toasters

toasters@lists.teaparty.net

13515 discussions

RE: usermap problem
by Glenn Walker 07 Mar '07

07 Mar '07

No one is stating that you cannot map users with LDAP - however, if the user names are not alike between unix and windows is the key. Reading the ONTAP documentation, you must specify the windowsaccount attribute and the unixaccount attribute. So long as these attributes match, then you should map - if they do not match, then there is no way to map. To enable LDAP-based user-mapping, complete the following steps. 1 From the Data ONTAP command line, specify a value for the option ldap.usermap.attribute.windowsaccount. options ldap.usermap.attribute.windowsaccount account_name account_name is the user object attribute Data ONTAP will use for Windows account lookups. 2 Extend your LDAP schema to include the user object attribute you entered in Step 1. 3 From the Data ONTAP command line, specify a value for the option ldap.usermap.attribute.unixaccount. options ldap.usermap.attribute.unixaccount account_name account_name is the user object attribute Data ONTAP will use for UNIX account lookups. 4 Extend your LDAP schema to include the values you entered in Step 2 and Step 3. 5 Enter the following command: options ldap.usermap.enable on If you have a significant load on your LDAP server, you might want to improve performance by setting a separate search base or search base and scope for user-mapping, as described in the following section. -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Åke Beckman Sent: Tuesday, March 06, 2007 4:50 AM To: toasters(a)mathworks.com Subject: RE: usermap problem It IS possible, as Tom states, to do the usermapping through ldap, it's been around for quite some time.. Check options cifs.trace_dc_connection to see if the connection to the ldap server is working. (Don't know if this is valid only for AD ldap services...?) Maybe the password for ldap access got screwed up after the upgrade? options ldap.name user_name options ldap.passwd password I couldn't find any open bugs for ldap on 7.2.1.1 Regards / Åke ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Glenn Walker Sent: den 1 mars 2007 14:47 To: Langborg Tom; Parisi, Justin; toasters(a)mathworks.com Subject: RE: usermap problem For like usernames, it will work. You stated that the usernames that were not alike did not function, but the like user names did. How exactly is the filer going to map two users with unlike names together without usermap.cfg? Are you sure that the users aren't mapping to 'pcuser'? wcc -s <username> would show for sure. Glenn ________________________________ From: Langborg Tom [mailto:Tom.Langborg@smhi.se] Sent: Thursday, March 01, 2007 7:44 AM To: Glenn Walker; Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem No I have two other netapp's with 7.0.4, which is working. No usermap.cfg is needed. /tom ________________________________ Från: Glenn Walker [mailto:ggwalker@mindspring.com] Skickat: den 1 mars 2007 13:13 Till: Langborg Tom; Parisi, Justin; toasters(a)mathworks.com Ämne: RE: usermap problem If the unix names and windows names are not the same, you must always use usermap.cfg file. This has not changed since around ONTAP 5.2 to my knowledge. Glenn ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Thursday, March 01, 2007 3:55 AM To: Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem Yes I use usermap.cfg now But the old version could I use the ldap.usermap config. I don't want to manage a usermap.cfg when I have all information in ldap. I didn't need that in the Ontap 7.0.4. Regards tom ________________________________ Från: Parisi, Justin [mailto:Justin.Parisi@netapp.com] Skickat: den 28 februari 2007 20:33 Till: Langborg Tom; toasters(a)mathworks.com Ämne: RE: usermap problem You need to do your user mapping through the /etc/usermap.cfg file on the filer. http://now.netapp.com/NOW/knowledge/docs/olio/guides/ontap_troubleshooting/… ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Wednesday, February 28, 2007 10:07 AM To: toasters(a)mathworks.com Subject: usermap problem Watch out. I got usermap problem after uppgrade to 7.2.1.1. I use ldap.usermap for usermapping. The unix name are not the same as windows name. With unix name same as windows name it still works. If there are someone who now any fix for this problem, Please send me a letter. Regards tom

1 0

RE: usermap problem
by Åke Beckman 06 Mar '07

06 Mar '07

It IS possible, as Tom states, to do the usermapping through ldap, it's been around for quite some time.. Check options cifs.trace_dc_connection to see if the connection to the ldap server is working. (Don't know if this is valid only for AD ldap services...?) Maybe the password for ldap access got screwed up after the upgrade? options ldap.name user_name options ldap.passwd password I couldn't find any open bugs for ldap on 7.2.1.1 Regards / Åke ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Glenn Walker Sent: den 1 mars 2007 14:47 To: Langborg Tom; Parisi, Justin; toasters(a)mathworks.com Subject: RE: usermap problem For like usernames, it will work. You stated that the usernames that were not alike did not function, but the like user names did. How exactly is the filer going to map two users with unlike names together without usermap.cfg? Are you sure that the users aren't mapping to 'pcuser'? wcc -s <username> would show for sure. Glenn ________________________________ From: Langborg Tom [mailto:Tom.Langborg@smhi.se] Sent: Thursday, March 01, 2007 7:44 AM To: Glenn Walker; Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem No I have two other netapp's with 7.0.4, which is working. No usermap.cfg is needed. /tom ________________________________ Från: Glenn Walker [mailto:ggwalker@mindspring.com] Skickat: den 1 mars 2007 13:13 Till: Langborg Tom; Parisi, Justin; toasters(a)mathworks.com Ämne: RE: usermap problem If the unix names and windows names are not the same, you must always use usermap.cfg file. This has not changed since around ONTAP 5.2 to my knowledge. Glenn ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Thursday, March 01, 2007 3:55 AM To: Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem Yes I use usermap.cfg now But the old version could I use the ldap.usermap config. I don't want to manage a usermap.cfg when I have all information in ldap. I didn't need that in the Ontap 7.0.4. Regards tom ________________________________ Från: Parisi, Justin [mailto:Justin.Parisi@netapp.com] Skickat: den 28 februari 2007 20:33 Till: Langborg Tom; toasters(a)mathworks.com Ämne: RE: usermap problem You need to do your user mapping through the /etc/usermap.cfg file on the filer. http://now.netapp.com/NOW/knowledge/docs/olio/guides/ontap_troubleshooting/… ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Wednesday, February 28, 2007 10:07 AM To: toasters(a)mathworks.com Subject: usermap problem Watch out. I got usermap problem after uppgrade to 7.2.1.1. I use ldap.usermap for usermapping. The unix name are not the same as windows name. With unix name same as windows name it still works. If there are someone who now any fix for this problem, Please send me a letter. Regards tom

1 0

RE: vol copy speed and copying over root aggregate
by Ross, Alistair 02 Mar '07

02 Mar '07

Why not set up a volume snapmirror now for weekend work for migration? (i.e. vol_old to vol_new) We use this quite successfully - then when the migration is on you only have the update to do... Shut everything down - snapmirror update - quiesce and break. - Vol offline the old and vol rename the new... -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Borzenkov, Andrey Sent: 02 March 2007 10:30 To: Kießl Walter; toasters(a)mathworks.com Subject: RE: vol copy speed and copying over root aggregate Yes, it is set to 10. "man aggr" also mentions aggr.copy.throttle but this one does not exit. -----Original Message----- From: Kießl Walter [mailto:kiessl@heidenhain.de] Sent: Friday, March 02, 2007 1:28 PM To: Borzenkov, Andrey; toasters(a)mathworks.com Subject: AW: vol copy speed and copying over root aggregate Have you checked the "option vol.copy.throttle" ? It should show be set to 10 for full volcopy speed. -----Ursprüngliche Nachricht----- Von: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] Im Auftrag von Borzenkov, Andrey Gesendet: Freitag, 2. März 2007 10:53 An: toasters(a)mathworks.com Betreff: vol copy speed and copying over root aggregate Wichtigkeit: Hoch Hi, This is relatively urgent. We are facing the following problem. We need to move data on FAS270C (appr. 2TB) onto another set of disks. There is a single aggregate that contains root volume and one or two (on two heads respectively) large volumes with single LUN on each. All volumes except root are 100% full. DOT 7.0.3. Disks are 146GB 10K, RAID_DP, 14 disks on each head (average). Target set is 300GB 10K, RAID_DP, 11 disks on each head. I tested (under normal conditions) vol copy from root volume onto root volume copy. It tool 3 and half minutes for 440MB! It is absolutely unacceptable, we cannot afford this downtime. No the questions are - How are chances that without client load vol copy will be faster? What can explain that miserable performance for relatively small data set? - Which speed can be expected under these conditions? Normal on-tape (non NDMP) backup from client systems - Windows only, SAN attach - runs approximately 20MB/s which are still acceptable. - will aggr copy be faster and how much? If yes - how can I then switch root aggregate? To clarify - first I restrict target aggregate and make aggr copy. Then I put target aggregate online and get duplicate volumes, do not I? I _hope_ that filer will rename them, anyone can confirm? - any chance updating to 7.0.5 *before* copy will help? Thank you and I appreciate your answers. The downtime is scheduled for this weekend; it would quite a big problem with 2MB/s performance :( Regards Andrey Borzenkov Senior system engineer IT Product Services Fujitsu Siemens Computers Russian Federation Telephone: +7 (495) 730-6220 ext. 247 Telefax: +7 (495) 229 91 30 Mobile: +7 (916) 678-7208 Email: mailto:Andrey.Borzenkov@fujitsu-siemens.com Internet: http://www.fujitsu-siemens.ru/ This e-mail (and any attachments) may contain privileged and/or confidential information. If you are not the intended recipient please do not disclose, copy, distribute, disseminate or take any action in reliance on it. If you have received this message in error please reply and tell us and then delete it. Should you wish to communicate with us by e-mail we cannot guarantee the security of any data outside our own computer systems. For the protection of Legal & General's systems and staff, incoming emails will be automatically scanned. Any information contained in this message may be subject to applicable terms and conditions and must not be construed as giving investment advice within or outside the United Kingdom. The following companies are subsidiary companies of the Legal & General Group Plc which are authorised and regulated by the Financial Services Authority for advising and arranging the products shown: Legal & General Partnership Services Limited (insurance and mortgages), Legal & General Insurance Limited (insurance), Legal & General Assurance Society Limited (life assurance, pensions and investments), Legal & General Unit Trust Managers Limited and Legal & General Portfolio Management Services Limited (investments). They are registered in England under numbers shown. The registered office is Temple Court, 11 Queen Victoria Street, London EC4N 4TP. Legal & General Partnership Services Limited: 5045000 Legal & General Assurance Society Limited: 166055 Legal & General (Unit Trust Managers) Limited: 1009418 Legal & General (Portfolio Management Services) Limited: 2457525 Legal & General Insurance Limited: 423930 They are registered with the Financial Services Authority under numbers shown. You can check this at www.fsa.gov.uk/register Legal & General Partnership Services Limited: 300792 Legal & General Assurance Society Limited: 117659 Legal & General (Unit Trust Managers) Limited: 119273 Legal & General (Portfolio Management Services) Limited: 146786 Legal & General Insurance Limited: 202050

3 2

Maximum number of groups per user
by Francois Joubert 02 Mar '07

02 Mar '07

Hi I am new to the list. I have been trying to get a definitive statement from NetApp about the maximum number of groups a user can belong to if we rely on the /etc/group and /etc/passwd files on the filer. The setup we have tested has CIFS clients (Windows2000) with the filer part of a workgroup. We rely on unix group permissions for access to data directories. We are not using any NFS, NIS, LDAP or NT domain - all local authentication etc. I have done some testing and it appears the limit is 32 (not a surprising number) but have not been able to get this confirmed. Has anyone tried/done this before? We are migrating from samba servers running on FreeBSD with modified kernels which allow users to be in thousands of groups (don't laugh; I don't want to go into the reasons) because this facilitates our companies working practices. Thanks Francois

7 9

vol copy speed and copying over root aggregate
by Borzenkov, Andrey 02 Mar '07

02 Mar '07

Hi, This is relatively urgent. We are facing the following problem. We need to move data on FAS270C (appr. 2TB) onto another set of disks. There is a single aggregate that contains root volume and one or two (on two heads respectively) large volumes with single LUN on each. All volumes except root are 100% full. DOT 7.0.3. Disks are 146GB 10K, RAID_DP, 14 disks on each head (average). Target set is 300GB 10K, RAID_DP, 11 disks on each head. I tested (under normal conditions) vol copy from root volume onto root volume copy. It tool 3 and half minutes for 440MB! It is absolutely unacceptable, we cannot afford this downtime. No the questions are - How are chances that without client load vol copy will be faster? What can explain that miserable performance for relatively small data set? - Which speed can be expected under these conditions? Normal on-tape (non NDMP) backup from client systems - Windows only, SAN attach - runs approximately 20MB/s which are still acceptable. - will aggr copy be faster and how much? If yes - how can I then switch root aggregate? To clarify - first I restrict target aggregate and make aggr copy. Then I put target aggregate online and get duplicate volumes, do not I? I _hope_ that filer will rename them, anyone can confirm? - any chance updating to 7.0.5 *before* copy will help? Thank you and I appreciate your answers. The downtime is scheduled for this weekend; it would quite a big problem with 2MB/s performance :( Regards Andrey Borzenkov Senior system engineer IT Product Services Fujitsu Siemens Computers Russian Federation Telephone: +7 (495) 730-6220 ext. 247 Telefax: +7 (495) 229 91 30 Mobile: +7 (916) 678-7208 Email: mailto:Andrey.Borzenkov@fujitsu-siemens.com Internet: http://www.fujitsu-siemens.ru/

2 2

SANOWN not enabled
by Steven Mandrake 01 Mar '07

01 Mar '07

Hello, I recently replaced a brocade switch in my fabric. trying to see if my NTAP is connected to the switch. If I type normal commands like storage show fabric and switch -- I do not get a returned value. But one thing confuses me --- when I type 'storage show initiators' --- I get 'SANOWN not enabled' What does this mean? Now site doesn't have any information. Does this need to be enabled for NTAP to work on FC-SAN?

4 4

dfm backup
by Leeds, Daniel 01 Mar '07

01 Mar '07

any dfm users out there? got another odd problem this time with dfm backup. if we issue a dfm backup command it runs through the steps but generates no backup file. it does spit out an error about not finding the db which i do not get... dfm backup create DANIEL Adaptive Server Anywhere Backup Utility Version 9.0.2.2452 Database server not found Waiting for existing writes to stop, which could take a few minutes. Please be patient ... Creating the archive ... Deleting any temporary directories. Restoring performance advisor status. Deleting any database backup job from database. no file called DANIEL exists anywhere that i can find...NOW did not result in a match on dfm backup issues. -- Daniel Leeds Senior Systems Administrator Edmunds.com

1 1

RE: usermap problem
by Glenn Walker 01 Mar '07

01 Mar '07

For like usernames, it will work. You stated that the usernames that were not alike did not function, but the like user names did. How exactly is the filer going to map two users with unlike names together without usermap.cfg? Are you sure that the users aren't mapping to 'pcuser'? wcc -s <username> would show for sure. Glenn ________________________________ From: Langborg Tom [mailto:Tom.Langborg@smhi.se] Sent: Thursday, March 01, 2007 7:44 AM To: Glenn Walker; Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem No I have two other netapp's with 7.0.4, which is working. No usermap.cfg is needed. /tom ________________________________ Från: Glenn Walker [mailto:ggwalker@mindspring.com] Skickat: den 1 mars 2007 13:13 Till: Langborg Tom; Parisi, Justin; toasters(a)mathworks.com Ämne: RE: usermap problem If the unix names and windows names are not the same, you must always use usermap.cfg file. This has not changed since around ONTAP 5.2 to my knowledge. Glenn ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Thursday, March 01, 2007 3:55 AM To: Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem Yes I use usermap.cfg now But the old version could I use the ldap.usermap config. I don't want to manage a usermap.cfg when I have all information in ldap. I didn't need that in the Ontap 7.0.4. Regards tom ________________________________ Från: Parisi, Justin [mailto:Justin.Parisi@netapp.com] Skickat: den 28 februari 2007 20:33 Till: Langborg Tom; toasters(a)mathworks.com Ämne: RE: usermap problem You need to do your user mapping through the /etc/usermap.cfg file on the filer. http://now.netapp.com/NOW/knowledge/docs/olio/guides/ontap_troubleshooting/… ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Wednesday, February 28, 2007 10:07 AM To: toasters(a)mathworks.com Subject: usermap problem Watch out. I got usermap problem after uppgrade to 7.2.1.1. I use ldap.usermap for usermapping. The unix name are not the same as windows name. With unix name same as windows name it still works. If there are someone who now any fix for this problem, Please send me a letter. Regards tom

1 0

RE: usermap problem
by Glenn Walker 01 Mar '07

01 Mar '07

If the unix names and windows names are not the same, you must always use usermap.cfg file. This has not changed since around ONTAP 5.2 to my knowledge. Glenn ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Thursday, March 01, 2007 3:55 AM To: Parisi, Justin; toasters(a)mathworks.com Subject: SV: usermap problem Yes I use usermap.cfg now But the old version could I use the ldap.usermap config. I don't want to manage a usermap.cfg when I have all information in ldap. I didn't need that in the Ontap 7.0.4. Regards tom ________________________________ Från: Parisi, Justin [mailto:Justin.Parisi@netapp.com] Skickat: den 28 februari 2007 20:33 Till: Langborg Tom; toasters(a)mathworks.com Ämne: RE: usermap problem You need to do your user mapping through the /etc/usermap.cfg file on the filer. http://now.netapp.com/NOW/knowledge/docs/olio/guides/ontap_troubleshooting/… ________________________________ From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Langborg Tom Sent: Wednesday, February 28, 2007 10:07 AM To: toasters(a)mathworks.com Subject: usermap problem Watch out. I got usermap problem after uppgrade to 7.2.1.1. I use ldap.usermap for usermapping. The unix name are not the same as windows name. With unix name same as windows name it still works. If there are someone who now any fix for this problem, Please send me a letter. Regards tom

2 1

usermap problem
by Langborg Tom 01 Mar '07

01 Mar '07

Watch out. I got usermap problem after uppgrade to 7.2.1.1. I use ldap.usermap for usermapping. The unix name are not the same as windows name. With unix name same as windows name it still works. If there are someone who now any fix for this problem, Please send me a letter. Regards tom

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters