toasters

toasters@lists.teaparty.net

13520 discussions

Question about mirroring
by Holland, William L 27 Jun '03

27 Jun '03

Scenario: FilerA is installed at SiteA mirroring to FilerB at SiteB. Both are in Windows networks and both are using CIFS. SiteA is in NTDom1 and SiteB is in NTDom2. NTDom1 and NTDom2 are Windows NT domains, Active Directory is not implemented, and their is no trust relationship between the two NT Domains. FilerA has been using global groups and users from NTDom1 on its ACL's. SiteA along with FilerA ceases to exist for whatever reason. SiteB breaks the mirror and brings the volumes mirrored from FilerA online. Is it possible to access the files on those shares since NTDom1 no longer exists?

2 1

RE: Some security questions/wishes
by Ehrhart, Rick 27 Jun '03

27 Jun '03

> -----Original Message----- > From: Holland, William L [mailto:hollandwl@state.gov] > Sent: Tuesday, June 24, 2003 7:26 AM > To: 'toasters(a)mathworks.com' > Subject: Some security questions/wishes > > > Setting up two new filers, F810 and FAS940, in a new > installation. ONTAP > 6.4.1 > > 1. Is there a way that I can permit certain users to view filer > configurations and statistics without their having the root > password or > being given full adminstrative access? No, not at this time. > 2. Is there a way to force logons to the filer (be it > console, SSL enabled > FilerView) to use Windows groups rather than having to hand > out the root password? No, not at this time. > 3. Is there a way to allow certain people to perform manual snapshots > without their being given full admin access? Something akin > to a Backup Operator. No, not at this time. > 4. Along the same lines of 3 above is it possible to permit > those same > people to restore snapshots on particular volumes without > their being able to access other volumes? No, not at this time. The above issues are being lookeded for future releases of ONTAP. Please see burts 42514, 57701, and 78951 for details. - Rick - ------------------------------------------------------------------- Rick Ehrhart Network Appliance

2 1

Question about Multistore
by Holland, William L 27 Jun '03

27 Jun '03

Scenario: (ONTAP 6.4.1) FilerA at SiteA in NTDomA has some standard volumes being accessed via UNC. Licensed protocols are CIFS, iSCSI, and VLD. It also has a couple of volumes with iSCSI LUN's and a couple more with VLD's. These volumes are being mirrored to FilerB at SiteB in NTDomB. However, there is an NTDomA WinNT BDC at SiteB in the same IP network as FilerB. FilerB has licensed Multistore and has created VFilerA and is mirroring the volumes on FilerA onto VFilerA. SiteA ceases to exist. The mirrors are broken and the volumes on VFilerA are brought online. Servers which have been prestaged at SiteB are brought online in NTDomA. Question: Will the servers be able to acces all of the volumes? I know the standard volumes using UNC will. Will the iSCSI and VLD ones be accessible (assuming SnapDrive is installed on servers wishing to use VLD's and iSCSI initiator is installed on ones wishing to use iSCSI). Thanks in advance.

1 0

RE: Question about mirroring
by Holland, William L 27 Jun '03

27 Jun '03

An idea I came up with and am currently testing is: Connect to FilerA via a Win2K management console and add local groups. Then add users from NTDom1 to the FilerA groups. These groups would, of course, have to be documented so that they can be created on FilerB in NTDom2 should the need ever arise. The groups on FilerB would then be populated with users from NTDom2. This seems like it would preserve the overall security structure of the volumes being mirrored and not require any significant reconfiguration on NTDom2. -----Original Message----- From: Manish Anand Kinnerkar [mailto:Mak@wipro.co.in] Sent: Friday, June 27, 2003 2:48 AM To: toasters(a)mathworks.com Subject: RE: Question about mirroring This would be like a practical Disaster recovery scenario, I believe FilerB will have all shares of FilerA intact within itslef. After we make the mirror copy read write , the only problem we face now is that the acl's on the shares are useless , as the uids/domain do not exist.The authentication for this domain ceases to exist and thereby access is not possible at share level. FilerB cannot be a member of multiple domains at the same time, and will continue to reside in NTDom2 domain. Now it will be upto the administrator to manage these shares . Most logical thing to do would be to reassign them to new userids ( corresponding to old users of NTDom1) in current domain NTDom2 as NTDom1 has ceased to exist. Or create the NTDom1 domain all over again , but reassign share to the recreated userids. Experts on Windows Domain architecuture please comment on the same, coz frankly i'm not an expert in Windows :) regards, Mak. -----Original Message----- From: Holland, William L [mailto:hollandwl@state.gov] Sent: Thu 6/26/2003 6:24 PM To: 'toasters(a)mathworks.com' Cc: Subject: Question about mirroring Scenario: FilerA is installed at SiteA mirroring to FilerB at SiteB. Both are in Windows networks and both are using CIFS. SiteA is in NTDom1 and SiteB is in NTDom2. NTDom1 and NTDom2 are Windows NT domains, Active Directory is not implemented, and their is no trust relationship between the two NT Domains. FilerA has been using global groups and users from NTDom1 on its ACL's. SiteA along with FilerA ceases to exist for whatever reason. SiteB breaks the mirror and brings the volumes mirrored from FilerA online. Is it possible to access the files on those shares since NTDom1 no longer exists?

1 0

limitation path length
by Phil Hill 27 Jun '03

27 Jun '03

Hi all, there is a path length limitation of 256 characters for cifs. ok, I know to bypass it with multiple shares or the subst- command. Question: Is there a theoretical or/and a practical limitation of the path length on the part of NetApp WAFL? I can not find anything about the path length in NOW, just some hints to be careful with a "very,very" deep path. I also know, that I can increase the maxdirsize to 64MB Default is 10MB ca. 300.000 files. I am talking about a F810 with 6.2.1. I could imagine there is a limitation by the RAM. thanks in advance Phil

4 3

RE: Question about mirroring
by Manish Anand Kinnerkar 27 Jun '03

27 Jun '03

This would be like a practical Disaster recovery scenario, I believe FilerB will have all shares of FilerA intact within itslef. After we make the mirror copy read write , the only problem we face now is that the acl's on the shares are useless , as the uids/domain do not exist.The authentication for this domain ceases to exist and thereby access is not possible at share level. FilerB cannot be a member of multiple domains at the same time, and will continue to reside in NTDom2 domain. Now it will be upto the administrator to manage these shares . Most logical thing to do would be to reassign them to new userids ( corresponding to old users of NTDom1) in current domain NTDom2 as NTDom1 has ceased to exist. Or create the NTDom1 domain all over again , but reassign share to the recreated userids. Experts on Windows Domain architecuture please comment on the same, coz frankly i'm not an expert in Windows :) regards, Mak. -----Original Message----- From: Holland, William L [mailto:hollandwl@state.gov] Sent: Thu 6/26/2003 6:24 PM To: 'toasters(a)mathworks.com' Cc: Subject: Question about mirroring Scenario: FilerA is installed at SiteA mirroring to FilerB at SiteB. Both are in Windows networks and both are using CIFS. SiteA is in NTDom1 and SiteB is in NTDom2. NTDom1 and NTDom2 are Windows NT domains, Active Directory is not implemented, and their is no trust relationship between the two NT Domains. FilerA has been using global groups and users from NTDom1 on its ACL's. SiteA along with FilerA ceases to exist for whatever reason. SiteB breaks the mirror and brings the volumes mirrored from FilerA online. Is it possible to access the files on those shares since NTDom1 no longer exists? DISCLAIMER: Information contained and transmitted by this E-MAIL is proprietary to Wipro Limited and is intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If this is a forwarded message, the content of this E-MAIL may not have been sent with the authority of the Company. If you are not the intended recipient, an agent of the intended recipient or a person responsible for delivering the information to the named recipient, you are notified that any use, distribution, transmission, printing, copying or dissemination of this information in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at mailadmin(a)wipro.co.in

1 0

RE: Quantum ATL P4000
by John Clear 26 Jun '03

26 Jun '03

I have a dual P4000 NDMP/SCSI hybrid with Legato Networker on a Solaris server. The GigE NDMP drives appear as remote devices in Networker, I assume Netbackup has something similiar. In Networker, you just add a device as 'rd=drive-hostname:/dev/nst0'. Jumbo frames are a must have. We've had our unit for about a year, but just upgraded the switch to one that supports jumbo frames. Backup speed went from 11MB/s without jumbo frames to 18MB/s with jumbo frames. We've been generally happy with it. All enterprise backup sw/hw solutions suck, and this one doesn't suck to badly. John

1 0

Quantum ATL P4000
by Holland, William L 26 Jun '03

26 Jun '03

Anyone familiar with this tape library in a GbE/iSCSI environment? I'm particularly interested in knowing how the GbE interfaces are added and managed. Also how well this unit works using Veritas NetBackup on a Win2K server as the master controller and the NDMP option on the Network Appliance filer.

1 0

DNS and CIFS win2k ?
by Frank Bonnet 26 Jun '03

26 Jun '03

Hi Anyone knows what to add into my DNS database file to let our filer understand what I want to do ? I use BIND 9.2.2 on a UNIX box, not M$ DNS here is the error message during cifs setup Do you want to modify this name? [no]: CIFS supports three types of user authentication: 1. Windows Domain authentication. 2. Windows Workgroup authentication using the filer's user accounts. 3. /etc/passwd and/or NIS/LDAP based authentication. What type of authentication will this filer use? [1]: 1 The filer will use Windows Domain authentication. Enter the Windows Domain for the filer []:PLONK This seems to be a Windows 2000 domain, but CIFS cannot locate the '_ldap' services for PLONK in DNS. CIFS cannot install as a native Windows 2000 server in this domain until this situation is rectified. If you continue with setup, this filer will attempt to join PLONK as an NT4 server. Do you wish to continue and join PLONK in NT4 mode? [yes]: no CIFS local server is shutting down... CIFS local server has shut down... Thanks -- Frank Bonnet Responsable Reseau et Sytemes UNIX Groupe ESIEE Paris

2 1

ONTAP Simulator available on NOW
by Dave Hitz 26 Jun '03

26 Jun '03

Some of you may know that NetApp Engineering uses an ONTAP Simulator as part of our development process. (The simulator runs all of ONTAP as a process under Linux. At a very low level, we spoof the disk drivers, so that disks are simulated by local files. We spoof the network drivers by putting the Linux Ethernet card into promiscuous mode and creating a fake MAC address associated with the simulator.) Enough technical details. The point of this message is that we are now making the simulator available to customers so that they can experiment with ONTAP features and commands without putting production systems at risk. I have had many customers tell me that they wished they had a way to play with new releases and new features, but they didn't have a safe place to do it. Just to be clear: This is not production software. It's ONTAP running on top of Linux, so don't use it for performance testing. We have no formal support program. Don't call NetApp support. This is an "as is" tool. (Some restrictions may apply. :-) On the other hand, I think you will find the simulator to be very useful for experimenting with ONTAP. Hundreds of NetApp engineers use it every day, and we have been using the simulator for over a year in NetApp training classes. Not only can you experiment with the features of a single filer, but you can run multiple simulators and experiment with features like SnapMirror, SnapVault, and Cluster Fail Over. It doesn't support Fibre Channel, because that would take more hardware, but it does support iSCSI and all of the other TCP/IP protocols, including NFS, CIFS, HTTP and FTP, as well as network management protocols like SNMP and NDMP. Here are some details: You can download the simulator from NOW at <http://now.netapp.com/NOW/cgi-bin/simulator>. We have created a category in the NOW community forums called "ONTAP Simulator" that can be accessed at <http://forums.netapp.com/showcategory.asp?cid=172>. And finally, we have created a majordomo mailing list that people can join at xdl-simulator(a)netapp.com. (You know the drill. To join send to majordomo(a)netapp.com, not to the simulator list itself.) And of course, feel free to talk about it here on toasters. As I said above, the simulator is NOT formally supported, but some volunteers at NetApp have agreed to informally answer questions to the xdl-simulator mailing list. Have fun! Dave Hitz Founder and EVP Engineering, Network Appliance

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters