toasters

toasters@lists.teaparty.net

1 participants
13528 discussions

SnapMirror vs. SnapVault for 70+ million files...
by Ray Van Dolson 23 Aug '16

23 Aug '16

We wanted to use SnapVault to protect a volume containing 70+ million files (probably also has around 30TB of data, though it de-dupes down to less than 6TB). However, it appears that with SnapVault a full file scan is preformed prior to the block-based replication, and that scan can take around 24 hours. I'm assuming it will do this on subsequent differential vaults, though the block transfer part should be much shorter we'll still need to wait for the file scan to complete. As we'd like to "back up" this data at least once a day, would we be better positioned by using SnapMirror? My belief is that it does *not* scan all of the files first and simply replicates changed blocks. We'd need to keep more snapshots on the source storage to meet our retention requirements (or maybe further replicate the volume on the destination side?). Thanks, Ray

6 8

To enable sanitization or not
by Rhorer, Kyle L. (JSC-OD)[THE BOEING COMPANY] 22 Aug '16

22 Aug '16

Hi folks, When I do an “options licensed_feature.disk_sanitization.enable on”, I get a message asking me to confirm “You will not be able to disable this feature, are you sure you wish to continue?” My question is, why wouldn’t I want to enable it? Is there some feature that doesn’t work when sanitization is enabled? Or some other downside to enabling it? I tried to Google for the answer but I didn’t turn up much with the search terms I could think to try. Thanks, Kyle

2 1

"cifs setup" fails with "Setup cannot connect to an LDAP server for the FQDN"
by Momonth 18 Aug '16

18 Aug '16

Hi, I tried to add 8.2.3 7-Mode filer to Windows AD via "cifs setup" wizard, but it's failing with: CIFS - Logged in as username(a)MYDOMAIN.COM *** Setup cannot connect to an LDAP server for the MYDOMAIN.COM *** active directory domain, and so cannot continue. I think the error message is misleading as the filer can talk to LDAP servers (I have multiple domain controllers) and I have a tcpdump that confirms it. >From what I could get from the tcpdump, the filer does the following: 0. Sends DNS request "SRV _ldap._tcp.MYDOMAIN.COM" // + some more DNS requests for "SRV _kerberos" etc. 1 Sends LDAP search query that looks like this: Filter: (&(&(DnsDomain=MYDOMAIN.COM)(Host=FILER-NAME))(NtVer=0x00000006)) Does it try to find itself ? 2. Gets am empty (but successful) response, where "matchedDN" is empty. 3. Sends "abondonRequest" to LDAP server. 4. Sends "unbindRequest to LDAP server. The filer repeats it for all LDAP server it fetched at step 0. and quits with the error. I found the following KBs: https://kb.netapp.com/support/index?page=content&id=2026294&actp=LIST https://kb.netapp.com/support/index?page=content&id=2018207&actp=LIST All my LDAP servers have names that are less than 15 symbols, that's verified. And NetBIOS is not active I was told. Any ideas maybe? Cheers, Vladimir

2 3

DFM 3.2 Protection Polices - Backup Snapshot Policy
by Ray Van Dolson 17 Aug '16

17 Aug '16

We have a Protection Policy with Primary data set to retain backups (snapshots) of two daily's and two weekly's. On the Backup side, we have it set to retain 6 daily's and 12 weekly's (this is all via the GUI). However, on the Backup side, I'm only seeing three snapshots -- one which appears to be the SnapVault base snapshot and two others correlating with today's SnapVault run and yesterday's. There are a good number of Qtrees under this volume, and the various snaps seem to have one of the Qtree names appended, but not all Qtrees are represented. Seems like we must be doing something wrong? Anyone have any ideas? Ray

1 0

8.2 CDOT Snapmirror reverse resync
by BERNTSEN Basil 13 Aug '16

13 Aug '16

Hi folks, If I have volume A on cluster 1 snapmirrored to volume B on cluster 2 and I do the following: * Break the snapmirror relationship * Resync<https://library.netapp.com/ecmdocs/ECMP1366832/html/snapmirror/resync.html> the snapmirror from cluster 1 using the -source-path of cluster 2 volume B (backward from what I just broke) What should happen is that volume B on cluster 2 is now RW, volume A on cluster 1 is DP (read only), and no full sync is done over the replication network, right? That's how it worked in 7-mode, but I haven't done this in CDOT yet. Thanks! Basil ************************************************************************* This message and any attachments (the "message") are confidential, intended solely for the addressee(s), and may contain legally privileged information. Any unauthorized use or dissemination is prohibited. E-mails are susceptible to alteration. Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. Please visit http://sgasdisclosure.com for important information regarding SG Americas Securities, LLC (“SGAS”). Please visit http://swapdisclosure.sgcib.com for important information regarding swap transactions with SOCIETE GENERALE. *************************************************************************

2 1

ssh timing out (filer high CPU load)
by Edward Rolison 11 Aug '16

11 Aug '16

On the off chance - I'm having trouble with a filer. I can't ssh to it reliably (at all, mostly). I'm pretty sure that's correlated with some high CPU load - my system console has it 'spiked' at >95% for the last 24h, and that's much higher than 'normal'. What i'm not sure of is quite what's causing it - the filer is busy, but not abnormally so. The only thing I can think of that _might_ have changed it, is api calls (qtree-list, get-file-info) - I've recently started doing quota snmp trap enrichment. (but thats 'every few minutes' at most). But otherwise - I'm not sure what might be causing sshd to stall, and if there's a way to 'kick' it? This is a 7 mode filer, on 8.2.1 I've got a case open, but would appreciate any further insight on how to track a high CPU-causing ssh to not respond type issue. I'm pretty sure a failover/failback will do the trick, but that'll have to wait until the weekend - I'd like not to if I can manage it. My current ps list looks like: Process statistics over 67.328 seconds... ID State Domain %CPU StackUsed %StackUsed Name 195 RR N 47% 6928 10% NwkThd_00 196 RR N 47% 7880 12% NwkThd_01 197 RR 0 47% 6928 10% NwkThd_02 223 BR s 7% 7648 46% pmcsas_intrd_1 259 BR e 5% 2440 19% fal_io_thread2 502 BR R 7% 7448 45% raidio_thread 503 BR R 7% 7448 45% raidio_thread 635 BG k 6% 15184 11% snmpd 1614 BR 0 5% 3464 10% ntm_main 1711 RR w 35% 14256 21% wafl_exempt00 1712 BR w 35% 14136 21% wafl_exempt01 1713 BR w 35% 14136 21% wafl_exempt02 2599 BR k 5% 2752 8% gr_scheduler That seems pretty busy for a 4cpu system... Thanks and regards, Ed.

2 5

cdot initial setup help
by Mr. John W. Miller 10 Aug '16

10 Aug '16

Greetings, I have been using Netapp and ONTAP for years. I am new to CDOT. I am setting up a FAS2552 system running NetApp Release v8.3P1. I have a single HA Pair and have created a two node cluster. This should be very simple. I am looking for simple examples of how to initially configure my cluster. Where do I find such examples or templates? thanks

2 1

Snapshot deletion performance impact
by Basil 05 Aug '16

05 Aug '16

Hi folks, I need to delete a bunch of snapshots that were orphaned by CDOT when someone changed the schedule. It's a lot of data- 500gb for a 1tb LUN. How does ontap prioritize releasing these blocks after the delete? What's the best way in 8.2.3 to measure the impact, if any?

2 1

OnTAP + Brocade's Target Driven Zoning (TDZ)
by Momonth 03 Aug '16

03 Aug '16

Hi, I'm looking at simplifying FC zone management. And since I am 100% Brocade shop, then "Target Driven Zoning (TDZ)" sounds like a possible solution - http://www.brocade.com/content/html/en/administration-guide/fos-741-admingu… I couldn't google anything NetApp's OnTAP wise in this regard, so I guess the TDZ is not supported, but maybe I'm missing something here. Does anyone have any experience with $subj? Cheers, Vladimir

1 0

Kerberized NFSv4 in 7-Mode (AD)
by Ray Van Dolson 30 Jul '16

30 Jul '16

Need some guidance in getting this working. Have an 8.2.2P1 7-mode filer, joined to AD (working fine w/ CIFS) and have used 'nfs setup' to enable Kerberized NFS. However, I noticed that no nfs/* entries are present when I run setspn -L <FILER> from a Windows box. I was under the impression that nfs setup should create these? Or, since we're joined to AD already, perhaps the established machine account is sufficient to obtain one on the fly... I have the following export on a volume with ntfs security style: /vol/raytest -sec=krb5:krb5i:krb5p,rw,anon=0,nosuid On my client (RHEL7+SSSD), I'm fairly confident my setup for Kerberos is good. I can SSH in with a Kerberos login, do kinit, etc and connect to other Kerberized services (like doing an ldapearch do AD without being prompted for a password using -Y GSSAPI as long as I have a valid tgt). I've tried my krb5.conf with and without the following: default_tgs_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC default_tkt_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC preferred_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC I also ran 'net ads keytab add nfs' on my client and see that I have a valid nfs/ entry in my machine's keytab file. If I run the following (either as root or as a user -- below is as a user with a valid TGT): $ sudo mount.nfs4 -o vers=4,sec=krb5 red-str-napc2-p12.esri.com:/vol/raytest /mnt/nfs I get a successful mount and also see a valid nfs ticket in klist. However, when I try to cd to /mnt/nfs, I get a "Permission Denied" error. I have rpc.gssd running in the foreground in verbose mode but don't really see anything odd. Wireshark tells me I've asked for read, lookup, modify, extend and delete permissions but that access was denied and only delete was allowed. I can see that the RPC portion of the packets are speaking Kerberos, but I can't tell much more than that. DNS, NTP, etc. is all set up and working on both sides. I've used sectrace on the /vol/raytest path above to try and catch issues, but get no hits making me think it's NFS on the NetApp rejecting things, not the file system layer... fsecurity shows that everything is wide open and from a CIFS client using the same user as on the Linux box, I can create files on the same path with no issues. Kinda stumped at this point. Any suggestions? Ray

3 8

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters