toasters

toasters@lists.teaparty.net

2 participants
13520 discussions

DFM LDAP auth/Linux
by Edward Rolison 14 Apr '15

14 Apr '15

I've been setting up a new instance of DFM on Linux, and have started configuring up DFM. I've finally figured out why it's not been working though - it's because the 'CN' for all our accounts contains a bracket. CN=Full Name (unixID) This leaves me in a bit of an irritating position. I can't change my account config across my active directory - at least not very easily. Can I do 'LDAP auth' via the local system somehow? I can log in to my DFM box as me, and when I add my user... it recognises the account. But it doesn't seem to allow a password auth (not unless I set a local account, which is a route that'll mean having to wrangle with security). Anyone else run into this problem or got a line of investigation? (I have a ticket open, but this feels like the sort of thing that's irritatingly difficult to 'fix' on the fly).

3 4

gfigueroa@berkcom.com
by Guadalupe Figueroa 10 Apr '15

10 Apr '15

gfigueroa(a)berkcom.com

1 0

FAS8040 network configuration in CDOT
by Sayla, Mustafa 09 Apr '15

09 Apr '15

We are looking to buy new FAS8040 and configure it with CDOT. I am looking for network recommendation with Cisco 6509 VSS. 8040 has four 10G ports per controller and I want to use all four ports to create an interface group with two VLAN, using VLAN tagging. I want 2 ports to go to one VSS switch and 2 ports to go to other VSS switch so I have switch redundancy also. I am not sure if it is doable since I am going to two different switches. Any recommendation is appreciated. Mustafa Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

5 4

Snapvault with system shutdown and rename
by Jeff Cleverley 08 Apr '15

08 Apr '15

Greetings, We're going to be splitting data from a 7-mode cluster (7.3.7). Some data is being SM to an 8.0.2 7-mode cluster with a new name. The remaining data and the original cluster will be moved to a new location and offline for a couple of days. My questions revolve around the snapvault snapshots and relationships. A couple of years ago we replaced the cluster heads and the backup relationships broke because schedule created a new snapshot which did not match the one the secondary was looking for. We had to re-baseline a lot of data. 1. Do I need to disable the SV schedules on both primary and secondary volumes for the cluster that will be offline for a couple of days, or will it be fine and pick up where it left off when it comes back up? 2. I know I'll need to modify the existing SV relationship with the data migrating to the new cluster. Since there are no SV schedules in place on the new cluster, there shouldn't be any issues with a new SV snapshot being created before I do a snapvault start -S with the new relationship to update it. It's 1am so I'm sure I may be missing something and wanted to check. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 1

DFM misbehaving - 'going sluggish' about 10m after restart
by Edward Rolison 02 Apr '15

02 Apr '15

We've a DFM (an older version) that's misbehaving. At startup we get 'Service did not reach 'started' state due to timeout'. It does actually start and we can use the web interface... but after a few minutes (10ish) it starts to get very sluggish. restarting clears it up, but only (very) temporarily. I've turned off PerfAdvisor, because I spotted some substantially large logs. Is anyone able to offer me suggestions of where else to look to troubleshoot? It looks like dbsrv10.exe is consuming all of a processor, trying to do 'something' but I have no idea what that might be. Perhaps a post restart 'tidy up'? I suspect this might be an 'open a case' situation, but I thought I'd seek some wisdom here too. Thanks, Ed.

4 4

Snapmirror relationships
by Jeff Cleverley 02 Apr '15

02 Apr '15

Greetings, We have to split a cluster and one shelf will go to one site, and the rest go to another site. The single shelf (DS4243, 2 TB SATA) comprising 2 aggregates and 11 volumes will get moved to a different NetApp. The shelf will end up on a system with new names and no aliases can be used. There are some variable moving parts so I need a sanity check. FilerA 7.3.7 - owner of the one shelf FilerB 8.1.2P4 - soon to be owner of the one shelf I've setup a snapmirror with a daily cron update that goes from FilerA to FilerB. This seems OK. If we can get the shelf owners to split the same day the other moves, I'm just going to move the shelf, change ownership, import the aggregate/volumes, create cifs shares, and update the snapvault relationship. If they insist on moving before that, I have to break the mirrors after a final sync, rename the current snapmirror destination volumes, update snapvault relationships and create cifs shares. This seems OK. Now the questions :-) 1. Are there any issues associated with this process with the OS differences or snapmirror not keeping filesystem security type, share, permissions, etc? 2. If I have to split the shelf later, I want to add it to FilerB and make that shelf the production shelf. This is a short term solution and the heads and shelves are not supported. Is there a graceful way to sync back to the DS4243 shelf? I don't want to disrupt the CIFS users very much. 3. Any other glaring issues that stand out? Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

6 7

cDOT security best practise reference?
by Martin 01 Apr '15

01 Apr '15

Hi, I've recently written a Netapp security policy for 7-mode Ontap. I used the TRs for reference: Data ONTAP Security Guidance - TR-3950 (November 2011) PCI-DSS Version 2.0 and Data ONTAP 8.1 TR-3996 (August 2012) Both of these are fairly old and not specific to cDOT. I've seen TR-4191 but that is specific to Windows File services: TR-4191 - Best Practices Guide for Clustered Data ONTAP 8.2.x Windows File Services Does anyone know of any best practise documents for cDOT whether Netapp or otherwise? Thanks Martin -- View this message in context: http://network-appliance-toasters.10978.n7.nabble.com/cDOT-security-best-pr… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

9 13

snapdirve and cluster OS...how to connect to storage system
by Iluhes 30 Mar '15

30 Mar '15

I have FC SVM and trying to setup a snapdrive and not able to do it security login create -username snapdrive -application ontapi -authmethod password -role vsadmin -vserver san1 network interface create -vserver san1 -lif san1-lif -firewall-policy mgmt -address 10.10.10.10 -netmask 255.255.255.0 -role data -data-protocol none -home-node NETAPP1 -home-port e0j snapdrive config set snapdrive san1 Password for snapdrive: Retype password: 0003-400 Admin error: Aggregate not assigned for the storage system: san1

2 4

RE: Toasters Digest, Vol 44, Issue 34
by Woods, Bill 30 Mar '15

30 Mar '15

The shelves/disk must be unowned from the original filer and owned by the new filer when you are moving from one filer to another. Regards, Bill -----Original Message----- From: toasters-bounces(a)teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of toasters-request(a)teaparty.net Sent: Friday, March 27, 2015 11:04 PM To: toasters(a)teaparty.net Subject: Toasters Digest, Vol 44, Issue 34 Send Toasters mailing list submissions to toasters(a)teaparty.net To subscribe or unsubscribe via the World Wide Web, visit http://www.teaparty.net/mailman/listinfo/toasters or, via email, send a message with subject or body 'help' to toasters-request(a)teaparty.net You can reach the person managing the list at toasters-owner(a)teaparty.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Toasters digest..." Today's Topics: 1. Re: Snapmirror relationships (Jeff Cleverley) 2. RE: Snapmirror relationships (Gelb, Scott) ---------------------------------------------------------------------- Message: 1 Date: Fri, 27 Mar 2015 16:05:07 -0600 From: Jeff Cleverley <jeff.cleverley(a)avagotech.com> To: "Parisi, Justin" <Justin.Parisi(a)netapp.com> Cc: "<Toasters(a)teaparty.net>" <Toasters(a)teaparty.net> Subject: Re: Snapmirror relationships Message-ID: <CAANBop0oKE6+mA4R81jMVbD1iVZDkjA2uE9Wrf8Eb+AixtvDeQ(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Justin and Steve, Thanks for the information about the shares and also the cifsconfig_share.cfg file. The location I primarily support does very little CIFS. The group I inherited uses a lot of CIFS. I'm having to get up to speed on some things. The AD will be the same so that won't be a problem. I expected I would have to create shares since the FilerB volume names don't match the originals. I'll double check the security on both sides and make sure those are the same. It seems this should work either way I do it, but things don't always work as I planned them :-) Jeff On Fri, Mar 27, 2015 at 2:22 PM, Parisi, Justin <Justin.Parisi(a)netapp.com> wrote: > If you want to retain the shares, copy the file in /vol/vol0/etc > called cifsconfig_share.cfg. > > That file basically runs commands at boot that creates the shares: > > # cat cifsconfig_share.cfg > > #Generated automatically by cifs commands > > > cifs shares -add "ETC$" "/etc" -comment "Remote Administration" > > cifs access "ETC$" S-1-5-32-544 Full Control > > cifs shares -add "HOME" "/vol/vol0/home" -comment "Default Share" > > cifs access "HOME" S-NONE "nosd" > > cifs shares -add "C$" "/" -comment "Remote Administration" > > cifs access "C$" S-1-5-32-544 Full Control > > cifs shares -add "CIFS" "/vol/cifs" -comment "CIFS" > > cifs access "CIFS" S-NONE "nosd" > > If you have shares in that file already on the destination filer, > append the new shares. > > If you want to load the shares without rebooting after you add the > ones you want, use the source command. > > parisi-7mode> source /vol/vol0/etc/cifsconfig_share.cfg > > There is already a share named ETC$. > > 1 share(s) have been successfully modified > > There is already a share named HOME. > > 1 share(s) have been successfully modified > > There is already a share named C$. > > 1 share(s) have been successfully modified > > There is already a share named CIFS. > > 1 share(s) have been successfully modified > > > Snapmirror is a block for block copy of files, which includes > permissions/ACLs. If using the same domain, no issues. > > From: <Klise>, Steve <Steve.Klise(a)wwt.com> > Date: Friday, March 27, 2015 at 4:10 PM > To: Jeff Cleverley <jeff.cleverley(a)avagotech.com>, "Toasters(a)teaparty.net" > <Toasters(a)teaparty.net> > Subject: RE: Snapmirror relationships > > Not sure about the security on the volumes, but the NTFS perms > should follow, as long as its in the same AD domain, but the shares > won?t follow; you will have to recreate the shares. I would update > the disk/shelf firmware prior personally. > > > > *From:* toasters-bounces(a)teaparty.net [ > mailto:toasters-bounces@teaparty.net <toasters-bounces(a)teaparty.net>] > *On Behalf Of *Jeff Cleverley > *Sent:* Friday, March 27, 2015 12:55 PM > *To:* <Toasters(a)teaparty.net> > *Subject:* Snapmirror relationships > > > > Greetings, > > > > We have to split a cluster and one shelf will go to one site, and the > rest go to another site. The single shelf (DS4243, 2 TB SATA) > comprising 2 aggregates and 11 volumes will get moved to a different > NetApp. The shelf will end up on a system with new names and no > aliases can be used. There are some variable moving parts so I need a sanity check. > > > > FilerA 7.3.7 - owner of the one shelf > > FilerB 8.1.2P4 - soon to be owner of the one shelf > > > > I've setup a snapmirror with a daily cron update that goes from FilerA > to FilerB. This seems OK. If we can get the shelf owners to split > the same day the other moves, I'm just going to move the shelf, change > ownership, import the aggregate/volumes, create cifs shares, and > update the snapvault relationship. > > > > If they insist on moving before that, I have to break the mirrors > after a final sync, rename the current snapmirror destination volumes, > update snapvault relationships and create cifs shares. This seems OK. > > > > Now the questions :-) > > > > 1. Are there any issues associated with this process with the OS > differences or snapmirror not keeping filesystem security type, share, > permissions, etc? > > > > 2. If I have to split the shelf later, I want to add it to FilerB and > make that shelf the production shelf. This is a short term solution > and the heads and shelves are not supported. Is there a graceful way > to sync back to the DS4243 shelf? I don't want to disrupt the CIFS users very much. > > > > 3. Any other glaring issues that stand out? > > > > Thanks, > > > > Jeff > > > > > > > -- > > Jeff Cleverley > IT Engineer > > 4380 Ziegler Road > Fort Collins, Colorado 80525 > 970-288-4611 > -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

1 0

NFSv4/krb against an AD without a CIFS license
by Edward Rolison 27 Mar '15

27 Mar '15

Trying to configure NFSv4 and Kerberos - have managed it several times now with boxes that are on the domain, but for various reasons, this one doesn't have a CIFS license. I'm getting an error: "unable to setup kerberos for NFS could not set up active directory KDC" After entering my administrator account in "nfs setup". Can anyone point me in the direction of what I'm missing here? (Am wondering if it's some variant of needing a machine account created to act as a service principal, or something else is going wrong). Thanks, Ed.

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters