toasters

toasters@lists.teaparty.net

1 participants
13518 discussions

Security Descriptor noob question
by Carl Howell 25 Oct '21

25 Oct '21

I have a test volume with a CIFS share and default permissions. If I want to modify the NTFS permissions using either vserver security file-directory ntfs modify...or something like Ansible, how do I find the security descriptor to modify(ntfs-sd): vserver security file-directory show -vserver svm1 -path /test4 -instance Vserver: svm1 File Path: /test4 File Inode Number: 64 Security Style: ntfs Effective Style: ntfs DOS Attributes: 10 DOS Attributes in Text: ----D--- Expanded Dos Attributes: - UNIX User Id: 0 UNIX Group Id: 0 UNIX Mode Bits: 777 UNIX Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0x8004 Owner:BUILTIN\Administrators Group:BUILTIN\Administrators DACL - ACEs ALLOW-Everyone-0x1f01ff ALLOW-Everyone-0x10000000-OI|CI|IO Feel like I'm missing something obvious here. . . Thanks, --Carl

3 5

statistics show-periodic
by Mike Thompson 23 Oct '21

23 Oct '21

can't seem to get this to work on a 9.7 box. works fine on 9.3 am I missing something obvious? pd-san2::*> set -privilege advanced pd-san2::*> statistics show-periodic -counter total-recv|total-sent|data-recv|data-sent|cluster-recv|cluster-sent|cluster-busy Error: command failed: entry doesn't exist pd-san2::*> set -privilege diag Warning: These diagnostic commands are for use by NetApp personnel only. Do you want to continue? {y|n}: y pd-san2::*> statistics show-periodic -counter total-recv|total-sent|data-recv|data-sent|cluster-recv|cluster-sent|cluster-busy Error: command failed: entry doesn't exist pd-san2::*> version NetApp Release 9.7P13: Thu Apr 15 02:06:46 UTC 2021

6 13

Tech Refresh Path for MetroCluster
by Heino Walther 14 Oct '21

14 Oct '21

Hi there We are in the process of quoting a tech-refresh of our two node Stretched MetroCluster (A8080 nodes, one at each DC) We were initially looking at a Ethernet based MetroCluster replacement, yet because of Cisco’s horrific back lock, we are more or less forced to choose another Stretched MetroCluster at the replacement. The question is if there is a recommended upgrade path for this? In a standard HA setup we normally just add the new two nodes into the existing cluster, and move volumes and LIFs… pretty easy and with no down time. But it is a bit different with a two node MC mainly because it is essentially two single node clusters. If we were to add another two nods into the existing cluster, we would also require four FC switches in order to link up the FCVI cards which is currently linked up back-to-back between the two DCs. So I see two possible ways… Headswap… from A8080 to A400 (should be possible with any down time? Just switchover, replace node, recable, reassign disks, switchback, then add new shelfs, and move volumes…) ? Parallel setup and move workloads from one to the other… (most is vmware, so not that big a deal… but there are also some critical iSCSI LUNs which will require more work) One other little possible issue is that the old cluster has a 6G Disk Loop and a 12G Disk Loop… both use the QSFP/MiniSASHD to Optical… but the old 6G loop cannot work with the A400 because to my knowledge it does not have any supported PCIe card that has QSFP connectors? (not according to HWU). But we do have four 6500N ATTO Bridges that we can use for this… so right now the plan would be the following: Introduce the ATTO 6500N bridges into the existing solution (there are plenty of fibers across the two DCs) Switchover node 1 to node 2 Headswap node 1 to A400, and recable. Reassign old node 1 disks to new node 1 Switchback node 1 (same procedure on node 2) Attach new disks to both nodes. Create new root aggr0 on new disks for both nodes (move configuration to new aggr0… (described somewhere…) Move volumes to new disks. Remove old empty aggregates and unassign Remove physical disks Any other suggestions? And have anyone else tried this? I think I read somewhere that it was actually not possible to expand a two node MC to four nodes… is that really correct? /Heino

1 0

Distribution Function & Jumbo Frames
by Carl Howell 06 Oct '21

06 Oct '21

I've got a four node cluster where each node has a 10Gb ifgrp connected to LACP port-channels on Nexus 9k's. Each of the ifgrp's has its distribution function set to ip. My first question is, should I tear these ifgrp's down to change their distribution functions to port? Next, all of these port-channels and ifgrp's have MTU 1500. I'd like to of course set them to 9000. The process to do this I believe is to raise the MTU on the port-channels to 9216. Raise the MTU on the ifgrp's to 9000, and then raise the MTU's on the Broadcast domains to 9000. My question is, can I do this without an outage? I've tested this on another cluster, but it unfortunately doesn't have ESXi(NFS), Oracle(NFS), SQL Server(iSCSi) clients on it. There seems to be a small outage when the ifgrp is changed, but I can't determine if that will cause any issues on the client side. Thanks as always for the help. --Carl

2 1

Upgrade from 9.3 to 9.7
by Philbert Rupkins 21 Sep '21

21 Sep '21

Hello Toasters, Anybody have experience, positive or negative, upgrading from 9.3 to 9.7? It is a supported automated upgrade path but requires packages for both 9.5 and 9.7. My understanding is each node will be upgraded twice (once to 9.5 then to 9.7) but otherwise should follow the typical automated upgrade routine. Thank You Phil

11 17

Re:
by jordan slingerland 01 Sep '21

01 Sep '21

create a flexclone of the snapshot, mount that lun to any windows server and double click on the vhdx file, it will open/mount as a drive letter. On Wed, Sep 1, 2021 at 1:41 PM Jeff Cleverley via Toasters < toasters(a)teaparty.net> wrote: > > > > ---------- Forwarded message ---------- > From: Jeff Cleverley <jeff.cleverley(a)broadcom.com> > To: "<Toasters(a)teaparty.net>" <Toasters(a)teaparty.net> > Cc: > Bcc: > Date: Wed, 1 Sep 2021 11:38:06 -0600 > Subject: Hyper-V file recovery from snapshot > Greetings, > > I'm trying to figure out how to mount a .vhdx (Server 2012 > Hyper-V/Failover Cluster) to be able to view or restore a specific file. I > have only found 2 ways to do this so far: > > 1. Copy the .vhdx from the snapshot to the physical server and mount it. > > 2. Use Disk manager and mount it read-only remotely from the NetApp. I > have found this is only working if the VM was down when the snapshot was > taken. > > Is there a way to get the .vhdx from the snapshot mounted remotely? When > I have to copy a 300G .vhdx, it is very slow and it limits the systems with > enough free space as targets. > > I was hoping to use this as opposed to having to apply one of our various > traditional backup methods. > > Thanks, > > Jeff > > -- > ** Please note my email address has changed to jeff.cleverley(a)broadcom.com > > Jeff Cleverley > Factory Systems Engineer > 4380 Ziegler Road > Building 1, Dock 1 > Fort Collins, Colorado 80525 > 970-288-4611 > > This electronic communication and the information and any files > transmitted with it, or attached to it, are confidential and are intended > solely for the use of the individual or entity to whom it is addressed and > may contain information that is confidential, legally privileged, protected > by privacy laws, or otherwise restricted from disclosure to anyone else. If > you are not the intended recipient or the person responsible for delivering > the e-mail to the intended recipient, you are hereby notified that any use, > copying, distributing, dissemination, forwarding, printing, or copying of > this e-mail is strictly prohibited. If you received this e-mail in error, > please return the e-mail to the sender, delete it from your computer, and > destroy any printed copy of it. > > > ---------- Forwarded message ---------- > From: Jeff Cleverley via Toasters <toasters(a)teaparty.net> > To: "<Toasters(a)teaparty.net>" <Toasters(a)teaparty.net> > Cc: > Bcc: > Date: Wed, 1 Sep 2021 18:38:25 +0100 > Subject: > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > https://www.teaparty.net/mailman/listinfo/toasters

2 1

Hyper-V file recovery from snapshot
by Jeff Cleverley 01 Sep '21

01 Sep '21

Greetings, I'm trying to figure out how to mount a .vhdx (Server 2012 Hyper-V/Failover Cluster) to be able to view or restore a specific file. I have only found 2 ways to do this so far: 1. Copy the .vhdx from the snapshot to the physical server and mount it. 2. Use Disk manager and mount it read-only remotely from the NetApp. I have found this is only working if the VM was down when the snapshot was taken. Is there a way to get the .vhdx from the snapshot mounted remotely? When I have to copy a 300G .vhdx, it is very slow and it limits the systems with enough free space as targets. I was hoping to use this as opposed to having to apply one of our various traditional backup methods. Thanks, Jeff -- ** Please note my email address has changed to jeff.cleverley(a)broadcom.com Jeff Cleverley Factory Systems Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611 -- This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.

1 0

options for adding a shelf/disks to an AFF-A220
by Rue, Randy 01 Sep '21

01 Sep '21

Hi All, I've cabled up the second external shelf for our AFF-A220 and it sees the disks. Now I'm at a fork in the road. We currently have two local data tiers made up of 24 disks each, one on each node. Best practices at https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-ps… say a disk group of SSDs should be from 20-28 SSDs each. If I go to create a new local tier the default is to create two new tiers, one on each node. That would give me two disks groups of 12, below the best practice. How badly would performance suffer? Any other caveats? Reliability? I could put them all on one disk group, and on one node? Bleah. I could add half of them to each existing tier/disk group and exceed the best practice by eight SSDs. I believe I've seen discussions (get it?) claiming that top limit is flexible with SSDs, was it here? But when I add another shelf I'll have the same problem. Seems like the clearest path forward for consistency and future expansions is to add two tiers with small disk groups. So, can anyone guess if I'll have a significant performance impact? Any other caveats? Grateful for any guidance, Randy in Seattle

4 5

Bad Labels. . .
by Carl Howell 20 Aug '21

20 Aug '21

I have a couple of shelves of 900GB SAS that were just sanitized from a now retired 7-Mode cluster. I'd like to use these drives as spares in a C-Mode cluster, but they come up as "bad label." I've looked on the NOW/MySupport site, but wanted to check here before I attempt to do anything. . . Thanks, --Carl

2 1

wedged updates to changes to users' group memberships
by Randy Rue 19 Aug '21

19 Aug '21

Hello All, We recently cut over from a FAS to an AFF running 9.8P1. Serving CIFS and NFSv3 with authentication tied to openLDAP. When we change group memberships in LDAP the filer fails to see the change in group memberships for some varying amount of time. We had been able to use the flush command to force the filer to update it's user/group membership lists. This was changed in our current version, 9.8P1, and we have switched to using the replacement command. This used to work: set diag; diag nblade credentials flush -node $NODE -vserver $VSERVER -unix-user-name $USER We think this should be the new command but does not seem to perform as expected: set -privilege advanced -confirmations off; credentials flush -node $NODE -vserver $VSERVER -unix-user-name $USER The new flush command does not seem to perform with any reliability. It's worth noting that we have many groups so have set the group limit to 512 as described here: https://library.netapp.com/ecmdocs/ECMP1610208/html/GUID-1D3D018C-DF37-4C87… As of this writing, we have 2 users whose group memberships were updated over 24 hours ago and they are still unable to access the relevant files over CIFS. We were able to demonstrate that the user can in fact access those files over NFS using the `newgrp` command to select the new group and access the files however after dropping the `newgrp` identity, we were once again denied access to the location. Are we missing something? Grateful for any help... Randy Rue in Seattle

3 4

← Newer
1
2
3
4
5
6
7
8
9
...
1352
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters