toasters

toasters@lists.teaparty.net

13520 discussions

samba acls and Re: howto document for initial volume architecting?
by Lori Barfield 09 Nov '05

09 Nov '05

thank you, greg and john, for the recommendations and the pdf links. i was not aware of FlexVols and it looks like this is suddenly going to be a much more challenging exercise. :) i do have two followup questions right now, before i start untangling the reading in detail. On 11/9/05, John Stoffel <john.stoffel(a)taec.toshiba.com> wrote: > Lori> our architecture is currently flat- one volume per filer with > Lori> the data only split up into separate directories. > > Are you using qtrees at all? I find them to be very useful. i am still learning about the existing architecture but don't believe qtrees are in use. originally i was concerned about setting any up because i am not a permanent fixture here, and i should not leave an overly complex design in my wake. so it is important to create an architecture that makes sense but does not require a lot of close watching to avoid failures and admins learning a whole new command set to stay afloat. please correct me if my vague impression about qtrees is ignorant, but don't they make it that much more difficult to do the day-to-day work of maintaining filers? > Lori> all hosts can mount all directories on all volumes if needed. > > Sure, makes sense. I assume you use permissions to keep people from > touching what they shouldn't? er, some work does need to be done here. with root and non-privileged access paradigms as well. good thing we get to work from scratch with the new filer. :) i do have a question about samba; hope it's okay to present that here. right now our permissions are group-based...meaning that we seem to create a new custom group for every single shared dir. (want to add another user? new group on every unix workstation! :) and there is no NIS here in this Windows house; nsswitch.conf is not even understood.) so it's time to switch to acls, but here again is unfamiliar territory for me and concern about making it too hard for the next guy to figure out. is there a good how-to acls document for samba that might include the pitfalls of this approach? thanks again! ...lori (busy printing pdfs :)

2 1

RE: samba acls and Re: howto document for initial volume architecting?
by Hirschorn, Steven 09 Nov '05

09 Nov '05

Hi Lori, Just thought I'd follow up about qtrees - we use just Windows and CIFS here generally, so I might be missing some subtlety about qtrees in a multiprotocol environment, but as I understand it, the one disadvantage of qtrees is that they can't be set up within Explorer. You need to use the console or Filerview. The advantages of Qtrees on the other hand: - You can apply tree quotas to them - You can do NDMP backups of a single Qtree, rather than an entire volume (I believe you can do this on a non-qtree subtree, but it's slower) - You can do NDMPCopies of a single qtree - You can use QTree Snapmirror on a Qtree - If you use DFM, it will monitor the QTrees for you and produce pretty graphs of the qtrees over time, so you can tell approximately where the data growth in your organisation is. The fact that most of our data is in QTrees is also aiding our migration to 7G as we can QSM all the data to new flexvols. We have one chunk of data outside of a qtree due to an oversight, and if it didn't consume such a large proportion of the volume, I'd have moved it to a qtree long ago. I've deliberately restricted access to the volume root shares to just my team and advised them never to create a root level folder without making it a qtree. I don't suppose anyone on the list can answer these questions? - Is there an easy way of changing a non qtree root level directory to a qtree? I'm guessing the only way is to NDMPCopy the data to a new qtree? - Is there any way of getting DFM to monitor subtree growth, as well as qtrees? I'm guessing again that DFM uses the filer's in-built quota monitoring to do the qtree size measurement, and so there isn't any flexibility here? Thanks! -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com]On Behalf Of Lori Barfield Sent: 09 November 2005 17:43 To: John Stoffel; Greg.Libert(a)plexus.com Cc: toasters(a)mathworks.com Subject: samba acls and Re: howto document for initial volume architecting? thank you, greg and john, for the recommendations and the pdf links. i was not aware of FlexVols and it looks like this is suddenly going to be a much more challenging exercise. :) i do have two followup questions right now, before i start untangling the reading in detail. On 11/9/05, John Stoffel <john.stoffel(a)taec.toshiba.com> wrote: > Lori> our architecture is currently flat- one volume per filer with > Lori> the data only split up into separate directories. > > Are you using qtrees at all? I find them to be very useful. i am still learning about the existing architecture but don't believe qtrees are in use. originally i was concerned about setting any up because i am not a permanent fixture here, and i should not leave an overly complex design in my wake. so it is important to create an architecture that makes sense but does not require a lot of close watching to avoid failures and admins learning a whole new command set to stay afloat. please correct me if my vague impression about qtrees is ignorant, but don't they make it that much more difficult to do the day-to-day work of maintaining filers? > Lori> all hosts can mount all directories on all volumes if needed. > > Sure, makes sense. I assume you use permissions to keep people from > touching what they shouldn't? er, some work does need to be done here. with root and non-privileged access paradigms as well. good thing we get to work from scratch with the new filer. :) i do have a question about samba; hope it's okay to present that here. right now our permissions are group-based...meaning that we seem to create a new custom group for every single shared dir. (want to add another user? new group on every unix workstation! :) and there is no NIS here in this Windows house; nsswitch.conf is not even understood.) so it's time to switch to acls, but here again is unfamiliar territory for me and concern about making it too hard for the next guy to figure out. is there a good how-to acls document for samba that might include the pitfalls of this approach? thanks again! ...lori (busy printing pdfs :) ------------------------------------------------------------------------------------ Free to all: Catalogue Awareness Day, 9th December at The National Archives in Kew www.nationalarchives.gov.uk/events/calendar/catagenda.htm ------------------------------------------------------------------------------------ National Archives Disclaimer This e-mail message (and attachments) may contain information that is confidential to The National Archives. If you are not the intended recipient you cannot use, distribute or copy the message or attachments. In such a case, please notify the sender by return e-mail immediately and erase all copies of the message and attachments. Opinions, conclusions and other information in this message and attachments that do not relate to the official business of The National Archives are neither given nor endorsed by it. ------------------------------------------------------------------------------------

1 0

Find a sexoholic tonight
by Leta Noel 09 Nov '05

09 Nov '05

"Where love reigns the impossible may be attained" a insightful man once said;) And soon you can discover passion for yourself aswell, without the pointless dates;) If its either a One-Nite stand or maybe something more serious, you'll find it here;-) http://www.look-for-singles-online.us

1 0

Symlink/automount/widelink question
by Shawn Stephens 08 Nov '05

08 Nov '05

I'm looking to find a way to solve absolute symlinks created on a NFS automount and their resolution in CIFS. I'm looking at the docs for Widelinks in Data ONTAP, and I can see where this could come in useful, but only if it somehow knows about all of the UNIX automount maps in an environment. What I'm thinking is a script (perl) that would create a symlink.translations and cifsconfig_shares.cfg configuration based off of an automount map (or multiple automount maps). Has anybody seen something like this? So it's output would generate something like: automount map: auto.foo data1 filer1:/vol/vol1/data1 data2 filer2:/vol/vol2/data2 autofs: User creates a symlink in their homedir to /foo/data1 and /foo/data2: /home/user> ln -s /foo/data1 data1 /home/user> ln -s /foo/data2 data2 cifsconfig_share.cfg on filer1: cifs shares -add -widelink -vscan "foo_data1" "/vol/vol1/data1" cifsconfig_share.cfg on filer2: cifs shares -add - widelink -vscan "foo_data2" "/vol/vol2/data2" symlink.translations: Widelink /foo/data1/* \\filer1\foo_data1\* Widelink /foo/data2/* \\filer2\foo_data2\* Thoughts: 1) Of course we would trust the automount maps! 2) All clients would have DFS support. 3) Hopefully, we don't do anything that would cause issues with share boundary checking. 4) Hopefully, we don't have issues with any special characters, etc. that are in the automount maps (we'll have to get rid of & wildcards). 4) We would be able to run this configuration on a change in the automount maps (perhaps in cron?) If you've made it this far in my wandering and actually understand what's going on here, do you have any more thoughts? If so, please reply to me, and I will post a SUMMARY once I have an idea of what this will entail. Thanks, Shawn Shawn Stephens Sr. UNIX Systems Consultant stephenssh(a)saic.com The life of the creative man is lead, directed and controlled by boredom. Avoiding boredom is one of our most important purposes. - Saul Steinberg

1 0

AW: R200 licensing
by Conzen, Christoph (C.) 08 Nov '05

08 Nov '05

When you have purchased the licenses then you will find the proper code on NOW. Look at "My Licenses for Serial Numbers" and supply your machine serial number, accept the term and coditions and supply the serial number of your R200 on the next form-click GO. You will see the Capacity dependant Licenses in the List for your system. Rgards, Christoph -----Ursprüngliche Nachricht----- Von: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] Im Auftrag von Mats.Oberg(a)tietoenator.com Gesendet: Dienstag, 8. November 2005 16:14 An: toasters(a)mathworks.com Betreff: R200 licensing Hi, We just purchased an upgrade of our R200 from 8 to 16TB. And since the disks have arrived I want to start using them. But as I understandit, the R200 has a different licensing than other filers in that you purchase licenses for a specific tier-level. What happens if I connect the extra shelfes? will it stop working? Do I have to punch in a new licensekey? We did purchase the licenses, but I haven't seen any keys yet. Looking on the output from the license command doesn't reveal anything about what size the R200 is licensed for, so how do I find out? /Mats

1 0

R200 licensing
by Mats.Oberg＠tietoenator.com 08 Nov '05

08 Nov '05

Hi, We just purchased an upgrade of our R200 from 8 to 16TB. And since the disks have arrived I want to start using them. But as I understandit, the R200 has a different licensing than other filers in that you purchase licenses for a specific tier-level. What happens if I connect the extra shelfes? will it stop working? Do I have to punch in a new licensekey? We did purchase the licenses, but I haven't seen any keys yet. Looking on the output from the license command doesn't reveal anything about what size the R200 is licensed for, so how do I find out? /Mats

1 0

FW:
by Ahmed Alhussaini 08 Nov '05

08 Nov '05

________________________________ From: Ahmed Alhussaini Sent: Tuesday, July 19, 2005 7:12 AM To: 'toasters(a)mathworks.com' Subject: Unsubscribe toasters AHUSSAINI(a)commerce.gov.bh End

1 0

Best order to delete multiple snapshots?
by Jeremy Webber 07 Nov '05

07 Nov '05

I am wondering what is the best order to delete multiple snapshots - oldest first or newest first? I have assumed that deleting the oldest first will result in less copying of blocks between snapshots, but am wondering if this assumption is correct? My specific platform is a FAS960 running DataOnTAP 6.5.3P3 but I'm hoping that the answer to this isn't version specific! TIA, Jeremy -- Jeremy Webber Senior System Administrator Animal Logic Phone: +61 2 9383 4837 Fax: +61 2 9383 4801 Switch: +61 2 9383 4800

4 3

Re : NTFS Permissions Collection and Reporting tool
by ndmpcopy 04 Nov '05

04 Nov '05

Hello Mark, We have a F820 cluster and for the past 3 years have used Enterprise Security Reporter from Small Wonders (now Scriptlogic). Evaluation s/w available. www.smallwonders.com/products/enterprisesecurityreporter/ Its installed to a W2000 server and runs on filer CIFS shares (Qtrees). Stores data in MSDE. Collecting data can take awhile, 1 day for 1 million + files. I run as weekly scheduled tasks. Once data is in SQL can then quickly run any number of reports/searches for permissions. I've found it generally good and will use the same tool on new filers we are introducing. You need a licence per filer and 3 years ago it was $500 per filer (server) with the price independent of filer raw capacity or no of users. Chris -------- Original Message -------- Subject: NTFS Permissions Collection and Reporting ToolDate: Wed, 2 Nov 2005 11:42:59 -0500From: "Crawford, Mark (CBC)" <Mark.Crawford(a)capbluecross.com>To: toasters(a)mathworks.com Hello, Is anyone aware of a product that will collect and report on NTFS permissions? Our company uses a product known as Aelita by Quest Software. When we implemented our NetApp filers, Aelita could no longer collect and report on the NTFS permissions of the CIFS shares. We had developed an in-house solution as temporary stop-gap. But that has outlived its potential.Any suggestions would be greatly appreciated. Confidentiality Notice: This e-mail is intended only for the personal and confidential use of the individual to whom it is addressed and may contain information that is privileged, confidential and protected by law. If you are not the intended recipient, you are hereby notified that any use or disclosure of this information is strictly prohibited. If you have received this message in error, please notify the sender immediately by reply e-mail and delete the original message. Your compliance is appreciated. --------------------------------- To help you stay safe and secure online, we've developed the all new Yahoo! Security Centre.

1 0

Out of Office AutoReply: Returned mail: Data format error
by Karen Tucker 04 Nov '05

04 Nov '05

Thank you for your message. I will be out of the office and away from email until Monday, November 7. For immediate assistance, please feel free to contact the following people: Financial contributions, sponsorships and memberships: Gary Malone, 650-810-1029, malone(a)computerhistory.org. PR and marketing: Steven Brewster, 650-810-1036, brewster(a)computerhistory.org. Speaker Series and other progams, including the Fellow Awards: Pam Cleveland, 650-810-1021, cleveland(a)computerhistory.org. Artifact donations: Allison Akbay, 650-810-1022,akbay(a)computerhistory.org. Otherwise, I will reply after I return. Thank you, Karen Karen Tucker Vice President Development, Marketing & Public Relations Computer History Museum 1401 N. Shoreline Blvd. Mountain View, CA 94043 www.computerhistory.org 650 810 1011 (direct) 408 603 8588 (cell)

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters