toasters

toasters@lists.teaparty.net

1 participants
13515 discussions

Re: SSLv3, POODLE, and NetApp...
by James Andrewartha 15 Mar '15

15 Mar '15

Yes, I had problems with OnCommand Host, ie my VMware backups stopped, when I disabled SSLv3 last week. Since it's no longer supported I just re-enabled it again. My guess is it's related to old Java? Also, while looking at it I noticed that the SSL certificates had expired some years ago but nothing complained or stopped working. James Sent from my Samsung device -------- Original message -------- From: RM <RM(a)richardmay.net> Date: 2015/03/15 05:41 (GMT+08:00) To: toasters(a)teaparty.net Subject: SSLv3, POODLE, and NetApp... My apologies if this has been discussed. I searched the archives and didn’t come up with anything. Customers are asking about disabling SSLv3 due to the POODLE vulnerability. Looking over the kb articles, NetApp’s guidance is rather sparse. Has anyone disabled SSLv3 in their storage environment and if so, what did you see? I have a preliminary report that the vSphere side of things has some issues when SSLv3 is disabled but I don’t have reliable details yet. Best to all, RM

1 0

SSLv3, POODLE, and NetApp...
by RM 14 Mar '15

14 Mar '15

My apologies if this has been discussed. I searched the archives and didn't come up with anything. Customers are asking about disabling SSLv3 due to the POODLE vulnerability. Looking over the kb articles, NetApp's guidance is rather sparse. Has anyone disabled SSLv3 in their storage environment and if so, what did you see? I have a preliminary report that the vSphere side of things has some issues when SSLv3 is disabled but I don't have reliable details yet. Best to all, RM

1 0

Symantec Enterprise Vault + OnTAP based DR
by Momonth 12 Mar '15

12 Mar '15

Hello, I'm currently working on implementing DR for Symantec Enterprise Vault (EV), all EV data partitions are on NetApp filer (EV's SQL instance is out of the scope here), being accessed via FCP. I was hoping there was EV plugin for NeApp SnapManager, but it's not the case, also Symantec don't provide anything in that regard. I wonder if anybody looked at EV + SnapMirror integration? What were your approaches? My idea so far: 0. Setup SM jobs for EV volumes. 1. Set EV into 'backup mode'. 2. Trigger SM update for the EV volumes. Steps 1. ans 2. can be triggered from a powershell script, I think. Cheers, Vladimir

1 0

CDOT CIFS shares import?
by Basil 12 Mar '15

12 Mar '15

Does anyone know of a clean way to import CIFS shares? In 7-mode, I'd manipulate the /etc/cifsconfig_share.cfg directly if I ever needed to, but in CDOT, there's no such thing. I'm trying to plan a cutover from an EMC NAS to a Netapp SVM, and once we've got the shares on the Netapp configured and have done our final robocopy, I need to unjoin the SVM from the domain and rejoin it with the computer account of the old EMC. Doing this causes all the shares to be deleted. If there's no clean way to do this, I'll be building a command file of vserver cifs share create commands, but I'd really prefer not to have to. Thanks!

1 0

CMOD /etc/messages of SVM
by Iluhes 10 Mar '15

10 Mar '15

Can I still mount what used to be /vol/vol0, aka root volume from NFS SVM and read /etc/messages?

4 5

Shelf recognition problem with DS14s
by Jeff Cleverley 10 Mar '15

10 Mar '15

Greetings, My apologies for the long email but I'm trying to put in as many details as possible. I have some DS14 shelves attached to some 6290s running 8.1.2P4 7-mode. I've run into an odd problem that I think will require a takeover/giveback, but wanted to see if I've missed anything. I'm pretty sure the problem is not the shelf IDs :-) Controller A sees all disks and shelves through the loop just fine. Controller B sees both paths, but for the shelf number and bays, it only shows question marks for those. All connections are on PCI HBAs, nothing is using the onboard ports. Here is an example of the storage show disk -p command from Controller B: 9d.82 B 8d.82 A ? ? Here is the same path on controller B using a sysconfig -a: 82 : 0.0GB 0B/sect (Startup failed.) As you can see, it sees device 82 down both paths, but it can't identify the shelf or the drive bay. When I look on controller A, it has valid information. If I at a disk from controller B, it won't see any information on the disk like serial number, disk size, firmware, etc. Controller A sees everything just fine and does not have any Startup failed messages. If I do a storage show disk -n, controller A sees 84 drives, but controller B only sees 4. Those 4 don't show correctly either. If I manually pull a drive and reseat it, it will show up as an unowned drive with no valid shelf or bay slot. It will show up correctly in the sysconfig -a output. Here are things I've tried with no luck. 1. New FC ports on the filer side. 2. Reseating the shelf interface cards on both shelves 1 and 6 where the FC connections come in. 3. New fibre cable between shelf and filer. 4. Swapped controller A & B connection in shelf #1. Controller A sees everything correctly down the same path that controller B doesn't. Controller B doesn't see anything correctly down the path controller A was using and seeing everything. 5. Manually pulled a drive from a shelf and plugged it back in. 6. Verified I am not at any maximum number of drives or shelf count per cluster limit. 7. Verified both heads have the same shelf/drive firmware and qual_devices packages. The only thing I can think of is somehow the registry or something on controller B has corrupted. Since I have a head in an odd condition for this loop of disks only I'm a little reluctant to do a takeover and giveback. What if it comes back and doesn't recognize any of its drives :-) Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

3 7

Re: 7 mode admin host (rsh) and CMOD
by Iluhes 04 Mar '15

04 Mar '15

Thank you all who reposned on rsh and ssh question, I did see rsh in firewall policy so I was woundering if that is still possible. It sound like everyone is using the passwordless ssh, right? > On Mar 4, 2015, at 11:11 AM, "Singh, Tejinder" <Tejinder.Singh(a)netapp.com> wrote: > > You configure rsh access to cluster: > > cluster1::> system services firewall policy clone -policy mgmt -new-policy-name mgmt1 > > cluster1::> system services firewall policy create -policy mgmt1 -service rsh -action allow -ip-list 0.0.0.0/0 > > cluster1::> network interface modify -vserver cluster1 -lif cluster_mgmt -firewall-policy mgmt1 > > cluster1::> sec login create -vserver cluster1 -username admin -application rsh -authmode password -role admin > > On the linux machine, make sure you are using the normal rsh /usr/bin/rsh and disable the firewall on the linux machine. > > linux: service iptables stop > > linux: /usr/bin/rsh -l admin:Password 192.168.0.101 "net int show" > > Cheers, > Tej > > > From: toasters-bounces(a)teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of tmac > Sent: Wednesday, March 04, 2015 9:54 PM > To: Iluhes > Cc: Toasters > Subject: Re: 7 mode admin host (rsh) and CMOD > > For cDOT, you want to stick with SSH. I am not even sure if rsh is support to cDOT. > I suspect it is, and it is treated much like telnet. > > You would need to dig into the guides to see if it will work. > > --tmac > > Tim McCarthy > Principal Consultant > > > > > > On Mon, Mar 2, 2015 at 10:24 PM, Iluhes <iluhes(a)yahoo.com> wrote: > Thanks Steve, Tim, > So passwordless ssh is the only option? No rsh? > > > On Monday, March 2, 2015 8:03 PM, tmac <tmacmd(a)gmail.com> wrote: > > > That should do it. I have done it before and it works fine. > > --tmac > > Tim McCarthy > Principal Consultant > > > > On Mon, Mar 2, 2015 at 8:33 PM, Klise, Steve <Steve.Klise(a)wwt.com> wrote: > I don’t think its the same.. Did you check this KB? > > https://kb.netapp.com/support/index?page=content&id=1012542&locale=en_US&ac… > > Thanks > > Steve Klise > > > From: Iluhes <iluhes(a)yahoo.com> > Reply-To: Iluhes <iluhes(a)yahoo.com> > Date: Monday, March 2, 2015 at 3:33 PM > To: "toasters(a)teaparty.net" <toasters(a)teaparty.net> > Subject: 7 mode admin host (rsh) and CMOD > > Can I have rsh admin linux host for CMOD arrays the same way I had for 7-mode? > If yes, how? > > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > > > > > > The information contained in this message and in any attachments is privileged and confidential, and may contain personal data. It is intended only for the use of the addressee. You should not read, copy, use, or disclose this information without authorisation. If you are not the intended recipient of this message, please e-mail the sender immediately and delete this message. Any unauthorised dissemination, disclosure, copying or use of the contents of this message is strictly prohibited and may result in legal action, including civil or criminal proceedings. > > NetApp-Disclaimer-v1.1

1 0

7 mode admin host (rsh) and CMOD
by Iluhes 04 Mar '15

04 Mar '15

Can I have rsh admin linux host for CMOD arrays the same way I had for 7-mode?If yes, how?

5 6

CDOT snapshot thoughts
by Mark Flint 04 Mar '15

04 Mar '15

So, I have a user who want me to turn of snapshots, and delete the old ones, across about 100 areas, all of over 10TB in size. No problem says I….. then my poor brain starts to think about how I could do this using the available policies. A colleague suggested altering the specific protection policy applied to these areas, so that the policy has zero snapshots kept, with the thought that it would slowly ‘age them out’. Turns out not, or that’s the way it looks at the moment. So, I’m left with a couple of options, basically, manually delete all the snapshots via script, and turn off snapshotting completely on those areas, and reduce the snap reserve to zero…..or hope the policy will do some magic for me overnight. Anyone think of a better way to do this? Happy Tuesday! ~Mark mark.flint(a)sanger.ac.uk

9 10

showmount plugin for CMOD
by Iluhes 04 Mar '15

04 Mar '15

I have installed and used showmount plug-in in the past.But it does not work on new cluster and SVM'sI guess I forgeting a step..I am asuming it is using ssh/http/https connection?I see a difference in the ports between working and notAm I correct? Do I need to enable some services? Now working PORT STATE SERVICE 111/tcp open rpcbind2049/tcp open nfs4045/tcp open lockd10000/tcp open snet-sensor-mgmt Working PORT STATE SERVICE22/tcp open ssh80/tcp open http111/tcp open rpcbind443/tcp open https2049/tcp open nfs4045/tcp open lockd10000/tcp open snet-sensor-mgmt

3 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters