toasters

toasters@lists.teaparty.net

1 participants
13528 discussions

NFS access to NTFS in 8.3?
by Rue, Randy 22 Sep '15

22 Sep '15

Guys, We've just migrated our 7=mode "home drives" vFiler using 7MTT to a new 8.3 cluster and so far the process has been less than blissful. One immediate hurdle is each division in our organization has mostly CIFS/Windows users and some NFS/Linux users, with some overlap between them (users that need NFS access to NTFS data and vice versa). This means each division has an NTFS volume, with a UNIX qtree within it. And both areas are served via both CIFS and NFS. CIFS access to both file systems seems to be fine. NFS access to the UNIX qtrees is fine. Where we're flailing is getting NFS access to the NTFS volumes. The exports mount just fine (LDAP is set up for the vserver, and client machines are in a nisNetgroup object in our AD). But NFS users connecting to their NTFS home folders get "permission denied," they can't even cd into them. Done some digging with and without NA support with little luck so far. User mapping is correctly configured so that unix user names are mapping to AD names. But the filer isn't getting as far as mapping an incoming NFS connections UID to a user name. NA support seems to think we need to configure an LDAP client for this. But my recollection of setting up our 7-mode system (five years ago) was that none of this was necessary, I think that joining the vfiler's CIFS server to our AD was enough for this to work (it is for Isilon, anyway). Now I'm on the phone with support (literally) while we flail through a bunch of old KB's saying we need to modify our AD schema (vanilla 2K8 RFC-2307) or install MS SFU on our DC's (never needed to before) or create a custom schema for the vserver to accept our obviously exotic RFC-2307. And they're not exactly clear on how we do that. To add to the fun, we're finding that many/most changes to the existing LDAP client settings breaks our so-far-working-OK Export Policies/Rules controlling access to the NFS exports. So. Has anyone set up a vserver with NFS connections to an NTFS volume? How do you map connections? Hope to hear from you very soon... Randy in Seattle

2 1

ServiceNow Discovery of ONTAP Devices
by Philbert Rupkins 18 Sep '15

18 Sep '15

Toasters, Has anybody used ServiceNow to discover NetApp arrays running Data ONTAP 8.1 7-Mode? My understanding is the Data ONTAP SMI-S Provider is required. We setup the Linux based Data ONTAP SMI-S Provider v5.1.2, added the array as a managed host and added an SMI-S agent credential for ServiceNow. ServiceNow successfully authenticates to the SMI-S agent and completes the entire CIM probe but spits out a warning on one of the CIM queries. Some information is correctly classified and displayed in ServiceNow but, overall, the array information provided by the CIM probe seems to be lacking. Manually executing "smis class root/ontap niall" on the SMI-S agent machine seems to return just about every attribute of the managed NetApp array. This tells me that the SMI-S agent to array communication is running just fine. My guess is the problem is with the CIM query ServiceNow is running against the SMI-S agent. Unfortunately, my visibility into ServiceNow is restricted so I can't confirm. Anybody using ServiceNow to discover arrays running Data ONTAP? Are you seeing what you believe to be complete information? Did you have to do a lot of tweaking to the default CIM probe? -Phil

1 0

CIFS home directory permissions
by Eino Tuominen 18 Sep '15

18 Sep '15

Hello, I'm trying to debug a weird phenomenon here. We see user home directories permissions change "automagically" so that there is full access granted to the user himself and the same access also to ther SYSTEM account. I'm pretty sure this has started after we migrated our home directories from 7-mode to Clustered OnTAP (8.2.3P3 at the moment). Does anybody have a clue what's going on? -- Eino Tuominen

2 1

Anyone able to install OnCommand Performance Manager on CentOS 6 machine?
by Scott Classen 18 Sep '15

18 Sep '15

Hello, I'm trying to install OnCommand® Performance Manager on a freshly installed CentOS 6.7 machine. Has anyone done this? or is RHEL the only linux distro supported? snippet from yum install *.rpm command: Unsupported operating system version detected. This installation requires Red Hat Enterprise Linux 6.5 or later. The installation will terminate now. error: %pre(ocie-serverbase-1.3.0-2015.06.119.x86_64) scriptlet failed, exit status 255 Error in PREIN scriptlet in rpm package ocie-serverbase-1.3.0-2015.06.119.x86_64 error: install: %pre scriptlet failed (2), skipping ocie-serverbase-1.3.0-2015.06.119 Verifying : ocie-serverbase-1.3.0-2015.06.119.x86_64 1/1 Failed: ocie-serverbase.x86_64 0:1.3.0-2015.06.119 Thanks, Scott

5 7

Cifs administrative access push to the entire qtree
by Jeff Cleverley 18 Sep '15

18 Sep '15

Greetings, I inherited a group of filer that are heavily cifs. There are multiple clusters of different hardware and different OS levels. All are 7-mode. What the managers found is that people have changed directory permissions and excluded administrators or people with full control. When a problem pops up they have to find one of the directory owners to get added in order to fix an issue. We don't really want to push the permissions to all sub-directories in an overwrite mode because we could break tool access, or grant access people may not have had before, etc. Is there a way to add administrators to a tree from the NetApp or a way to do this that doesn't remove previous access control? The managers already have full control at the share level. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611

3 4

DFM and SnapVault
by Eric Peng 15 Sep '15

15 Sep '15

I am hard pressed to find good documentation on this.. Has anyone had success in setting up SnapVault relationships in DFM so they can be more easily managed and alerted on? Found some forum postings that seemed to suggest that SnapVault relationships could be created in OnCommand System Manager or CLI and then "imported" into DFM, but so far have not had any luck in getting DFM to detect these so called "external relationships".. =( Am using the IBM version of DFM (version 5.1) by the way. Any helpful links or suggestions on this would be appreciated. Thanks, Eric Peng | Systems Administrator Esri | 380 New York St. | Redlands, CA 92373 | USA T 909 793 2853 x3567 | M 909 367 1691 epeng(a)esri.com<mailto:epeng@esri.com> | esri.com<http://esri.com/>

1 0

Qtree exporting
by Fred Grieco 02 Sep '15

02 Sep '15

I'm transitioning a volume with a qtree in it from 7 Mode to c mode. I have the volume replicated and the cluster sees the qtree. Is there a way to nfs export that /vol/qtree qtree as "/qtree?" I don't see any way to actually mount a qtree into the namespace. I can make an export policy on a qtree, but that just creates alternate permissions. You can do this on the CIFS side... Looks like I can share anything as anything. This is 8.2.3 cmode ontap. Tia, Fred

2 1

DFS referrals and 7TT?
by Basil 01 Sep '15

01 Sep '15

I just discovered automatic node referrals <https://library.netapp.com/ecmdocs/ECMP1366834/html/GUID-0A5772A4-A6D7-4A00…> and I was wondering: could this be used to migrate CIFS workloads from 7-mode to CDOT in a more granular way than the current 7TT? Right now, if I transition a subproject in 7TT, it finishes by removing the IP address from the 7-mode box. This is sensible, because if it didn't, there would be a collision. This is a problem for me because I am unlikely to be able to find a common outage window for the hundreds of applications that use this IP address for file repositories. Right now, my plan is to schedule an omnibus outage window, and anyone who can't live with that will be welcome to migrate manually ahead of time. Based on my understanding of how automatic node referrals use DFS referrals, shouldn't it be possible to use this within 7TT? Basically, I am imagining a scenario where a share migration to a CDOT SVM would look like: -snapmirror volume to CDOT -disconnect clients -final sync -restart share on 7-mode, but now all SMB session requests get DFS redirected to the LIF on CDOT When all data on 7-mode is migrated, the IP address would be added to the CDOT SVM and the redirection could be stopped (or turned into an automatic node referral setup). Basil

1 0

cifs_other_ops and cifs_ops
by Rhodes, Richard L. 01 Sep '15

01 Sep '15

I'm looking at the Performance Manager graph for a volume that is a CIFS share. It graph has 4 stats: cifs_read_ops, cifs_write_ops, cifs_other_ops, cifs_ops. CIfs_reads_ops and Cifs_write_ops are VERY few totaling only 0-30/sec, but mostly at 0. Cifs_other_ops is a constant 130/s to 180/s, but NEVER dropping below a floor of 130/s. Cifs_ops is similar to Cifs_other_ops, but somewhat higher. The help metrics don't exactly help explain these. Q) What is cifs_other_ops and cifs_ops? Q) What would a CIFS client be doing to cause few reads/writes, but lots of cifs_other_ops and cifs_ops? For example, at one point I have these values: cifs_read_ops 3 cifs_write_ops 28 cifs_other_ops 135 cifs_ops 160 Thanks Rick ----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.

3 2

RE: Questions about Cert CAs with software updates in CDOT
by Vanderyt, Jeff 28 Aug '15

28 Aug '15

We use http to do the software loads. We use one of OnCommand servers we have, which have self-signed certs. We temporarily disable https, and pull the code onto the controllers: system node image get–node *–package http://x.x.x.x:8080/ontap/image_name This has worked for through going from 8.1 and up to 8.2.3P3. ********************************************************** Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters