toasters

toasters@lists.teaparty.net

13514 discussions

RE: cifs audit
by Bui, Marcus 13 Jan '04

13 Jan '04

It seems the server running the rsh script was not in the Filer's host.equiv. After host.equiv updated, the script worked. Should of double check :-) Thanks for the response. Marcus -----Original Message----- From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Jon Michael Gimpel Sent: Tuesday, January 13, 2004 1:47 AM To: toasters(a)mathworks.com Subject: Re: cifs audit What are you attempting to audit? Is it the CIFS file system .. such as read's, delete's, permission changes etc? If so, CIFS still needs to be set to audit like that of the native NTFS structure. You will need to do this via explorer by: - right clicking the directory or file - security tab - advanced - auditing - adding a common group or suspected user - selecting what you are attempting to audit -Jon "Bui, Marcus" <Marcus.Bui(a)aiminvestments.com <mailto:Marcus.Bui@aiminvestments.com> > wrote in message news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04 <news:0D1B378426DB3B4DB200AF4738F3E9E7090FD101@USHOUXML04> ... I have F820 running DOT 6.4.2P6 with CIFS only. I noticed the cifs audit log does not log all events. The audit log is dump and saved every night at midnight via a rsh script. Looking through several log file, there are only a few entries in each of the file. All of the entries are within 16 minutes after midnight when the audit file is dump. These are the settings. I compare it with two other Filers, F880c DOT 6.4.2P12, with the same settings the audit log worked fine. cifs.audit.enable on cifs.audit.file_access_events.enable on cifs.audit.logon_events.enable on cifs.audit.logsize 204800000 cifs.audit.saveas /etc/log/adtlog.evt Any ideas? thanks, Marcus Bui _____ Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. ----------------------------------------- Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.

4 3

CIFS newbie
by Frank Bonnet 13 Jan '04

13 Jan '04

Hi I'm beginning to use CIFS from a filer I have a very simple setup I use UNIX NIS to control user access ( option 3 in cifs setup ) my usermap.cfg file looks like *\root => nobody * == * I expect this translate UNIX login names in WINDOWS logins I have setup CIFS as follows : cifs.audit.autosave.file.extension cifs.audit.autosave.file.limit 0 cifs.audit.autosave.onsize.enable off cifs.audit.autosave.onsize.threshold 75% cifs.audit.autosave.ontime.enable off cifs.audit.autosave.ontime.interval cifs.audit.enable on cifs.audit.file_access_events.enable on cifs.audit.logon_events.enable on cifs.audit.logsize 524288 cifs.audit.saveas /etc/log/adtlog.evt cifs.bypass_traverse_checking on cifs.comment cifs.guest_account cifs.home_dir /vol/vol0/home cifs.home_dir_namestyle mapped cifs.home_dirs_public_for_admin on cifs.idle_timeout 1800 cifs.max_mpx 50 cifs.netbios_aliases cifs.netbios_over_tcp.enable on cifs.nfs_root_ignore_acl off cifs.oplocks.enable on cifs.oplocks.opendelta 8 cifs.per_client_stats.enable off cifs.perm_check_ro_del_ok off cifs.perm_check_use_gid on cifs.restrict_anonymous.enable off cifs.save_case on cifs.scopeid cifs.search_domains cifs.show_snapshot off cifs.shutdown_msg_level 2 cifs.sidcache.enable on cifs.sidcache.lifetime 1440 cifs.snapshot_file_folding.enable off cifs.symlinks.cycleguard on cifs.symlinks.enable on cifs.trace_dc_connection off cifs.trace_login on the home directory exists and belongs to its user but unfortunatelly when I try to login from a windows client I have such error message. The account is not authorized to log in from the station I am pretty ignorant of the windows world and maybe a specialist could help me in setting up such windows CIFS access ? Thanks a lot -- Frank

2 1

cifs audit
by Bui, Marcus 13 Jan '04

13 Jan '04

I have F820 running DOT 6.4.2P6 with CIFS only. I noticed the cifs audit log does not log all events. The audit log is dump and saved every night at midnight via a rsh script. Looking through several log file, there are only a few entries in each of the file. All of the entries are within 16 minutes after midnight when the audit file is dump. These are the settings. I compare it with two other Filers, F880c DOT 6.4.2P12, with the same settings the audit log worked fine. cifs.audit.enable on cifs.audit.file_access_events.enable on cifs.audit.logon_events.enable on cifs.audit.logsize 204800000 cifs.audit.saveas /etc/log/adtlog.evt Any ideas? thanks, Marcus Bui ----------------------------------------- Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.

2 1

Using a NetApps server for MySQL databases (fwd)
by David Lee 12 Jan '04

12 Jan '04

Our MySQL person, who is not on this list, has drafted the question below. (He had earlier asked on a "mysql" list but received very little feedback.) # Currently we are using mysql-standard-4.0.12-sun-solaris2.8-sparc on a # Solaris 8 machine where the MySQL databases, MySQL binaries and MySQL # logs are stored on local discs. # # We now want to store the MySQL databases, the MySQL binaries, and the # MySQL logs on a NetApps server, and to access these filesystems from # the Solaris 8 machine using NFS. # # Are there problems with doing this? # Are people using NetApps to store the databases for MySQL? The anxieties we wish to allay with this query concern things such as locking, simultaneous access, etc. At present, there would continue to be a single front-end machine (the Solaris 8 one mentioned above). Further into the future, this might be replicated for failover (not simultaneous access), for loadsharing (simultaneous access) and/or be replaced by Redhat/Linux. Are there any known issues on these further points? Thanks in advance. -- : David Lee I.T. Service : : Systems Programmer Computer Centre : : University of Durham : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham : : Phone: +44 191 334 2752 U.K. :

4 3

BUSINESS LOAN PROPOSAL
by megabrokers＠netscape.net 12 Jan '04

12 Jan '04

GOOD DAY, WE ARE A NETHERLANDS BASED INTERNATIONAL LOAN BROKERAGE FIRM AND HAS A LEGITIMATE FUNDING SOURCES WORLDWIDE IN FUNDING ALL PROJECTS WORLDWIDE WITH COMPETITIVE RATES AND TIMELY CLOSINGS WHERE JOINT VENTURES, AND PARTNERSHIPS ARE WELCOME. All ARE PAID IN U.S. DOLLARS OR IN THE CURRENCY NEEDED BY OUR CLIENT. WHEN YOU NEED OUR PROFESSIONAL SERVICES IN THESE AREAS, BONDS, LOANS, COMMERCIAL MORTGAGES, BUSINESS LOANS, VENTURE CAPITAL AND EQUIPMENT LEASING, CONTACT US VIA E-MAIL WITH YOUR THREE PAGE EXECUTIVE SUMMARY OF YOUR PROJECT FOR CONSIDERATION. LOANS FROM US$100,000 US$1 BILLION, AND SUBJECT TO OUR PROCEDURES AND REGULATIONS. BEST REGARDS, SOJI MARCUS. MEGABROKERS E-MAIL:sojimarcus@netscape.net TEL: 31-613 792 781

1 0

RE: iSCSI HOWTO question
by Benn, Paul 11 Jan '04

11 Jan '04

> So consider doing the disk configuration on the console. ...unless you're using SnapDrive. > -----Original Message----- > From: Michel Geldenhuys [mailto:michel@geldenhuys.com] > Sent: Thursday, January 08, 2004 10:58 PM > To: toasters(a)mathworks.com > Subject: RE: iSCSI HOWTO question > > Hi, > > Just beware that is you do the stuff through a Terminal > Server connection, you might not see the new disk devices in > disk administrator. > So consider doing the disk configuration on the console. > > Kind regards, > Michel Geldenhuys > > > -----Original Message----- > > From: owner-toasters(a)mathworks.com > [mailto:owner-toasters@mathworks.com] > > On Behalf Of Haber, David J. > > Sent: jeudi 8 janvier 2004 18:43 > > To: toasters(a)mathworks.com > > Subject: RE: iSCSI HOWTO question > > > > Once the Lun is created and properly set up on the Windows (2000?) > > server, you should be able to do a scan of your drives in > disk manager > > and it will show up. Then format and your good to go. > > > > -----Original Message----- > > From: Geoff Hardin [mailto:geoff.hardin@dalsemi.com] > > Sent: Thursday, January 08, 2004 11:59 AM > > To: toasters > > Subject: iSCSI HOWTO question > > > > I am new to the SAN environment, and most especially to > the iSCSI > > way of doing things. I have the iSCSI protocol enabled on my filer, > and > > I have the Microsoft iSCSI initiator downloaded and installed on my > PC. > > From the filer, I have created a couple LUNs on my filer, I have > > created igroups, mapped the LUNs to the igroups, set the > create_ucode > > option to on, and started the iSCSI service. On the > Windows system, I > > have added the target portal, logged on, and I can see an active > > session. I think I have all the basics under control. > > What I can't seem to figure out is how the LUNs now show up as > being > > somehow connected to my Windows computer. I'm sure I've missed > > something, but I can't figure out what. I've tried reading > the "ONTAP > > SysAdmin Block Access Management Guide" and working through the > examples > > step by step, still to no avail. > > Some details: > > > > Host (initiator): Windows 2000 > > ONTAP version 6.4.3 > > toaster> iscsi show adapter > > Adapter: iswta > > Slot: N/A > > Description: NetApp Software Implementation > > Status: Online > > Target Portal Groups: > > portal group 1: inet 192.168.1.3 port 3260 > > > > toaster> igroup show > > windows-igroup0 (iSCSI) (ostype: windows): > > iqn.1992-08.com.netapp:sn.123456789 > > > > toaster> lun show -v > > /vol/vol0/iscsi/lun0 10.0g (10742215680) (r/w, > online, > > mapped) > > Comment: "iSCSI test lun0" > > Serial#: HPlwFYo6bJoZ > > Share: none > > Space Reservation: enabled > > Multiprotocol Type: windows > > Maps: windows-igroup0=0 > > /vol/vol0/iscsi/lun1 10.0g (10742215680) (r/w, > online, > > mapped) > > Comment: "iSCSI test lun1" > > Serial#: HPlwFYo6bQDV > > Share: none > > Space Reservation: enabled > > Multiprotocol Type: windows > > Maps: windows-igroup0=1 > > > > toaster> iswt interface show > > Interface e0 enabled > > > > toaster> iscsi nodename > > iSCSI target nodename: iqn.1992-08.com.netapp:sn.123456789 > > > > > > > > Any help would be greatly appreciated. > > > > Thanks, > > > > Geoff Hardin > > geoff.hardin(a)dalsemi.com > > > > > > > > > > > > Confidentiality Notice: > > This message, and any attachments, may contain information that is > > confidential, privileged, and/or protected from disclosure > under state > and > > federal laws that deal with the privacy and security of medical > > information. If you received this message in error or through > > inappropriate means, please reply to this message to notify > the Sender > > that the message was received by you in error, and then permanently > delete > > this message from all storage media, without forwarding or > retaining a > > copy. > >

4 3

RE: ntp time synchronization is not working
by Jason Truong 09 Jan '04

09 Jan '04

thanks alot guys for clearing this up. I'll try to update my version of ntp. I really hate to upgrade my Netapp unless I HAVE to. Right now I have the device syncing with an external time source but would prefer to use our internal time server. I'll see how far I get with this. Thanks again. Jason -----Original Message----- From: Frank Bonnet [mailto:bonnetf@bart.esiee.fr] Sent: Friday, January 09, 2004 2:23 AM To: Stephane Bentebba Cc: Jerry; Jason Truong; toasters(a)mathworks.com Subject: Re: ntp time synchronization is not working On Fri, Jan 09, 2004 at 10:10:02AM +0100, Stephane Bentebba wrote: > i personnally also tried to sync a netapp on a linux box > it didn't work either > i think netapp don't want to support linux ntp service > why ?... Hi all NTP is a UNIX service described in RFC 1119 it is not "Linux special" I use NTP to sync two filers and I had troubles with some old versions of Ontap and NTP. Actually the bug _seems_ to be corrected. -- Frank Bonnet

1 0

ntp time synchronization is not working
by Jason Truong 09 Jan '04

09 Jan '04

I have ntp running on my of my linux servers which acts as the time server for my network. I want to have my netapp sync to this server using ntp. However I keep getting error messages like: Tue Jan 6 10:52:19 PST [Java Thread:ALERT]: TimeDaemon: Time server 10.1.88.44 is not responding to time synchronization requests Solaris, linux and windows can sync to this server except for my netapp. (Running NetApp Release 6.2.1R1) Does anyone experience the same problem ... and if so, how did you fix this? Thank you. Here is my ntp.conf file: #################################################### restrict 127.0.0.1 # syncing with mule server 192.168.1.3 restrict 192.168.1.3 mask 255.255.255.255 nomodify notrap noquery # ntp-cup.external.hp.com in Cupertino, CA server ntp-cup.external.hp.com # ip address 192.6.38.127 # clock.isc.org in Palo Alto, CA server clock.isc.org # ip address 192.5.5.250 # Use local system time if time servers are not available server 127.127.1.0 # local clock fudge 127.127.1.0 stratum 10 driftfile /etc/ntp/drift broadcastdelay 0.008 authenticate yes keys /etc/ntp/keys ############################################# Jason Truong Plumtree Software (415) 399-7006

4 3

RE: iSCSI HOWTO question
by Neto, Antonio Jose Rodrigues 09 Jan '04

09 Jan '04

Hi Michel, This is neto from NetApp Brazil. How are you? The terminal services is not good to manage new hardware resources. 2 tips : - If you need to use Terminal Services - Workaround : Please logoff your session and login again. Now I can see the new hardware resources, the NetApp disks. - Another tip is that you can use another terminal services, for example : Pc Anywhere (not free) or UltraVNC (free) - http://sourceforge.net/projects/ultravnc . I've make tests using PC Anywhere and UltraVNC and this problems doesn't ocurr. If you need more informations or any help, please let me know. Best Regards from Brazil. neto -----Original Message----- From: Michel Geldenhuys [mailto:michel@geldenhuys.com] Sent: Friday, January 09, 2004 4:58 AM To: toasters(a)mathworks.com Subject: RE: iSCSI HOWTO question Hi, Just beware that is you do the stuff through a Terminal Server connection, you might not see the new disk devices in disk administrator. So consider doing the disk configuration on the console. Kind regards, Michel Geldenhuys > -----Original Message----- > From: owner-toasters(a)mathworks.com [mailto:owner-toasters@mathworks.com] > On Behalf Of Haber, David J. > Sent: jeudi 8 janvier 2004 18:43 > To: toasters(a)mathworks.com > Subject: RE: iSCSI HOWTO question > > Once the Lun is created and properly set up on the Windows (2000?) > server, you should be able to do a scan of your drives in disk manager > and it will show up. Then format and your good to go. > > -----Original Message----- > From: Geoff Hardin [mailto:geoff.hardin@dalsemi.com] > Sent: Thursday, January 08, 2004 11:59 AM > To: toasters > Subject: iSCSI HOWTO question > > I am new to the SAN environment, and most especially to the iSCSI > way of doing things. I have the iSCSI protocol enabled on my filer, and > I have the Microsoft iSCSI initiator downloaded and installed on my PC. > From the filer, I have created a couple LUNs on my filer, I have > created igroups, mapped the LUNs to the igroups, set the create_ucode > option to on, and started the iSCSI service. On the Windows system, I > have added the target portal, logged on, and I can see an active > session. I think I have all the basics under control. > What I can't seem to figure out is how the LUNs now show up as being > somehow connected to my Windows computer. I'm sure I've missed > something, but I can't figure out what. I've tried reading the "ONTAP > SysAdmin Block Access Management Guide" and working through the examples > step by step, still to no avail. > Some details: > > Host (initiator): Windows 2000 > ONTAP version 6.4.3 > toaster> iscsi show adapter > Adapter: iswta > Slot: N/A > Description: NetApp Software Implementation > Status: Online > Target Portal Groups: > portal group 1: inet 192.168.1.3 port 3260 > > toaster> igroup show > windows-igroup0 (iSCSI) (ostype: windows): > iqn.1992-08.com.netapp:sn.123456789 > > toaster> lun show -v > /vol/vol0/iscsi/lun0 10.0g (10742215680) (r/w, online, > mapped) > Comment: "iSCSI test lun0" > Serial#: HPlwFYo6bJoZ > Share: none > Space Reservation: enabled > Multiprotocol Type: windows > Maps: windows-igroup0=0 > /vol/vol0/iscsi/lun1 10.0g (10742215680) (r/w, online, > mapped) > Comment: "iSCSI test lun1" > Serial#: HPlwFYo6bQDV > Share: none > Space Reservation: enabled > Multiprotocol Type: windows > Maps: windows-igroup0=1 > > toaster> iswt interface show > Interface e0 enabled > > toaster> iscsi nodename > iSCSI target nodename: iqn.1992-08.com.netapp:sn.123456789 > > > > Any help would be greatly appreciated. > > Thanks, > > Geoff Hardin > geoff.hardin(a)dalsemi.com > > > > > > Confidentiality Notice: > This message, and any attachments, may contain information that is > confidential, privileged, and/or protected from disclosure under state and > federal laws that deal with the privacy and security of medical > information. If you received this message in error or through > inappropriate means, please reply to this message to notify the Sender > that the message was received by you in error, and then permanently delete > this message from all storage media, without forwarding or retaining a > copy.

1 0

Re: ntp time synchronization is not working
by Michel GELDENHUYS 09 Jan '04

09 Jan '04

Hello, Maybe should you check if your NTP server can be upgraded to a new one. There might be a flaw in the implementation of the protocol that might prevent the Filer to correctly understand the time sync message or on the other hand, a flaw that might prevent NTP server to correctly understand the request from the Filer. I must say that I'm very surprised that a Linux NTP does not work correctly with a Filer... Indeed, we rely on a NTP server on Windows NT 4.0 which is W32Time from Microsoft, a very simple product, and I haven't got any problem synchronizing our Filers with it. Since MS is well known for their "particular" implentation of public protocols, I would not be surprised to have problems with it, which it's not the case! Kind regards, Michel Geldenhuys Danone Belgium SA/NV +32 2 776 68 23 michel.geldenhuys(a)danone.com Stephane Bentebba <stephane.bentebba(a)fps.fr> Sent by: owner-toasters(a)mathworks.com 09/01/2004 10:10 To: Jerry <juanino(a)yahoo.com> cc: Jason Truong <JasonT(a)plumtree.com>, toasters(a)mathworks.com Subject: Re: ntp time synchronization is not working i personnally also tried to sync a netapp on a linux box it didn't work either i think netapp don't want to support linux ntp service why ?... Jerry wrote: >I'm pretty sure I am syncing to a linux box. Can you >run ntpq -c peers or ntpq -c ass on the linux box? >Try taking out your restrict line, restarting and then >try it... this will just confirm you are not >restricting yourself on accident. > >--- Jason Truong <JasonT(a)plumtree.com> wrote: > > >>I have ntp running on my of my linux servers which >>acts as the time server for my network. I want to >>have my netapp sync to this server using ntp. >>However I keep getting error messages like: >> Tue Jan 6 10:52:19 PST [Java Thread:ALERT]: >>TimeDaemon: Time server 10.1.88.44 is not responding >>to time synchronization requests >> >>Solaris, linux and windows can sync to this server >>except for my netapp. (Running NetApp Release >>6.2.1R1) >>Does anyone experience the same problem ... and if >>so, how did you fix this? >>Thank you. >>Here is my ntp.conf file: >>#################################################### >>restrict 127.0.0.1 >># syncing with mule >>server 192.168.1.3 >>restrict 192.168.1.3 mask 255.255.255.255 nomodify >>notrap noquery >> >># ntp-cup.external.hp.com in Cupertino, CA >>server ntp-cup.external.hp.com >># ip address 192.6.38.127 >> >># clock.isc.org in Palo Alto, CA >>server clock.isc.org >># ip address 192.5.5.250 >> >># Use local system time if time servers are not >>available >>server 127.127.1.0 # local clock >>fudge 127.127.1.0 stratum 10 >> >>driftfile /etc/ntp/drift >>broadcastdelay 0.008 >>authenticate yes >>keys /etc/ntp/keys >>############################################# >> >>Jason Truong >>Plumtree Software >>(415) 399-7006 >> >> >> >> > > >__________________________________ >Do you Yahoo!? >Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes >http://hotjobs.sweepstakes.yahoo.com/signingbonus > > >

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters