toasters

toasters@lists.teaparty.net

13520 discussions

RE: Problem setting access rights for files on a CIFS share progr amatically
by Muhlestein, Mark 15 Sep '01

15 Sep '01

This is bug 50667. Contact support for the fix. Mark -----Original Message----- From: Michael.Kaercher(a)genorz.de [mailto:Michael.Kaercher@genorz.de] Sent: Friday, September 14, 2001 5:39 AM To: toasters(a)mathworks.com Subject: Problem setting access rights for files on a CIFS share programatically Are you an NT administrator? Have you tried to set up user's rights from a script? If so: Please read on! We have implemented a tool to create user accounts for an NT domain. This tools also creates the user's home, group, and profile directories. Of course, these directories must be properly protected from unauthorized access. To this end, we are using Microsoft's ADsSecurity package (found in the ASDI25SDK resource kit). With the graphical tools for setting permissions on a remote file or directory we can modify ACLs on the filer. However using ADSI doesn't work on the filer. (The filer is running 5.3.7R2; ADSI is version 2.5)) We have found that the following (trivial) example program taken from the Microsoft documentation works perfectly well from an NT4 domain controller to another NT4 domain controller, an NT 4 member server, a Windows 2000 member server (of course, all belonging to the same domain), BUT: Setting the new DACL with a NTFS share on the filer does not work (the existing rights are correctly displayed, but setting just doesn't work - without returning an error code!). Const ADS_RIGHT_GENERIC_READ = &H80000000 Const ADS_RIGHT_GENERIC_EXECUTE = &H20000000 Const ADS_ACETYPE_ACCESS_ALLOWED = 0 Set sec = CreateObject("ADsSecurity") Set sd = sec.GetSecurityDescriptor("FILE://\\SERVER\DIR\FILE.TST") Set dacl = sd.DiscretionaryAcl '-- Show the ACEs in the DACL ---- For Each ace In dacl wscript.echo ace.Trustee wscript.echo ace.AccessMask wscript.echo ace.AceType Next '--- Add a new ACE so that the user can read/execute this file Set ace = CreateObject("AccessControlEntry") ace.Trustee = "DOMAIN\user" ace.AccessMask = ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_EXECUTE ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED dacl.AddAce ace sd.DiscretionaryAcl = dacl sec.SetSecurityDescriptor sd BTW: Using the Win32::Perms perl module shows the same behaviour! Thanks, Michael Kärcher

1 0

RE: Problem setting access rights for files on a CIFS share progr amatically
by Nail, Larry 14 Sep '01

14 Sep '01

Do it every day: File level, we use XCACLS. xcacls \\filer01\wts\%1 /c /g administrators:f %1:c "domain\pc gurus":c system:f /t /y xcacls \\filer01\profiles\%1 /c /g administrators:f %1:F "domain\pc gurus":c system:f /t /y Share level, I use a combination of tools between RMTSHARE & "cifs shares access" rsh filer01 cifs shares -add %1 /vol/vol0/wts/%1 rsh filer01 cifs shares -change %1 -comment \"%1 WTS Home Directory\" rmtshare \\filer\%1 /grant domain\%1:c /grant "pc gurus":c /grant vette01\administrators:f /remove everyone Also note that versions of Ontap less than 6 don't support NTFS5 permissions. -----Original Message----- From: Michael.Kaercher(a)genorz.de [mailto:Michael.Kaercher@genorz.de] Sent: Friday, September 14, 2001 7:39 AM To: toasters(a)mathworks.com Subject: Problem setting access rights for files on a CIFS share programatically Are you an NT administrator? Have you tried to set up user's rights from a script? If so: Please read on! We have implemented a tool to create user accounts for an NT domain. This tools also creates the user's home, group, and profile directories. Of course, these directories must be properly protected from unauthorized access. To this end, we are using Microsoft's ADsSecurity package (found in the ASDI25SDK resource kit). With the graphical tools for setting permissions on a remote file or directory we can modify ACLs on the filer. However using ADSI doesn't work on the filer. (The filer is running 5.3.7R2; ADSI is version 2.5)) We have found that the following (trivial) example program taken from the Microsoft documentation works perfectly well from an NT4 domain controller to another NT4 domain controller, an NT 4 member server, a Windows 2000 member server (of course, all belonging to the same domain), BUT: Setting the new DACL with a NTFS share on the filer does not work (the existing rights are correctly displayed, but setting just doesn't work - without returning an error code!). Const ADS_RIGHT_GENERIC_READ = &H80000000 Const ADS_RIGHT_GENERIC_EXECUTE = &H20000000 Const ADS_ACETYPE_ACCESS_ALLOWED = 0 Set sec = CreateObject("ADsSecurity") Set sd = sec.GetSecurityDescriptor("FILE://\\SERVER\DIR\FILE.TST") Set dacl = sd.DiscretionaryAcl '-- Show the ACEs in the DACL ---- For Each ace In dacl wscript.echo ace.Trustee wscript.echo ace.AccessMask wscript.echo ace.AceType Next '--- Add a new ACE so that the user can read/execute this file Set ace = CreateObject("AccessControlEntry") ace.Trustee = "DOMAIN\user" ace.AccessMask = ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_EXECUTE ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED dacl.AddAce ace sd.DiscretionaryAcl = dacl sec.SetSecurityDescriptor sd BTW: Using the Win32::Perms perl module shows the same behaviour! Thanks, Michael Kärcher

1 0

Problem setting access rights for files on a CIFS share programatically
by Michael.Kaercher＠genorz.de 14 Sep '01

14 Sep '01

Are you an NT administrator? Have you tried to set up user's rights from a script? If so: Please read on! We have implemented a tool to create user accounts for an NT domain. This tools also creates the user's home, group, and profile directories. Of course, these directories must be properly protected from unauthorized access. To this end, we are using Microsoft's ADsSecurity package (found in the ASDI25SDK resource kit). With the graphical tools for setting permissions on a remote file or directory we can modify ACLs on the filer. However using ADSI doesn't work on the filer. (The filer is running 5.3.7R2; ADSI is version 2.5)) We have found that the following (trivial) example program taken from the Microsoft documentation works perfectly well from an NT4 domain controller to another NT4 domain controller, an NT 4 member server, a Windows 2000 member server (of course, all belonging to the same domain), BUT: Setting the new DACL with a NTFS share on the filer does not work (the existing rights are correctly displayed, but setting just doesn't work - without returning an error code!). Const ADS_RIGHT_GENERIC_READ = &H80000000 Const ADS_RIGHT_GENERIC_EXECUTE = &H20000000 Const ADS_ACETYPE_ACCESS_ALLOWED = 0 Set sec = CreateObject("ADsSecurity") Set sd = sec.GetSecurityDescriptor("FILE://\\SERVER\DIR\FILE.TST") Set dacl = sd.DiscretionaryAcl '-- Show the ACEs in the DACL ---- For Each ace In dacl wscript.echo ace.Trustee wscript.echo ace.AccessMask wscript.echo ace.AceType Next '--- Add a new ACE so that the user can read/execute this file Set ace = CreateObject("AccessControlEntry") ace.Trustee = "DOMAIN\user" ace.AccessMask = ADS_RIGHT_GENERIC_READ Or ADS_RIGHT_GENERIC_EXECUTE ace.AceType = ADS_ACETYPE_ACCESS_ALLOWED dacl.AddAce ace sd.DiscretionaryAcl = dacl sec.SetSecurityDescriptor sd BTW: Using the Win32::Perms perl module shows the same behaviour! Thanks, Michael Kärcher

1 0

NBU sets filer attached drive down
by Hannes Herret 14 Sep '01

14 Sep '01

anyone knows this behaviour? we're running 6.1.1 on F740 w/ an direct attached ATL L200 (1 Drive) Backupserver is an E450 w/ Solaris 8 and NBU 3.4 DC. NBU always sets the drive in the L200 down. Also i'm upping the drive it lasts bout 30 sec. till the drive is down again. no ndmp backup is possible. a started dump from the filer is working fine. the nbu config seems ok. authorization works, robtest and tldtest from the nbu-server on the L200 also works. could this be a problem cause of missing /etc/dumpdates? who can read an "ndmpd debug 50"-output? thx h -- ------------------------------------------------------------------- Hannes Herret IT-Service / Storage phone : +43 (1) 60 126-34 Bacher Systems EDV GmbH fax : +43 (1) 60 126-555 Wienerbergstr. 11B mailto:hh@bacher.at A-1101 Wien, Austria www : http://www.bacher.at/ Europe

1 0

RAID checksum revert process
by Jeffrey Krueger 14 Sep '01

14 Sep '01

Okay, after creating 16 volumes on 6.1 machines for snapmirror from 5.3 machines, can I say that there really needs to be a "vol create" option to say "-checksums old". It has been a pain to create all these volumes just to wait for checksum reversion. Installing the filer on 5.3 and upgrading after the initial snapmirror isn't an option either - the destination already has other production volumes - besides, thats a kludge. Beyond that, has anyone else noticed that checksum reversions seem to be "single tasked"? For instance: Thu Sep 13 15:46:17 PDT [reactor: worker_thread:error]: A snapmirror transfer from vol0 to vol0 has found that the two volumes have differing checksum states. Data ONTAP is aborting the snapmirror transfer and reverting the checksum state for the destination volume vol0. After Data ONTAP displays a message showing the revert is complete, you can retry the snapmirror transfer. You can use the vol status -c command to see the progress of the reversion. Thu Sep 13 15:46:31 PDT [reactor: worker_thread:error]: A snapmirror transfer from vol0 to vol2 has found that the two volumes have differing checksum states. Data ONTAP is aborting the snapmirror transfer and reverting the checksum state for the destination volume vol2. After Data ONTAP displays a message showing the revert is complete, you can retry the snapmirror transfer. You can use the vol status -c command to see the progress of the reversion. # rsh reactor vol status -c vol0 Volume Checksum style Checksum status vol0 zoned Checksums reverting (98% done) # rsh reactor vol status -c vol2 Volume Checksum style Checksum status vol2 zoned Checksums reverting (0% done) Just an FYI for other folks - this takes a few hours to complete for each volume when the volumes are ~500GB. -- Jeff

1 0

RE: Tape drives revisited (I'm sure...)
by Ting, James 13 Sep '01

13 Sep '01

Jeff http://now.netapp.com/NOW/knowledge/docs/hardware/syscfg/scdot611/index.htm IBM LTO is supported in 6.1.1 Jim -----Original Message----- From: Jeff Kennedy [mailto:jlkennedy@amcc.com] Sent: Thursday, September 13, 2001 3:46 PM To: NDMP List Subject: Tape drives revisited (I'm sure...) According to NetApp, the only dlt-type versions supported are 7k and 8k, no SDLT or LTO. Who out there is using these (particularly SDLT) and how did you get it to work? And do you have support problems? Thanks. -- ===================== Jeff Kennedy Unix Administrator AMCC jlkennedy(a)amcc.com

1 0

Tape drives revisited (I'm sure...)
by Jeff Kennedy 13 Sep '01

13 Sep '01

According to NetApp, the only dlt-type versions supported are 7k and 8k, no SDLT or LTO. Who out there is using these (particularly SDLT) and how did you get it to work? And do you have support problems? Thanks. -- ===================== Jeff Kennedy Unix Administrator AMCC jlkennedy(a)amcc.com

1 0

tarring files off netapp attached tape devices?
by Michael Galloway 13 Sep '01

13 Sep '01

hmm ... i must be missing something simple here. i've got a DLT7000 in a library attached to one of my F520's, and i want to grab a couple of tar files off tape. tar fails with this error: sif /tmp# tar tvf poplar-1:nrst0a tar: poplar-1\:nrst0a: Cannot open: Input/output error tar: Error is not recoverable: exiting now where poplar-1 is the netapp. -- michael

2 2

Backup questions...
by Don Hickey 13 Sep '01

13 Sep '01

I've been having trouble with backup/restores since day one and I'm hoping someone can help me out. Our enviornment is a clustered 840 with ~3Tb of raw disk running 6.1.1R1 in a mixed environment. The backup unit is a storagetek L700 hooked to a Solaris 8 system with Netbackup 3.4. Each filer in the cluster is direct scsi connected to 4 drives (2 drives per scsi card). The library robot is attached to the solaris netbackup box, which is also the admin host. We are using NDMP. Here are the issues: - First the backups work. We had some issues where backups would not run and found that by default the OS does not have a dumpdates file. This prevented ndmp from backing up. We simply touched the file. - I can't restore anything. I get a Permission Denied error from netbackup. I don't know if this is permission denied accessing the filer (although I can't see how... I can rsh from the box -and- backups do work) or permission denied writing the files. The restore request is for a simple directory on a mixed tree, the data has no acls. Root can mount the filesystem and do what it wants with the files directly. This is by far my biggest problem... can anyone help? - After every backup there is a file structure left at the root of *every* volume. Every volume has an /etc directory with two subdirectories, /etc/oldmaps and /etc/tmp. There are subdirectories below these , Is this normal? - Netbackup does stream backups. It sequentially backs up every volume. We have four drives per filer but it will not start the backups in parallel. I can force this by creating a seperate class for every volume. Is this the way to do it? Is there any netbackup / netapp white paper? THANKS!!

2 1

RE: Problem with Snapshot's and Oracle
by Hubbard, Dan 13 Sep '01

13 Sep '01

I do not have gtar on this machine. I am not sure what you mean by touch /location/filename.bak. The file cannot be copied in the 1st place to create the filename.bak. If I try a touch on the original filename in my snapshot dir then I get a "cannot change time on "filename"." -----Original Message----- From: Traitel, Eyal [mailto:eyal@netapp.com] Sent: Thursday, September 13, 2001 9:28 AM To: 'Hubbard, Dan'; Traitel, Eyal; 'toasters(a)mathworks.com' Subject: RE: Problem with Snapshot's and Oracle Interesting then what will "gtar" shout... One other suggestion would be to do "touch /location/filename.bak". ----------------------------------------------------------------- eTraitel - I'm the new eBuzzword around !!! Filer Escalation Engineer CNA, MCSE, CSA, LCA, NetApp CA Network Appliance BV Hoofddorp, The Netherlands Office: +31 23 567 9685 Cellular: +31 6 5497 2568 Get answers NOW! - NetApp On the Web - http://now.netapp.com <http://now.netapp.com/> ----------------------------------------------------------------- -----Original Message----- From: Hubbard, Dan [mailto:dhubbard@websense.com] Sent: Thursday, September 13, 2001 6:26 PM To: 'Traitel, Eyal'; Hubbard, Dan; 'toasters(a)mathworks.com' Subject: RE: Problem with Snapshot's and Oracle No, the target location is not empty it does have other files in it. When I copy I am copying the files to another name. I am using cp -r filename /location/filename.bak -----Original Message----- From: Traitel, Eyal [mailto:eyal@netapp.com] Sent: Thursday, September 13, 2001 9:14 AM To: 'Hubbard, Dan'; 'toasters(a)mathworks.com' Subject: RE: Problem with Snapshot's and Oracle Is the target location empty ? Does it have maybe files with the same names ? How do you copy ? ----------------------------------------------------------------- eTraitel - I'm the new eBuzzword around !!! Filer Escalation Engineer CNA, MCSE, CSA, LCA, NetApp CA Network Appliance BV Hoofddorp, The Netherlands Office: +31 23 567 9685 Cellular: +31 6 5497 2568 Get answers NOW! - NetApp On the Web - http://now.netapp.com <http://now.netapp.com/> ----------------------------------------------------------------- -----Original Message----- From: Hubbard, Dan [mailto:dhubbard@websense.com] Sent: Thursday, September 13, 2001 4:43 PM To: 'toasters(a)mathworks.com' Subject: Problem with Snapshot's and Oracle We have a problem with our snapshots and Oracle and was wondering if anyone has seen/solved this. We shutdown our database and then run a manual snapshot of the our volume running Oracle (kind of a bummer to start you can't snap qtree's). Then we restart our database. The problems occurs when trying to copy the Oracle files out of the snapshot directory to another location on the filer. We need to do this to test recovery procedures. Things appear to be working OK for a few files and then all of a sudden we get "permission denied" copying the files. Ideas ?

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters