toasters

toasters@lists.teaparty.net

1 participants
13528 discussions

accessing service processor
by Rhodes, Richard L. 27 Apr '16

27 Apr '16

Hello, This is probably really dumb, but I'm stumped. I've been working on a support case with IBM (nSeries). They asked me to get some info from the service processor. So I ssh to the SP, get a prompt, try and login as naroot (using root's pwd), which fails. The last time I tried to ssh and log onto a SP was when these systems were setup +2 years ago. Back then it worked. Since then we've regularly rolled the root password every X months. It's my understanding that naroot at the service processor uses the OnTap root password. I've tried to access the SP on several nSeries system and they all fail the same way. IBM nSeries N3220 (NetApp FAS2240) OnTap 8.1.2P1 7-mode Any thoughts are appreciated. Rick What I've done: - I know the root password - I used it to log onto the filer on the main interface Using username "root". root@filerxxxx's password: filerxxxx> - It's status is online filerxxxx> sp status Service Processor Status: Online Firmware Version: 2.1.1 Mgmt MAC Address: xx:xx:xx:xx:xx:xx Ethernet Link: up, 100Mb, full duplex, auto-neg complete Using DHCP: no IPv4 configuration: IP Address: xxx.xx.xx.xxx Netmask: 255.255.255.0 Gateway: xxx.xx.xx.x IPv6 configuration: Disabled - all hosts are allowed to access the sp filerxxxx> options sp sp.autologout.enable on sp.autologout.timeout 60 sp.setup on sp.ssh.access * - it pings - it gives a login prompt, but it doesn't take the root password ssh naroot@filerxxxxs naroot@filerxxxxs's password: Permission denied, please try again. naroot@filerxxxxs's password: - I've tried ssh to the SP via the DNS name (filerxxxxs) and the IP (xxx.xx.xx.xxx) - I am aware of the 15min timeout period on 6 unsuccessful login attempts. - I've tried ssh via putty from a Win laptop, and, ssh from an AIX system. Both give the same result - it naroot/root password doesn't work. - I rebooted the SP filerxxxx> sp reboot NOTE : If your console connection is through the SP,it will be disconnected Do you want to reboot the SP now? (y/n) :? y Console connection through the SP will now be dropped - Reboot didn't help - still can't login as naroot with root's password ssh naroot@filerxxxxs naroot@filerxxxxs's password: Permission denied, please try again. ----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.

5 6

quota control query in CDOT
by Brian Parent 23 Apr '16

23 Apr '16

I'm writing a perl script to call the NetApp APIs for modifying quotas. I'd like to allow a vserver admin the ability to change the association of quota policy for their own vserver, but that doesn't appear to be allowed. As far as I can tell, only cluster admins can do that. This is a request to see if I'm misunderstanding things, as I'm fairly new to CDOT. Vserver admins can create, delete, modify, copy, and rename quota policies for their vserver, but not change the active policy. So, if they were to make a backup copy of their active policy, then make changes to the active policy, but make a mistake and have the need to revert to their backup copy, they would *not* be able to without the intervention of a cluster admin. CDOT (8.3.1) prevents deletion of the active quota policy, and prevents copying to a policy name that already exists (even as a cluster admin, even if quotas are turned off). Excerpted from "Clustered Data ONTAP 8.3 Logical Storage": • When you need to create a quota rule or change quota rules for a quota policy, you can choose either of the following approaches: ◦ If you are working in a quota policy that is assigned to an SVM, then you need not assign the quota policy to the SVM. ◦ If you are working in an unassigned quota policy and then assigning the quota policy to the SVM, then you must have a backup of the quota policy that you can revert to if required. For example, you can make a copy of the assigned quota policy, change the copy, assign the copy to the SVM, and rename the original quota policy. I guess what is unsaid in the doc is that such an approach is available only to cluster, and not vserver admins. Have I got this right? I thought the idea was to allow vserver admins the privileges to work on their own vserver without requiring cluster admin privileges. -- Brian Parent Information Technology Services Department IT Infrastructure Operations Group Workplace, Internal, Research, and Educational Platforms (WIRE) team UC San Diego (858) 534-6090

1 0

OnCommand CPU report question for 2.x OPM
by Klise, Steve 21 Apr '16

21 Apr '16

>In former versions of DFM or whatever it was called now, I was able to chart individual CPU’s in Performance Manager. Now, I only see an average across all processors w/ 2.x OnCommand Performance Manager. I know I can drop down to the console, and run a sysstat -whatever... but was wondering if I was missing something for OnCommand Performance Manager to see, or graph individual CPUs. Is this an option, or how would I enable, setup? I am running the LOD, and can't see how this can be done... If its not available, that was of value to some of my customers. Steve

5 10

NFSv4 clients refused file access by FAS2240
by Ziemowit Pierzycki 19 Apr '16

19 Apr '16

Hi, I have a FAS2240 and used it as an NFSv4 storage for our Linux KVM-based cloud. Few days ago, I noticed a few NFS mounts freezing up. After some investigation, looks like the Linux clients are attempting to get access to files via NFS share and the Netapp appears to be denying it. It appears to happen at random across multiple clients as if we hit some kind of a wall. I found a "lock status -v" command by going to some posts on the internet and after running it, the last line shows the following: Free owners 7; In-Use Owners 8185 Could that be the wall/limitation that's causing my problem? I also learned of a bug in older Linux kernel that creates extra owners and found the client that appeared to have a huge amount of file locks and owners generated. After disconnecting the client and clearing the locks it didn't seem to make a difference. Here is some extra summary from the "lock status -n" command: CIFS: 13 share locks, 0 byte locks NLM: 0 share locks, 1 byte locks NFSV4: 47 share locks, 0 byte locks WAFL: 0 share locks, 0 byte locks TEST: 0 share locks, 0 byte locks FIO: 0 share locks, 0 byte locks FlexCache: 0 share locks, 0 byte locks NG: 0 share locks, 0 byte locks Total Locks: 60 share locks, 1 byte locks Max Locks: 2922432 Total Locked Files: 56 Max Locked Files: 1461216 Any help would be greatly appreciated.

1 0

iSCSI booting linux clients
by Chris Good 19 Apr '16

19 Apr '16

Has anyone got any experience using iSCSI luns from a CDOT filer as linux root partitions and would like to share experience/best practice? As background we have lots of Dell blades and it makes sense to us to put cheap SSDs in them as disposable scratch space and to network boot the root FS from our filers. We barely touch the root FS so accessing it over the network doesn't really hurt us and the usage is low enough that the impact on the filer should be negligible. Chris

1 0

node and cluster management network architecture, proxy, port forwarding
by Brian Parent 18 Apr '16

18 Apr '16

I'm running into some problems with the network layout on our AFF8020 running CDOT 8.2.3. It seems that using a private layer 2 vlan for node management provides the significant benefit of reducing potential attack sources to servers on that private vlan (where such vlan has a small number of hosts, all with lots of access restrictions, none of which run DNS, ntp, SMTP services). I was hoping to use port forwarding from a server in that vlan to enable things like https, DNS, ntp, and smtp, but have not been successful yet. Before I spend too much more time on it, I thought I should check to see whether others have had success with similar network topology. -- Brian Parent Information Technology Services Department IT Infrastructure Operations Group Workplace, Internal, Research, and Educational Platforms (WIRE) team UC San Diego (858) 534-6090

1 1

Netapp CDOT 8.3 and Peerlink software
by Sayla, Mustafa 18 Apr '16

18 Apr '16

Anyone using Peerlink software for File collaboration between offices? We have been using this software to real time sync data from Netapp to a windows server in our remote office. Software worked fine with many years but since January when we migrated our data to CDOT filer and upgrade the peerlink software to a cdot compatible version we have run into issues after issues. Anyone has experience with this software and if not is there another viable option out there for real time sync between netapp and windows server. Mustafa Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

3 5

7-mode user account with no password, only ssh
by BERNTSEN Basil 15 Apr '16

15 Apr '16

Hi folks, Is it possible to create a user in 7-mode without specifying a password, or alternatively disallow password logins for a specific user? My goal is to create a user that must use an ssh key to run CLI commands. Cheers! Basil ************************************************************************* This message and any attachments (the "message") are confidential, intended solely for the addressee(s), and may contain legally privileged information. Any unauthorized use or dissemination is prohibited. E-mails are susceptible to alteration. Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. Please visit http://sgasdisclosure.com for important information regarding SG Americas Securities, LLC (“SGAS”). Please visit http://swapdisclosure.sgcib.com for important information regarding swap transactions with SOCIETE GENERALE. *************************************************************************

3 2

Showmount capability in 8.2.2?
by Robert Clark 13 Apr '16

13 Apr '16

Is anyone aware of a way to check which clients have a particular NFS export mounted, in 8.2.2? I've installed and worked with the showmount command written in python, but it appears to only output the export list. Thanks, [RC]

3 2

Listing NTFS style ACLs from unix client via NFS
by John Adams 13 Apr '16

13 Apr '16

Hello, Simple question here.. If a qtree is using NTFS style permissions, and that same qtree is exported via NFS to a unix client... Is there a way to see the NTFS acl's from that unix client? The usual "ls -l" just shows what looks like mode 777. Maybe an open source tool that could be installed on the unix client or something? Thanks.

5 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters