toasters

toasters@lists.teaparty.net

3 participants
13514 discussions

Finding out which client has mapped a share?
by John Stoffel 30 Jun '11

30 Jun '11

Is there anyway to find out which client has mapped which shares? I'm trying to delete a share and even with: cifs shares -delete -f applications It won't go away and I get the following. Thu Jun 30 11:52:14 PDT [smbrpc.forceClose.share.timeout:warning]: CIFSRPC: Close of share Applications has not completed and has taken 3660 seconds. This is on a FAS2050 running 7.2.6.1P8, which I know I should upgrade sometime. Thanks, John

4 4

Re: Finding out which client has mapped a share?
by John Stoffel 30 Jun '11

30 Jun '11

Alexander> you could either terminate cifs quickly or check the open Alexander> files list of the filer using the "manage computer" mmc on Alexander> a windows workstation connected to your filer to force Alexander> closing of the open files on this share. We'll probably just terminate all of CIFS tonight after 6pm filer local time to see if that will clean things up. Too bad you can't rename a share, but I can see why not, since the protocol is tied so tight between the clients/server. Alexander> If this CIFS share is a volume on its own you might also Alexander> want to try to take the volume offline, but i'm not sure Alexander> about that. I don't want to get that extreme. *grin* Thanks for all the suggestions. John

1 0

RE: kicking an unhappy ssh daemon
by Ehrhart, Rick 29 Jun '11

29 Jun '11

Hi Chris - You're correct rshstat is not available in ONTAP 7.2.6.x. In attempt to isolate the problem, ssh is piggy-backed on top of rsh and telnet depending if ssh is interactive or not; so if rsh and telnet work then the problem is in ssh part. However if rsh does not work, hopefully, more information will be displayed. My thought is that all the rsh sessions and therefore ssh sessions have been consumed. The rshstat command would have told us. If all the rsh sessions are consumed, then unfortunately, a re-boot is needed. All the options below look fine. Since the telnet.access and rsh.access is legacy, please check options trusted.hosts to make sure this is set correctly. Regards, - Rick - -----Original Message----- From: Christopher B. Allison [mailto:cba@ccs.neu.edu] Sent: Wednesday, June 29, 2011 9:06 AM To: Ehrhart, Rick Cc: David N. Blank-Edelman; toasters(a)mathworks.com Subject: RE: kicking an unhappy ssh daemon Hi Rick, Thanks for your reply. I work for David, and am replying to this because David is in meetings all day. On Wed, 29 Jun 2011, Ehrhart, Rick wrote: > What is the version of ONTAP? NetApp Release 7.2.6.1P9: Wed Aug 19 12:37:58 PDT 2009 > Please show the output of "options ssh", ssh.access host!=192.168.200.50 ssh.enable on ssh.idle.timeout 60 ssh.passwd_auth.enable on ssh.port 22 ssh.pubkey_auth.enable on ssh1.enable off ssh2.enable on Note: We added the "host!=192.168.200.50" directive to block out our monitoring system when we thought it was consuming all the ssh slots. We've since discarded that theory, but haven't reverted the ssh block. > "options telnet" telnet.access legacy telnet.distinct.enable off telnet.enable on > "options rsh". rsh.access legacy rsh.enable on > Please show the output of "rshstat". "Do a "priv set advanced" first. rshstat doesn't appear to be available on this filer, either in admin or advanced privilege mode, though it is present on two filers we have running 8.0.x. Is rshstat available in ONTAP 7.2.6? If it matters: I'm still investigating this on our side, but I believe the onset of the problem was actually tied to an influx of bad ssh attempts (brute force attack), rather than any configuration change on our part. I'm happy to provide more information, including a detailed log of the attempts I've made to restart the ssh daemon, if it would be helpful. Best, -Chris Allison -- UNIX Systems Administrator College of Computer and Information Science Northeastern University, Boston, MA

1 0

kicking an unhappy ssh daemon
by David N. Blank-Edelman 29 Jun '11

29 Jun '11

Hi- We have an interesting situation with one of our filers. Earlier today, one of our monitoring systems managed to eat up all of the available ssh slots on the box. Once we got that under control, we have found we still can't get on to the box via ssh or ssh commands to it, they just hang. There is something listening and accepting connections, but it hangs once the connection is made. We've tried: - turning off and on the ssh options - changing the ssh port (and changing it back) - secureadmin setup ssh (and moving the keys back) Can you think of anything else I could do to kick the daemon short of rebooting the box (which is currently serving in production)? Perhaps something in a super-squirrel-secret priv mode? Thanks! -- dNb

4 4

Re: kicking an unhappy ssh daemon
by Bennett Todd 29 Jun '11

29 Jun '11

That suggests an idea for the possible cause, to me. Symptom: inbound ssh connections start hanging, and eventually, after a long time, recover. Each new ssh connection requires some high-quality random bits, unguessable absent knowledge that can't be externally observed. Suppose the ssh server is drawing them directly from an entropy pool that is only slowly, gradually refilled by the OS observing things like the rotational latency of spinning drives as that's slightly disturbed by turbulence? I don't know the OS that underlies netapps, so I don't know if that pool can be manually fed from commandline, nor if the ssh server can be redirected to a PRNG itself just seeded by the entropy pool. Or if so how to do it. -Bennett On Jun 29, 2011 1:31 AM, "Stefan Funke" <bundy(a)usage.de> wrote:

1 0

Re: kicking an unhappy ssh daemon
by David N. Blank-Edelman 29 Jun '11

29 Jun '11

Hi Felix- Thanks for your response. On Tuesday, June 28, 2011 at 6:08 PM, Felix Schröder wrote: > To kick out a stalled SSH session just type "ssh root@filer logout telnet" on a *nix machine, then type in the password - That will force the filer to logout any interactive (ssh) session. It works the same way with rsh. I must not have been clear in my message. Both interactive, and non-interactive ssh command the machine are hanging. I can't even do an ssh netapp help, nevermind execute the logout command. The connections never get that far. I should also mention that at the moment, according to netstat, there are no existing ssh connections so there isn't really anything to logout. -- dNb

2 1

Re: kicking an unhappy ssh daemon
by David N. Blank-Edelman 29 Jun '11

29 Jun '11

On Tuesday, June 28, 2011 at 7:48 PM, Felix Schröder wrote: > When a session has become hung, if a serial console session is possible, or > some other means of issuing commands is possible, then the hung connection > may be located in the output of the "netstat -a" command so that the "Swind" > size may be checked: if it is zero, then this problem may be occurring, and > the user may try to close and then re-open the session from the client. Hmm, so my read of this bug is "sometimes sessions in progress hang. If that happens, start another session" which doesn't seem quite like what I am seeing where I can't even start a session at this point. -- dNb

1 0

Issues with Compression?
by Milazzo Giacomo 25 Jun '11

25 Jun '11

Hi all, I've received a couple of alert from field with users using DoT 8.0.1 compression feature on Oracle production environment. Their application hang! NetApp representative here in Italy suggested us to avoid, for the moment, to use compression on Oracle and generally on DB/backup environment... Do you have experience? Positive and not I mean. And, of course, not only on Oracle/DB environment. Thank you in advance,

2 1

one cifs share from two vols ?
by Chaim Rieger 22 Jun '11

22 Jun '11

say i have vol/vol1 and vol/vol2 i want to create a cifs share \\cifs\share1 that shares out /vol/vol1 as \\cifs\share1 and /vol/vol2 as \\cifs\share1\share2 is this possible or would i have to create a second share \\cifs\share1\share2 for the second volume ?

2 1

volume, qtree snapmirror resync question
by Steve Losen 20 Jun '11

20 Jun '11

Hi Toasters, We have recently upgraded to ONTAP 8.0.1 and are migrating to 64 bit aggrs/vols. Quick question: Say I have 32 bit volume A on primary storage being volume snapmirrored to 32 bit volume B on secondary storage. A has one qtree, then entire volume itself. I create 64 bit volume C on secondary storage and use qtree snapmirror to copy /vol/B/- to /vol/C/qtree Is there any way to resync C and A now? Will this work on secondary? snapmirror resync -S primary:/vol/A/- /vol/C/qtree I suppose I must snapmirror break the B, C relationship first. If this will work then we can migrate a lot of our secondary storage to 64 bit without heavily impacting primary storage. Steve Losen scl(a)virginia.edu phone: 434-924-0640 University of Virginia ITC Unix Support

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters