toasters

toasters@lists.teaparty.net

13529 discussions

RE: Questions about Cert CAs with software updates in CDOT
by Vanderyt, Jeff 28 Aug '15

28 Aug '15

We use http to do the software loads. We use one of OnCommand servers we have, which have self-signed certs. We temporarily disable https, and pull the code onto the controllers: system node image get–node *–package http://x.x.x.x:8080/ontap/image_name This has worked for through going from 8.1 and up to 8.2.3P3. ********************************************************** Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues

2 1

Questions about Cert CAs with software updates in CDOT
by Tony Bar 28 Aug '15

28 Aug '15

Toasters - This is a new one to me, but I'm sure my customer here isn't the only one out there who issues self-signed certs with custom names. Has anyone else run into this before and if so, what did you have to do to resolve? We've tried doing a symlink from her cert to the expected name/path but that doesn't help. Is there perhaps a hidden option like "-k -O" in Unix application "curl" or an alternate method for downloading the updates? Output of what I'm seeing below, any help would be appreciated: <clustername>::> system node image update -node <cluster>-01 -package https://<webhost>/util/83P2_q_image.tgz<https://monitor1.sjc1.prod.ce/util/83P2_q_image.tgz> -replace-package true Install Failed. Failed to download package from https://<webhost>/util/83P2_q_image.tgz<https://monitor1.sjc1.prod.ce/util/83P2_q_image.tgz>. Error: Problem with the SSL CA cert (path? access rights?) : error setting certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none Error: command failed: Install Failed. Failed to download package from https://<webhost>/util/83P2_q_image.tgz<https://monitor1.sjc1.prod.ce/util/83P2_q_image.tgz>. Error: Problem with the SSL CA cert (path? access rights?) : error setting certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none We do not have access to FTP or TFTP options, the customer is a financial services company so their network is pretty locked down without many (if any) options to work with. Thanks again! Anthony Bar tbar(a)berkcom.com<mailto:tbar@berkcom.com> (650) 207-5368 www.berkcom.com<http://www.berkcom.com/>

3 3

cDOT: CN1610 interconnehct switch monitoring
by Momonth 28 Aug '15

28 Aug '15

Hi, I wonder what you guys employ for cDOT interconnect switches monitoring? I assume SNMP is the way to go, maybe you can share some scripts with this community? Cheers, Vladimir

1 0

Deswizzle
by Mike Michalakis 25 Aug '15

25 Aug '15

Hi I have a storage system that is under stress, and as luck has it I need to added more stress by loading it with a large cifs related volume, this is a transition from a 7-Mode ontap system Every time we complete the transition, the system spikes disks 100%, cpu 100%, etc. On the perfstat we see deswizzling running. This is a normal operation every time a snapmirror break-off occurs, that is the deswizzle part of the equation.. When we take this volume offline, operations go back to normal. My question, what is the result of disabling deswizzle is the short term, do I look functionality, e.g. vol move? To turn off deswizzle: Nodeshell*> options wafl.deswizzle.enable off To turn on deswizzle: Nodeshell*> options wafl.deswizzle.enable on Backround: FAS3210, C-Dot 8.2.3, SAS disks

9 18

RBAC - Capabilities
by Philbert Rupkins 25 Aug '15

25 Aug '15

Hello Toasters, The DATA ONTAP documentation notes the following in regard to "cli" related capabilities: ---begin doc----- cli-* grants the specified role the capability to execute all supported CLI commands. cli- cmd* grants the specified role the capability to execute all commands associated with the CLI command cmd. For example, the following command grants the specified role the capability to execute all vol commands: useradmin role modify status_gatherer -a cli-vol* ------end doc---- Based on this info, I know that granting cli-vol* grant the role the capability to execute all commands associated with the CLI command vol. I found another KB article that instructs me to grant the cli-vol (no asterisk) capability to a role. Is there a difference between "cli-vol" and "cli-vol*" ? Thanks, Phil

1 0

Checksums for array LUNs
by Basil 23 Aug '15

23 Aug '15

Does anyone have any advice regarding checksums for array LUNs? My understanding is that AZCS saves you about 12% capacity but requires more filer CPU utilization for reads. What kind of impact does it have?

2 2

OCUM 6.2
by Sayla, Mustafa 18 Aug '15

18 Aug '15

I recently installed OCUM 6.2 and performance manager appliances in our environment. After few days I have started receiving the following messages from both our production and DR cluster every 15 minutes. I have checked the cluster but I don't see anything wrong with it. Any ideas? "Trigger Condition - The cluster (cluster name and IP) is not reachable. Cluster (cluster name) performance events have stopped being sent by Performance Manager server (oncommand server name) This condition could be caused by a communication issue between Unified Manager and Performance Manager, or between Performance Manager and cluster (cluster name)" Mustafa Sayla Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

4 12

What vserver group-mapping in cDOT 8.3 does?
by Borzenkov, Andrei 07 Aug '15

07 Aug '15

All documents I can find (including multi-protocol FAQ) say that group mapping is not supported. Then what "vserver group-mapping" does and when these mappings are applied? TIA -andrei

2 1

FAS2554 \ ADP
by Mike Gossett 06 Aug '15

06 Aug '15

Hi all, First, things for a great forum. I learn a lot from reading these posts, and I appreciate everyone sharing their experiences. I am in the middle of a transition for a client whom had 2 2040 systems (HA pair at primary site; single controller at DR) to an 8020 c-mode system at HQ, and a FAS2554 at DR. We are using hybrid sata\flash pool at the primary, and will have 3 total shelves (including the onboard shelf in the 2554) of 2TB sata out of the gate. Typically, I am deploying smaller systems with 24 disks where the ADP is highly desirable from a performance and capacity standpoint. However, in this instance, I am leaning towards converting the system over to using dedicated cluster disks, such that the balance of the disks onboard the FAS2554 are the same size as the other two shelves, so I can have 1-2 large aggregates, and not be limited by the boundary of the artificially smaller shared ADP disks. So, I really have two questions. First, what have your experiences been? Would you agree with my gut feeling that I am better off having the dedicated cluster disks? Capacity in this environment is growing somewhat rapidly, and I would expect that in 2 years we will be adding at least one more shelf to the mix. Second, assuming you feel that moving off ADP is the right approach, can anyone point me in the direction of an article or high level steps in terms of how to accomplish this? I'm fine with disruptive or destructive activities as the system is not yet in DR (though I've completed the transition at HQ to the new cluster and decommed the legacy 7m system, and as such am anxious to resume replication). Thanks in advance, Mike

1 0

Re: CIFS on Mac
by Ryan Pugatch 06 Aug '15

06 Aug '15

Just wanted to follow up - does anyone have shares with significant amounts of data and experience slow directory listings when accessing from Mac via CIFS? Thanks, Ryan On Tue, Aug 4, 2015, at 05:24 PM, Ryan Pugatch wrote: > Actually, to Andre's point, spotlight doesn't work on CIFS, only AFP. > > In talking with one of our desktop team folks, the specific issue > isn't due to indexing (though that is an issue, not having it..) but > specifically getting directory listings on the CIFS share from OS X is > very slow. Windows users do not have that problem. > > > On Tue, Aug 4, 2015, at 05:22 PM, Tony Bar wrote: >> Ryan – >> >> You can disable spotlight on a per-filesystem basis, see the bottom >> of the link for details. >> >> *Anthony Bar* >> 650.207.5368 >> tbar(a)berkcom.com >> *Berkeley Communications* >> www.berkcom.com[1] >> >> *From:* Ryan Pugatch [mailto:rpug@lp0.org] >> >> *Sent:* Tuesday, August 4, 2015 2:19 PM *To:* Tony Bar *Cc:* >> Toasters(a)teaparty.net *Subject:* Re: CIFS on Mac >> >> I don't think we would want to disable spotlight across the board. >> It is useful in some cases. >> >> Thanks, >> Ryan >> >> >> On Tue, Aug 4, 2015, at 04:03 PM, Tony Bar wrote: >>> Ryan - >>> >>> This may help: >>> >>> http://recomhub.com/blog/how-to-disable-or-enable-spotlight-in-mac-os-x-yos… >>> >>> Anthony Bar >>> 650.207.5368 >>> >>> tbar(a)berkcom.com Berkeley Communications >>> >>> www.berkcom.com[2] >>> >>> On Aug 4, 2015, at 1:01 PM, Ryan Pugatch <rpug(a)lp0.org> wrote: >>> >>>> Hi all, >>>> >>>> Performance when accessing netapp CIFS shares from a Mac is >>>> frustrating, >>>> and in some cases downright unusable. >>>> >>>> It seems mostly related to OS X's desire to index everything with >>>> Spotlight. Directory listings are slow, and if you're any way >>>> distant >>>> from the netapp, you'll find latency makes it completely unusable. >>>> >>>> Have any of you found how to deal with this? >>>> >>>> Thanks, >>>> Ryan >>>> _______________________________________________ >>>> Toasters mailing list >>>> Toasters(a)teaparty.net >>>> http://www.teaparty.net/mailman/listinfo/toasters > > _________________________________________________ > Toasters mailing list Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters Links: 1. http://www.berkcom.com/ 2. http://www.berkcom.com/

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters