toasters

toasters@lists.teaparty.net

2 participants
13520 discussions

CVE-2014-6271: remote code execution through bash
by Douglas Siggins 26 Sep '14

26 Sep '14

Looks like we are waiting for word from Netapp on this one: netapp% uname -a Data ONTAP xxxxxxx 8.2.1 Data ONTAP Release 8.2.1 amd64 netapp% Wed Sep 24 15:00:00 EDT [bosnamail20:kern.uptime.filer:info]: 3:00pm up 41 days, 39 mins, 603179098 NFS ops, 0 CIFS ops, 0 HTTP ops, 0 FCP ops, 0 iSCSI ops env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test netapp% bash --version GNU bash, version 3.2.48(1)-release (x86_64-pc-freebsd) Copyright (C) 2007 Free Software Foundation, Inc. I doubt there are many vectors that this vuln would work, but still a little concerning.

4 3

7-mode / cDOT Co-existence?
by Ray Van Dolson 25 Sep '14

25 Sep '14

Have searched previous discussions on this, but seems like this is a bit of a moving target. Apologies if this has already been addressed to death. Considering FAS purchases now that N-Series is going away. Wanting to pull the plug and go cDOT on the new systems, but concerned about interoperability with the N-Series filers still on 7-mode. Biggest concern: Can I SnapVault from 7-mode to cDOT? It sounds like there's a way to do this via a migration tool, but less clear if regular 'ol SnapVault and SnapMirror work between the two platforms. Really hoping it works as the co-existence option will make our lives a lot easier. Ray

2 1

Balance monitoring Windows clients
by Andrew Laurence 24 Sep '14

24 Sep '14

Hi all, The documentation states that Balance needs a Windows administrator-level account. Will _only_ an administrator-level account do? By comparison, on a 'nix machine it doesn't actually need complete sudo/root access. It only needs these commands from sudo: /sbin/lvm, /sbin/scsi_id, /sbin/dmsetup Surely a more restrictive permissions set will fill the need on Windows as well? -- Andrew Laurence Office of Information Technology atlauren(a)uci.edu University of California, Irvine

1 0

What to do with 4 x 3020s and 9 Shelves?
by CH 24 Sep '14

24 Sep '14

Company closes and sells off their hardware…..before releasing the shelves they move around the drives in the shelves (for “security”) so now they cannot boot or more importantly get any license info to reinstall OnTap…. Anyway around this? I hate to trash all this hardware.

4 5

WideLink SymLinks on CDOT
by jamesr 22 Sep '14

22 Sep '14

All, Since you were all so helpful last time with regards to my TSM questions (and thanks for that!) I have run into another problem I'd like to pick your collective brains over. We have a CIFS only environment running CDOT and have a requirement to provide Directory SymLinks in a users home directory. I've managed to find fairly decent documentation on how to do this on 7-Mode systems but it seems lacking for CDOT. We use to use mklink (or some other powershell hackery) to create the symlinks but this doesn't work when talking to the new CIFS SVM. Has anyone managed this? Do you have a recipe we can follow to implement this? I've managed to create the Symlink translation entry like so: PS > Get-NcCifsSymlink CifsServer ShareName UnixPath CifsPath Locality ---------- --------- -------- -------- -------- REMOTE_SERVER REMOTE_SHARE /vol04/USERNAME/SymLink-Src/ / widelink But I think the next step is to create a 'real' unix type symlink on /vol04/USERNAME/SymLink-Src/ however I can't see how to do this. The file-create-symlink OnTAPI API call doesn't (seem?) to exist for CDOT (yet?). The only other possible option as I see it is to configure NFS and then mount the drive over NFS to create this symlink but I would prefer to avoid this as we don't have a requirement for NFS on these shares currently. Any help is greatly received as always! Cheers. -- James 'BR' Ray

2 1

snapvault memory allocation error
by Rhodes, Richard L. 22 Sep '14

22 Sep '14

Hi Everyone, Over the weekend we had a snapvault backup fail with memory allocation errors on the snapvault destination. This error occurred twice on the same volume, then hasn't come back. Can not allocate memory. (memory limit reached) (Cannot allocate memory) I run snapmirror and snapvault on all our volumes, but do it one operation at a time - NO concurrent snapvault or snapmirror operations. I search NOW and didn't come up with anything. This occurred on this particular volume twice in a row (6 hours apart - backups run every 6hours), not on any other volumes. This volume is 410GB with 900k inodes - not even close to our biggest volumes. So this error is not related to size (capacity or num inodes), but seems specific to this volume. Filers: IBM N3220 (NetApp FAS2240-2) OnTap: 8.1.2P1 7-Mode Here are the full messages on the SV destination filer. ___ Sat 09 20 07:43:05 EDT [rshd_0:debug]: root@[172.17.170.34_60065]:IN:ssh2 shell:SSH INPUT COMMAND is snapvault snap create -w v_fnce08p_cifs v_fnce08p_cifs tgt Sat 09 20 07:43:05 EDT v_fnce08p_cifs xfer:v_fnce08p_cifs Target_start dst Sat 09 20 07:43:06 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Request (Update) dst Sat 09 20 07:43:07 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Start ___ Sat 09 20 07:50:43 EDT [isnabk0665a:replication.dst.waflErr:error]: SnapVault: destination transfer from isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs to /vol/v_fnce08p_cifs/q_fnce08p_cifs : memory limit reached:Can not allocate memory. dst Sat 09 20 07:50:43 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Defer (memory limit reached) (Cannot allocate memory) dst Sat 09 20 07:51:00 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Request (Retry) dst Sat 09 20 07:51:01 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Restart (@ 929692 KB) dst Sat 09 20 07:51:04 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Abort (memory limit reached) (Cannot allocate memory) dst Sat 09 20 07:51:04 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Rollback_start slk Sat 09 20 07:51:30 EDT state.qtree_softlock.v_fnce08p_cifs.0001b0a2.252.q_fnce08p_cifs.src-qt.isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs.00000000.-01.1 Softlock_add (Transfer) dst Sat 09 20 07:51:37 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Rollback_end (42928 KB) slk Sat 09 20 07:51:37 EDT state.qtree_softlock.v_fnce08p_cifs.0001b0a2.252.q_fnce08p_cifs.src-qt.isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs.00000000.-01.1 Softlock_delete (Transfer) dst Sat 09 20 07:51:38 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Coalesce_end dst Sat 09 20 07:51:38 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Coalesce_start (isnabk0665a(1896301030)_v_fnce08p_cifs-base.2) dst Sat 09 20 07:51:38 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Coalesce_start (isnabk0665a(1896301030)_v_fnce08p_cifs-cleanup.0) dst Sat 09 20 07:51:40 EDT isnapr0664a:/vol/v_fnce08p_cifs/q_fnce08p_cifs isnabk0665a:/vol/v_fnce08p_cifs/q_fnce08p_cifs Coalesce_end ___ Sat 09 20 07:51:41 EDT [rshd_0:debug]: root@[172.17.170.34_60540]:IN:ssh2 shell:SSH INPUT COMMAND is snapvault status -l /vol/v_fnce08p_cifs/q_fnce08p_cifs tgt Sat 09 20 07:51:41 EDT v_fnce08p_cifs xfer:v_fnce08p_cifs Target_create_snapshot (v_fnce08p_cifs.0) tgt Sat 09 20 07:51:41 EDT v_fnce08p_cifs xfer:v_fnce08p_cifs Target_end vol Sat 09 20 07:54:43 EDT v_fnce08p_cifs Snapshot_replace (v_fnce08p_cifs.0) Thanks! Rick ----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.

1 0

vFiler DR in 7Mode vs Cluster Mode?!?
by Milazzo Giacomo 22 Sep '14

22 Sep '14

Hi all, a customer of us use since years vFiler in his 7Mode HA associated with their DR functionalities that permit to restart the systems as they were in the DR site. And this is often associated with VMware SRM functionalities. Question. Assuming and inter-cluster SnapMirror between two different clusters geographically dispersed is there something of that kind using VSM? Thank you in advance Giacomo Milazzo Sinergy SpA

2 1

Single-file Snaprestore Causing Performance Impact?
by Ray Van Dolson 19 Sep '14

19 Sep '14

Hi all; Running 8.1.2P4 in 7-Mode on an IBM N6240. We initiated a couple of single-file snaprestores which ran for 15+ hours on some busy SATA-based aggregates). During that time, we experienced intermittent issues connecting to the NFS services on this filer. Issues would clear up after a while (minutes or tens of minutes) and then return an hour or so later. We killed the snaprestores during one of the outages and observed a full recovery of the NFS service. It may have been coincidental. Anyone aware of snaprestore (specifically, single-file restores) causing cascading impacts? OnCommand doesn't show any additional spike in CPU, disk activity, etc.... Thanks, Ray

5 9

sis.max_total_share_workers & sis.max_vfiler_active_ops
by Scott Eno 17 Sep '14

17 Sep '14

Hi, Anyone familiar with these option settings? Can I use these settings to manage how much load sis puts on the controller & disks? sis.max_total_share_workers 64 sis.max_vfiler_active_ops 8 Thanks!

1 0

Monitoring NDMP
by Andrew Laurence 16 Sep '14

16 Sep '14

Hi all, Am I crazy, or do NDMP loads not show up in Balance and OnCommand System Manager? I see that it's in the SNMP MIB, but is that really the only way to externally monitor service loads from NDMP? Thanks, Andrew -- Andrew Laurence Office of Information Technology atlauren(a)uci.edu University of California, Irvine

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters