toasters

toasters@lists.teaparty.net

13520 discussions

quota report -x sucks on 8.x 7-mode
by John Stoffel 05 Sep '19

05 Sep '19

Sigh... I've just about had it upto hear in parsing the output of old 7-mode filer commands. Especially for CIFS shares or quotas where you have spaces in the username, qtree, or both. Holy crap is it hard to deal with. Anyone have perl code (sorry, I'm so retro in my scripting choices! ;-) using the Netapp SDK to grab this info in a more consistent manner? And using which SDK? I've tried with an old 5.1 version I had kicking around, but the examples suck. Just downloaded the 9.6 and 9.3 SDKs to play with as well, but haven't cracked them open quite yet. It's trivial (sorta) with cDot to just export the data in CSV format natively, but old 7-mode filers are a pain to parse reliably. I'd post my existing perl code, but it's pretty ugly since I've started to hack my way into doing parsing, and it's just not going as well as I hoped. LOL. Thanks for letting me vent. John

1 0

Statistics output limit at 5k objects
by Mike Thompson 23 Aug '19

23 Aug '19

Looks like we just went over 5000 volumes in our cluster last night, and now I am getting this error when collecting some statistics, which we do via cron, and dump into a database: pd-dd::*> statistics show -vserver pd -object volume -raw true -counter read_ops|write_ops|other_ops|read_data|write_data There are no entries matching your query. Warning: Failed to get statistics for object volume: The number of instances for this object exceeds the limit of 5000. Use the "-instance" parameter to limit the number of instances. It would appear 5000 is some sort of magic internal number, after which CDOT will refuse to emit statistics. Using the -instance parameter does nothting to help the situation, as that requires specifying the individual volume you are looking for. I looked around under 'statistics settings' and 'statistics preset' but don't see any sort of control for this. Any ideas on how to get around this 5k limit? 9.5p6 FWIW

3 3

How to check source IP of failed login attempt?
by andrei.borzenkov＠ts.fujitsu.com 02 Aug '19

02 Aug '19

I got this event: security.invalid.login: Failed to authenticate login attempt to Vserver: <Admin vserver>, username: admin, application: ssh. Fine. How can I check from which IP there was connection attempt? It is not part of alarm. I am pretty sure nobody should be attempting login to this one. --- Sent from my Fujitsu LIFEBOOK S937 With best regards Andrei Borzenkov Senior System Engineer FJ EMEIA PR FOCP RU SM FSO FUJITSU Zemlyanoy val 9, 105064 Moscow, Russia Tel.: +7 (495) 730 6220 ext. 2247 Mob.: +7 (916) 678 7208 E-mail: Andrei.Borzenkov(a)ts.fujitsu.com Web: ts.fujitsu.com Company details: OOO Fujitsu Technology Solutions / ts.fujitsu.com/imprint This communication contains information that is confidential, proprietary in nature and/or privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s) or the person responsible for delivering it to the intended recipient(s), please note that any form of dissemination, distribution or copying of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender and delete the original communication. Thank you for your cooperation. Please be advised that neither Fujitsu, its affiliates, its employees or agents accept liability for any errors, omissions or damages caused by delays of receipt or by any virus infection in this message or its attachments, or which may otherwise arise as a result of this e-mail transmission.

2 2

Re: small query reg upgrade from 9.4p1 to 9.5p6 C-Mode
by Yuvaraja Shivaram 26 Jul '19

26 Jul '19

Hi all, i came accross one volume according upgrade advisor this TMP volume...and found this ariticle.. https://kb.netapp.com/app/answers/answer_view/a_id/1014402 so shall i make the export policy into readonly and make this volume has RW ? please any suggestion.. Regards Yuvaraja On Thu, Jul 25, 2019 at 6:41 PM Jovan Himal <uregmi111(a)gmail.com> wrote: > I can show you how this is done in webex. Just to vouch for my own so that > you would trust me, attaching my profile > > I am in US, east coast. > > We can hookup. > > Let me know > > On Thu, Jul 25, 2019, 6:34 AM Yuvaraja Shivaram <yuvaraja.kishan(a)gmail.com> > wrote: > >> Hi all, >> >> I have uploaded 9.5p6 software to the path /mroot/etc/software/ ... >> Manually(using system shell), in both the nodes >> >> so now would like to validate the version with below command... >> >> cluster image validate -version 9.5p6 >> it is getting failed since package is not there in the system >> repository... >> >> cluster image package show-repository (this commands also does not show >> anything...) >> >> so do I need to enter below command to push the 9.5p6 package into >> repository... >> >> cluster image package get -url mroot/etc/software/9.5p6_q_image.tgz >> >> Regards >> raj >> >> >> _______________________________________________ >> Toasters mailing list >> Toasters(a)teaparty.net >> http://www.teaparty.net/mailman/listinfo/toasters >> >

1 0

9.5 ssh last login output
by Mike Thompson 26 Jul '19

26 Jul '19

Ontap 9.5 added 'Last login' to the output of ssh connections, and optionally puts other things in there, like number of unsuccessful login attempts, etc. Any way to turn that off? It's playing hell with various things I have that scrape output from things I ssh into the filers. This stuff seems to be separate from MOTD/banner messages which are indeed configurable.

4 3

RPC Enumeration security finding
by Alexander Griesser 25 Jul '19

25 Jul '19

Hey there, One of our customers had a pentester onsite who found the following issues with the NetApp filers there. RPC Enumeration discovered By sending a DUMP request to the portmapper, it is possible to enumerate the RPC services running on the remote port. Using this information, an attacker can connect and bind to each service by sending an RPC request to the remote port and exploit the host. Note: Specific Target IPs are included in the "Detailed IP List." nGuard recommends downloading the latest security patches from Microsoft. Does anyone know what exactly the problem here is and if there are any tunables to change the behaviour on NetApp (Ontap9+) filers? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

3 3

small query reg upgrade from 9.4p1 to 9.5p6 C-Mode
by Yuvaraja Shivaram 25 Jul '19

25 Jul '19

Hi all, I have uploaded 9.5p6 software to the path /mroot/etc/software/ ... Manually(using system shell), in both the nodes so now would like to validate the version with below command... cluster image validate -version 9.5p6 it is getting failed since package is not there in the system repository... cluster image package show-repository (this commands also does not show anything...) so do I need to enter below command to push the 9.5p6 package into repository... cluster image package get -url mroot/etc/software/9.5p6_q_image.tgz Regards raj

4 3

Autosupport HTTPs receiver self hosted
by Alexander Griesser 18 Jul '19

18 Jul '19

Hey there, when using SMTP for autosupports, one can add additional e-mail addresses which will also receive the SMTP notifications and we're using this feature to collect autosupports in one of our support mailboxes. If we'd want to move away from SMTP, how could we do that in the future? When we switch to the https transport method, the autosupports most likely will only be posted to NetApp, I suppose. Am I overlooking something or is there really no way to specify an additional URL or something like this so that we can also receive these alerts then? Ideally, I'd either like to run the autosupport receiver locally on our infrastructue and forward the requests to NetApp then. This way, I could parse the requests and (if necessary) create tickets, etc. and archive them internally. Anyone ever worked on something like this or knows where I can find more information about that? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

2 5

Find Chassis PSU Part Number
by Alexander Griesser 16 Jul '19

16 Jul '19

Hey there, on one of my lab systems, a chassis PSU broke (no maintenance anymore). I'm trying to find out what part number I need to replace here, but didn't have any luck so far. ::> system controller fru show-manufacturing-info -instance Node: XXX System Serial Number: XXX Model Name: FAS8020 System ID: XXX Kernel Version: NetApp Release 9.1P12: Mon Mar 5 05:01:09 PST 2018 Firmware Release: 9.5 FRU Description: PSU2 FRU Sub-type: - FRU Serial Number: 1350ABA-1349-XXXX FRU Part Number: 114-00040 FRU Revision of Part Number: +A5 FRU Manufacturer: - FRU Manufacturing Date: - FRU Product Identifier: - When I use part finder, it lists three different compatible models, as it seems: SP-763-R5 SP-763-R6 X763-R6 And I'm not sure which one is the right one here or is any 1300W PSU working in this situation? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

2 2

Need to quickly downgrade from 9.5 to 8.2.4
by Carolyn Chambers 07 Jul '19

07 Jul '19

Hello, We are the middle of move planning and need to snapmirror some 7 Mode data. The gear we have for the destination is from the factory with 9.5. The usual netboot is throwing errors. Any suggestions? Thanks, Carolyn 972.578.2708

7 13

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters