reported by NMC. >> First question I have from wafltop show is - what is the first row (sata0::file i/o) reporting ? What could be the source of these 28907 non-volume specific Read IOs? >> >> Application MB Total MB Read(STD) MB Write(STD) Read IOs(STD) Write IOs(STD) >> ----------- -------- ------------ ------------- ------------- -------------- >> sata0::file i/o: 5860 5830 30 28907 0 >> sata0:backup:nfsv3: 608 0 608 31 0 >> >> I'm just starting to go through the data >> >> aggr status >> Aggr State Status Options >> sata0 online raid_dp, aggr nosnap=on, raidsize=12 >> 64-bit >> aggr2 online raid_dp, aggr nosnap=on, raidsize=19 >> 64-bit >> aggr1 online raid_dp, aggr root, nosnap=on, raidsize=14 >> 32-bit >> na04*> df -Ah >> Aggregate total used avail capacity >> aggr1 13TB 11TB 1431GB 89% >> aggr2 19TB 14TB 5305GB 74% >> sata0 27TB 19TB 8027GB 72% >> >> >> <sataIOPSJan26.jpeg> >> >> thanks >> >> >> On Jan 25, 2013, at 5:33 PM, Nicholas Bernstein <nick(a)nicholasbernstein.com> wrote: >> >>> Try doing a 'ps -c 1' or a wafltop show (double check the syntax) while you're getting the spike; those will probably help you narrow down the processes that are using your disks. Both are priv set advanced/diag commands. >>> >>> Nick >>> >> >> _______________________________________________ >> Toasters mailing list >> Toasters(a)teaparty.net >> http://www.teaparty.net/mailman/listinfo/toasters

1 0

Re: Aggregate Disk Busy 100% with volume IOPS low
by Fletcher Cocquyt 24 Jan '13

24 Jan '13

Hi Mike, this is a snap mirror SOURCE. The perfstats captured during the issue include wafl scan status - I'll mention it to the engineer when I show the disparity btw AGGR OPS and total volume OPS. Unfortunately its not easy to differentiate the source of IOPS with any existing tools in my experience - including perfstats and escalated Netapp support analysis. But the NMC AGGR vs volume stats need to be explained somehow. thanks On Jan 23, 2013, at 9:35 PM, Mike Nye <Mike.Nye(a)xpanse.com.au> wrote: > Hi Fletcher, > > Is this FAS a SnapMirror destination? This sounds very much like a volume deswizzle / CBR scan issue… > > You could try scheduling a “priv set advanced; wafl scan status” to run via RSH/SSH during the time of poor performance, to see what internal WAFL scans are taking place on the system. > > Thinks to look for are “Container Block Reclamation” and/or “Volume Deswizzle”. > > Kind regards, > Mike Nye > > > <image001.jpg> > <image002.jpg> > Mike Nye > Team Lead Systems Engineer > mike.nye(a)xpanse.com.au > www.xpanse.com.au > Mob: > Office: > Fax: > +61 407 772 465 > +61 8 9322 6767 > +61 8 9322 6077 > 18 Emerald Tce > West Perth > WA 6005 > <image003.jpg> > > > From: toasters-bounces(a)teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Fletcher Cocquyt > Sent: Thursday, 24 January 2013 1:28 PM > To: toasters(a)teaparty.net Lists > Subject: Aggregate Disk Busy 100% with volume IOPS low > > 3270 cluster, OnTAP 8.1-7mode > > We are investigating a SATA aggregate showing repeated 5am disk 100% busy spikes without its volumes showing any corresponding IOPS spike as reported by Netapp Management Console (NMC). > The 5am disk busy spikes correlate with very high latency on volumes on a different SAS aggregate. These volumes host VMs which then timeout, some needing reboots. > Today when I heard from Netapp support after reviewing my perfstat the engineer reported this is expected since NVRAM buffers are shared btw aggregates. > > But when I dig further into the NMC stats I see the SATA aggregate disk busy actually corresponds to a DROP in IOPS on the 3 volumes hosted on the SATA aggregate - almost like some internal aggregate operations are starving out the external volume ops. > I checked the snapshots (vol and aggr), snap mirror, dedup and none of the usual suspects were running. > > When I look at the NMC throughput graphs and switch on the legend - it shows a 5am READ blocks/sec spike corresponding perfectly to the disk busy. > > Where are these AGGR level READ operations coming from that are missing from the constituent volume IOPS, and in fact seem to be starving out volume level IO? > > I don't see much in the messages log, but will check the rest of the logs for internal type OPS > > thanks for any insight > > > > > >

2 1

Re: Aggregate Disk Busy 100% with volume IOPS low
by Fletcher Cocquyt 24 Jan '13

24 Jan '13

No NDMP in use for us - at a loss to explain this level of AGGR disk busy with no vol level IO Feels like an internal type operation hitting a bug thanks On Jan 23, 2013, at 10:21 PM, "Klise, Steve" <klises(a)sutterhealth.org> wrote: > A stab but what about ndmp jobs? > > From: Fletcher Cocquyt [mailto:fcocquyt@stanford.edu] > Sent: Wednesday, January 23, 2013 09:27 PM > To: toasters(a)teaparty.net Lists <toasters(a)teaparty.net> > Subject: Aggregate Disk Busy 100% with volume IOPS low > > 3270 cluster, OnTAP 8.1-7mode > > We are investigating a SATA aggregate showing repeated 5am disk 100% busy spikes without its volumes showing any corresponding IOPS spike as reported by Netapp Management Console (NMC). > The 5am disk busy spikes correlate with very high latency on volumes on a different SAS aggregate. These volumes host VMs which then timeout, some needing reboots. > Today when I heard from Netapp support after reviewing my perfstat the engineer reported this is expected since NVRAM buffers are shared btw aggregates. > > But when I dig further into the NMC stats I see the SATA aggregate disk busy actually corresponds to a DROP in IOPS on the 3 volumes hosted on the SATA aggregate - almost like some internal aggregate operations are starving out the external volume ops. > I checked the snapshots (vol and aggr), snap mirror, dedup and none of the usual suspects were running. > > When I look at the NMC throughput graphs and switch on the legend - it shows a 5am READ blocks/sec spike corresponding perfectly to the disk busy. > > Where are these AGGR level READ operations coming from that are missing from the constituent volume IOPS, and in fact seem to be starving out volume level IO? > > I don't see much in the messages log, but will check the rest of the logs for internal type OPS > > thanks for any insight > > > > > >

1 0

Vfiler DR activate
by Iluhes 22 Jan '13

22 Jan '13

Hello Toasters, After running VFILER DR Activate and failing over vFiler to DR site, none of the shares were available. The DC controller was not available in DR bubble, but we thought that local admin users on vfiler should have access to shares. We could not access shares. For certain vFiler DRs when the production side is a domain member, we have a need to have the filer available in a DR test situation in which the domain controller is not available. We have found in testing that in the absence of the domain controller, all share access is denied. Even when we try accessing with local accounts, which on a Windows file server, would have let us access the share in the absence of a domain controller we are denied access. Is that correct behavior? We would get: "There are currently no logon server available to service the logon request" Is there anyway to do vFiler DR where the vFiler is a domain member where one can access the shares in DR without the domain being present--using local accounts only. Thanks!!!

2 1

RE: Vfiler DR activate
by steve klise 22 Jan '13

22 Jan '13

Was there a delta in time between the filer and the clinet? Usually AD has to be within 5 minutes of source and destination for Kerberos. You would want an AD controller to be available, and usually the 1st box up for CIFS authentication... Sent from Windows Mail From: Iluhes Sent: ‎January‎ ‎21‎, ‎2013 ‎6‎:‎06‎ ‎PM To: toasters(a)teaparty.net Subject: Vfiler DR activate Hello Toasters, After running VFILER DR Activate and failing over vFiler to DR site, none of the shares were available. The DC controller was not available in DR bubble, but we thought that local admin users on vfiler should have access to shares. We could not access shares. For certain vFiler DRs when the production side is a domain member, we have a need to have the filer available in a DR test situation in which the domain controller is not available. We have found in testing that in the absence of the domain controller, all share access is denied. Even when we try accessing with local accounts, which on a Windows file server, would have let us access the share in the absence of a domain controller we are denied access. Is that correct behavior? We would get: "There are currently no logon server available to service the logon request" Is there anyway to do vFiler DR where the vFiler is a domain member where one can access the shares in DR without the domain being present--using local accounts only. Thanks!!!

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters