toasters

toasters@lists.teaparty.net

13520 discussions

User 'root' denied access - missing required capability: 'cli-route'
by Fletcher Cocquyt 04 May '12

04 May '12

I'm seeing this error "User 'root' denied access - missing required capability: 'cli-route'" (on the console) at the cutover stage of vFiler migration under 8.1 GA The vFiler migrations are successful, but this error is troubling for production vFiler migrations which require zero downtime. I opened a netapp support case and posted more details here: https://communities.netapp.com/message/80796 I'm looking to confirm the proper useradmin user->group->role mappings for root in case 8.1GA introduced some bug. I have (note no groups for root user - should I create a root group and add the mapping to the root role?): useradmin user list Name: root Info: Default system administrator. Rid: 0 Groups: -- useradmin group list Name: Administrators Info: Members can fully administer the filer Rid: 544 Roles: admin Name: Backup Operators Info: Members can bypass file security to backup files Rid: 551 Roles: backup,none Name: Compliance Administrators Info: Members can perform compliance operations Rid: 131072 Roles: compliance Name: Guests Info: Users granted Guest Access Rid: 546 Roles: none Name: ndmp Info: Rid: 131077 Roles: ndmp_role Name: oragroup Info: Rid: 131075 Roles: oracle Name: Power Users Info: Members that can share directories Rid: 547 Roles: power Name: Replicators Info: not supported Rid: 552 Roles: none Name: Users Info: Ordinary Users Rid: 545 Roles: audit -- useradmin role list Name: admin Info: Allowed Capabilities: login-*,cli-*,api-*,security-* Name: audit Info: Allowed Capabilities: api-snmp-get,api-snmp-get-next Name: backup Info: Default role for NDMP privileges. Allowed Capabilities: login-ndmp Name: compliance Info: Default role for compliance privileges. Allowed Capabilities: cli-cifs*,cli-exportfs*,cli-nfs*,cli-useradmin*,api-cifs-*,api-nfs-*,login-telnet,login-http-admin,login-rsh,login-ssh,api-system-api-*,cli-snaplock*,api-snaplock-*,api-file-*,compliance-* Name: ndmp_role Info: Allowed Capabilities: login-ndmp Name: none Info: Allowed Capabilities: Name: oracle Info: Allowed Capabilities: login-ssh,cli-snap* Name: power Info: Allowed Capabilities: cli-cifs*,cli-exportfs*,cli-nfs*,cli-useradmin*,api-cifs-*,api-nfs-*,login-telnet,login-http-admin,login-rsh,login-ssh Name: root Info: Allowed Capabilities: * thanks

1 0

DataMotion for Volumes in 8.1?
by Randy Rue 03 May '12

03 May '12

Hello All, Running 8.1GA on a 3240 and trying to move two vfilers from one aggregate to another (both are 64 bit aggrs). Ultimately I just need to move the root and data volumes for these vfilers. Not finding a wealth of examples on the "vol move" command, not surprising as this is a pretty new feature. http://www.netapp.com/us/communities/tech-ontap/tot-data-motion-1102.html NetApp's blurb says this can be done without interruption, but also talks a lot about when to do the "cutover." They say the cutover can be triggered manually or automatically. But I can't make the "vol move" command do anything but return a usage blurb unless I include a "start" switch. Also, their website claims this can be done nondisruptively. But "vol move start" keeps failing because I have CIFS and/or NFS running. In fact, if I turn them both off it still complains that I have NFS exports configured and that I need to remove them first. Anyone have experience moving volumes from one aggr to another, hopefully live? Randy Rue

6 8

Getting a quick "connection refused"
by David Lee 02 May '12

02 May '12

A TCP connection towards an arbitrary high port number (>=1024) on the NetApp seems to return "connection refused" instantly. By contrast, a connection towards a low port number waits for several minutes, then something times out. I imagine this is related to assisting security etc. As part of our transition from our previous non-NetApp fileserver, it would be very useful if we could persuade the NetApp to return a quick "connection refused" on a particular low port number. But we cannot see a way to adjust this behaviour (either for a particular low port or for all low ports). Is this possible? If so, could you point us to the relevant documentation, please? (If it is not possible, we can probably put a workaround in the external application.) -- David Lee

4 4

List Administrivia - posts from non-subscribers
by Tom Yates 30 Apr '12

30 Apr '12

At the moment, you have to be a subscriber to post to this list, but if you post from a non-subscribed address, it's referred to the moderators for manual approval. We must be getting famous at the new address, because more and more spam is being received by the list; it now significantly outweighs the legitimate posts referred to the moderators. So I plan to reconfigure the list to simply reject posts from non-subscribers; I expect I'll do that in about a week's time. I'll let the list know when the change has been made. Meanwhile, may I urge people posting to make sure they're posting from the address at which they're subscribed? If you genuinely want to use multiple addresses to post, I'll point out that you can subscribe all of your possible posting addresses, then use the web interface to opt all but one out of receiving list posts (set "nomail" for each of them). If anyone's got issues with this, please email me and the other moderator *OFFLIST* at owner-toasters -at- teaparty.net; I'm open to suggestions, provided they're made before any change. -- Tom Yates - http://www.teaparty.net

1 1

Reallocation and VMware
by Peta Thames 29 Apr '12

29 Apr '12

Hi all, I'd like to pick your collective brains about your experiences with reallocate, specifically when reallocating luns under VMware. For background, we're running ONTAP 8.0.1 on a 3170 that's over three years old. I've been going through measuring reallocation, and most of the volumes are over 3. We have no snapshots, and only a relatively small number of volumes are de-duplicated. All our volumes and luns are thin-provisioned, and no aggregate is more than 76% full (most are ~65%). We regularly have huge latency spikes (worst I've seen so far is 5000000ms, and there are far too many to even track over 50000ms daily), and on one filer head, but not its partner, I regularly see disk utilisation go to 100% or more. I'm hoping reallocate will help here. I have a brief note from a NetApp support person who says "It’s very important that you complete the reallocation in the following order: 1:OS 2:LUN 3: Volume". I have two questions about this: - is it absolutely necessary to defrag the OS before you reallocate the lun? I'm sure I've run reallocate without defraging the OS and still seen performance improvements. I'm also assuming that this is only relevant to Windows VMs, not Linux (in our case, Red Hat/CentOS) ones. - if you only have one lun per volume, do you still need to run reallocate on both the lun and the volume? If only one, which is preferable? All advice appreciated. Thanks, Peta

7 8

Mixing SAS/SATA DS4243 in the same stack.
by Jeff Cleverley 27 Apr '12

27 Apr '12

Greetings, I know that I can have a mixed stack of SAS and SATA shelves as long as all the drives in each shelf are the same type. I was wondering if anyone has seen any performance issues with this type of mix or if the preferred practice is to not mix them in a stack? I have some shelves to add and it would be very convenient if I put them all in the same cabinet. I just don't want to slow the SAS down with SATA/BSAS traffic on the same bus. Thanks, Jeff -- Jeff Cleverley Unix Systems Administrator 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 1

OS behaviors.
by Jeff Cleverley 26 Apr '12

26 Apr '12

Greetings, We upgraded a pair of 6080s and 6040s from 7.3.3P5 to 7.3.5.1P4 at the first of the year. Within 1 hour of the upgrade, our OpenNMS server started getting timeouts for SNMP polling. We had ~130 per head for the 6080s in the next 2 days. We had 0 in the prior 2 months that I checked. We also noticed the average CPU load for each head went from ~40% to close to 60% utilization comparing December to January. Anytime the cluster is in a failover mode, we get quite a few customer complaints due to slowness. While I can't say for certain we did not have this slowness before, none of us remember any complaints when the cluster was failed before. Obviously trying to run 120% utilization on 1 filer instead of 80% will cause this issue :-) The 6040 cluster did not give the polling errors, but it looks like the CPU load is higher on them also. The load is usually low enough to gracefully cover a cluster failover. I've had a case opened since the first of the year and it looks like we are now out of options and ideas with no explanation or resolution. At this point our plan is to roll back to the 7.3.3P5 OS since it seemed to behave better. Since there is no identifiable problem or solution, it makes us unwilling to jump to a newer OS since we have no reason to believe the issue isn't inherited by later revisions. Rolling back to a known good OS seems to make the most sense. We will roll the 6080 cluster back first and see how it works out before we roll the 6040 cluster. My question to the group is whether anyone else has had a similar issue but did jump to a newer OnTap release that fixed the issues? The vast majority of our data access is via nfs from RHEL5 clients and servers. Thanks, Jeff -- Jeff Cleverley Unix Systems Administrator 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 3

fpolicy and open source tools
by Kennedy, Jeffrey 24 Apr '12

24 Apr '12

I've looked at Likewise for their security auditing via fpolicy and it looks pretty good on paper. Before going down that road, though, is anyone aware of any open source tools that will grab and present the same type of data? (who attempted to read/write/delete/change security on what, when, and if it was successful) I also wonder if anyone knows where the fpolicy data is kept? Is it kept in logs or is it only shuttled off to listeners? Thanks. Jeff Kennedy Qualcomm, Incorporated QCT Engineering Compute 858-651-6592

1 0

FAS2020 and DS14MK2 Mis-cabled
by Stephen Stocke 24 Apr '12

24 Apr '12

Hello Toasters I have a FAS2020 Active/Active system with one DS14MK2-AT shelf attached. This weekend I intend to hot-add an additional DS14MK2-AT shelf. However, I believe the existing loop is cabled incorrectly. I'm hoping someone on this list can give me some pointers to confirm whether the cabling can be corrected without taking the filers offline. I really want to fix the cabling before I attempt to hot-add the new shelf. The current cabling is: CNTRL-A/0a -> AT-FCX-A -> CNTRL-A/0b And CNTRL-B/0a -> AT-FCX-B -> CNTRL-B/0b According to the FAS2020 installation flyer, the end of each loop path should terminate with the opposite controller's 0b port (not the same controller as above). Is it possible/advisable to disconnect the cable from both controllers' 0b port and swap them over to get to the correct setup? So long as I don't lose one of the AT-FCX modules during the switchover it seems like it would be okay. I'm going to open a case with support but I was hoping some of the experts on this list might have some thoughts/recommendations/horror stories you can share? Thanks Steve DISCLAIMER: The information contained within this electronic mail is confidential and may be legally privileged and it is intended for the addressees only. If you have received this message in error and you are not the intended recipient please notify the sender immediately and delete the message. Any review of the contents, dissemination or distribution of such, copying or other use of this communication or the information within is strictly prohibited. For further information or should you wish to discuss this with us, please email legal(a)iconsultci.com.

3 2

FAS2040 configurations
by Tom Yates 20 Apr '12

20 Apr '12

I'm trying to source a small NetApp for a client, and I'm being told that I can get a FAS2040 with 12*1TB in both single- and dual-controller configs, but if I want 12*2TB it's got to be single. Specifically: "2) FAS2040 Dual Controller with 12 * 2TB SATA disks - The 2TB disks in a FAS2040 are not available in a dual controller configuration" Which seems odd to me. Can anyone shed any light on whether this is really true, and if so, why? -- Tom Yates - http://www.teaparty.net

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters