toasters

toasters@lists.teaparty.net

13514 discussions

RE: Why is root not root?
by Muhlestein, Mark 25 May '01

25 May '01

This is explained in the security troubleshooter. "I'm root but I can't do everything I want to on the filer" http://now.netapp.com/NOW/knowledge/docs/olio/guides/53_troubleshooting/faq… By default, NT security does not allow administrators to access data unless it is granted in the ACL. However, NT administrators can take ownership and grant themselves access. Not all shops want this behavior. In particular, if you have a Unix-centric administration model you can have "root" override NT-style security by turning on the "cifs.nfs_root_ignore_acl" option. That option is available in 5.3.7 and later versions of ONTAP. Mark -----Original Message----- From: White, Lance [mailto:Lance.White@netapp.com] Sent: Thursday, May 24, 2001 2:16 PM To: 'Chuck Ross'; Net App List (E-mail) Subject: RE: Why is root not root? Because Data OnTap is NOT Unix. 'root' is a privileged account, 'Administrator' is a privileged account, some people map root == Administrator if they're really concerned. I would believe that allowing this degree of flexibility is a "feature". -----Original Message----- From: Chuck Ross [mailto:chuck.ross@signiant.com] Sent: Thursday, May 24, 2001 2:06 PM To: Net App List (E-mail) Subject: Why is root not root? Hi all, Why is root on a Unix admin host for a filer in a mixed env not really root? By that I mean why is it possible to create directories on the NetApp via a Cifs share that root has no access to? Chuck Ross SIGNIANT - A Nortel Networks Venture 1550 Carling Avenue, Suite 101 Ottawa, ON K1Z 8S8 email: Chuck.Ross(a)signiant.com tel: (613) 761-3605 fax: (613) 761-3629

2 1

�h�h�h�hBICYCLE !! & FLASH SHOES!!�h�h�h�hBICYCLE !! & FLASH SHOES!!�h�h
by t141525504＠hotmail.com 25 May '01

25 May '01

1 0

DS14 experiences?
by Moshe Linzer 25 May '01

25 May '01

Is anybody using the new DS14 disk shelves? Are the shelves and drives reliable? My FC9's and 36GB drives have been rock solid for the past year or more, and I am leery of jumping into new technology. But getting twice the capacity in the same footprint is just too enticing! Moshe

2 1

RE: recovering data from user's snapshot directory?
by Muhlestein, Mark 24 May '01

24 May '01

You can use "scopy.exe" from the NT resource kit to get this data, since it uses backup-mode access which bypasses the security on the files. Mark -----Original Message----- From: brad(a)ThoughtWorks.com [mailto:brad@ThoughtWorks.com] Sent: Tuesday, May 22, 2001 2:23 PM To: toasters(a)mathworks.com Subject: recovering data from user's snapshot directory? We have a few employees that have left the company and I need to get their data back from their snapshot directories (the original files and folders were deleted as well as the usernames). The volume is a CIFS homedrive setup and if I try to take ownership of the folders under the snapshot directory, I cannot. I also cannot give myself read access to the folder. Has anyone else has this problem? I'm logging in via the administrator account and it still does not work. Thanks in advance for your help.

1 0

RE: Why is root not root?
by White, Lance 24 May '01

24 May '01

Ah yes, I remember using this one. Nice memory, Graham! Hopefully that's the right answer for you, Chuck. Let us know! LW -----Original Message----- From: Knight, Graham [mailto:Graham.Knight@netapp.com] Sent: Thursday, May 24, 2001 2:49 PM To: 'Chuck Ross'; Net App List (E-mail) Subject: RE: Why is root not root? Probably because the file has an NT ACL that has been set so tightly that the root user cannot access it without taking ownership first, which cannot be done very easily from the command line. Setting this (hidden) option will make this type of problem a thing of the past: options cifs.nfs_root_ignore_acl on I used this extensively at my last position with very good results. Graham -----Original Message----- From: Chuck Ross [mailto:chuck.ross@signiant.com] Sent: Thursday, May 24, 2001 3:06 PM To: Net App List (E-mail) Subject: Why is root not root? Hi all, Why is root on a Unix admin host for a filer in a mixed env not really root? By that I mean why is it possible to create directories on the NetApp via a Cifs share that root has no access to? Chuck Ross SIGNIANT - A Nortel Networks Venture 1550 Carling Avenue, Suite 101 Ottawa, ON K1Z 8S8 email: Chuck.Ross(a)signiant.com tel: (613) 761-3605 fax: (613) 761-3629

1 0

RE: Why is root not root?
by Chuck Ross 24 May '01

24 May '01

That's the problem, even with root == Administrator I still run into directories(folders) that I cannot access (as root). I don't have a problem with the flexibility, I just want to be able to manage my data from one machine, my admin host. Chuck > -----Original Message----- > From: White, Lance [mailto:Lance.White@netapp.com] > Sent: Thursday, May 24, 2001 5:16 PM > To: Chuck Ross; Net App List (E-mail) > Subject: RE: Why is root not root? > > > Because Data OnTap is NOT Unix. 'root' is a privileged > account, 'Administrator' is a privileged account, some people > map root == Administrator if they're really concerned. I > would believe that allowing this degree of flexibility is a "feature". > > -----Original Message----- > From: Chuck Ross [mailto:chuck.ross@signiant.com] > Sent: Thursday, May 24, 2001 2:06 PM > To: Net App List (E-mail) > Subject: Why is root not root? > > > Hi all, > > Why is root on a Unix admin host for a filer in a mixed env not really > root? By that I mean why is it possible to create directories on the > NetApp via a Cifs share that root has no access to? > > Chuck Ross >

1 0

RE: Why is root not root?
by White, Lance 24 May '01

24 May '01

Because Data OnTap is NOT Unix. 'root' is a privileged account, 'Administrator' is a privileged account, some people map root == Administrator if they're really concerned. I would believe that allowing this degree of flexibility is a "feature". -----Original Message----- From: Chuck Ross [mailto:chuck.ross@signiant.com] Sent: Thursday, May 24, 2001 2:06 PM To: Net App List (E-mail) Subject: Why is root not root? Hi all, Why is root on a Unix admin host for a filer in a mixed env not really root? By that I mean why is it possible to create directories on the NetApp via a Cifs share that root has no access to? Chuck Ross SIGNIANT - A Nortel Networks Venture 1550 Carling Avenue, Suite 101 Ottawa, ON K1Z 8S8 email: Chuck.Ross(a)signiant.com tel: (613) 761-3605 fax: (613) 761-3629

1 0

Why is root not root?
by Chuck Ross 24 May '01

24 May '01

Hi all, Why is root on a Unix admin host for a filer in a mixed env not really root? By that I mean why is it possible to create directories on the NetApp via a Cifs share that root has no access to? Chuck Ross SIGNIANT - A Nortel Networks Venture 1550 Carling Avenue, Suite 101 Ottawa, ON K1Z 8S8 email: Chuck.Ross(a)signiant.com tel: (613) 761-3605 fax: (613) 761-3629

1 0

RE: Question on "vol copy"
by Smith, Gil 24 May '01

24 May '01

> Do any of you know if the "vol copy" command can be used in > this case. Can I specify that the destination is actually a qtree? I would recommend you use ndmpcopy for this. Here is some info and an example: Here is the "ndmpcopy" info for migrating data between filers. It uses dump/restore and can be used for smaller paths (not entire volumes). You have to make sure that each filer trusts each other by making etc/hosts.equiv entries. There is also an actual test level 0 and level 9 below. It is a good tool to know how to use/get working. You can get a binary for ndmpcopy via anonymous ftp from our ftp.netapp.com as below or www.ndmp.org and compile it. ftp> cd ndmpcopy 250 "/pub/netapp/upload/ndmpcopy" is new cwd. ftp> dir 200 PORT command successful. 150 Opening ASCII mode data connection for /bin/ls. drwxrwxr-x 2 ftpuser ftpusers 4096 Apr 17 2000 aix drwxrwxr-x 2 ftpuser ftpusers 4096 Mar 29 2000 linux drwxrwxr-x 2 ftpuser ftpusers 4096 Oct 5 08:54 solaris drwxrwxr-x 2 ftpuser ftpusers 4096 Oct 5 06:52 solaris2.7 Using ndmpcopy for data migration Use the latest version of ndmpcopy. Version 1.2 and later has incremental support that works, and you no longer need to specify a password on the command line, it is promptable now. Refer to ndmpcopy documentation for client installation and command usage. Example using ndmpcopy Version 1.2: Set up the destination volume where the date will be copied to. Use ndmpcopy to do a level 0 dump: Example: ndmpcopy source:path_to_volume destination:path_to_volume -level 0 -dpass After the level 0 is done, a level 1 ndmpcopy may done. This will copy only the data that changed since the level 0: ndmpcopy source:path_to_volume destination:path_to_volume -level 1 -dpass When ready to use the new volume: Turn off NFS & CIFS on the source by executing nfs off and cifs terminate. Do a final incremental to copy changes since the last ndmpcopy: ndmpcopy source:path_to_volume destination:path_to_volume -level 9 -dpass Configure the volume for production use. This process maintains performance by keeping the data striped across all disks in the volume, and you would probably rather wait the extra few minutes of downtime for the ndmpcopy to complete and maintain performance, than lose a lot of performance to get it done quickly. Be sure to use the latest recommended Data ONTAP OS. [example from lab below] unix# ndmpcopy f760cl1-rtp:/vol/vol0/home f820-rtp:/vol/vol0/home -level 0 -dpass Source password: Destination password: Connecting to f760cl1-rtp. Connecting to f820-rtp. f760cl1-rtp: CONNECT: Connection established. f820-rtp: CONNECT: Connection established. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: creating "/vol/vol0/../snapshot_for_ba ckup.1" snapshot. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Using subtree dump f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Date of this level 0 dump: Tue Mar 27 14:32:47 2001. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Date of last level 0 dump: the epoch. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Dumping /vol/vol0/home/ to NDMP connec tion f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: mapping (Pass I)[regular files] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: mapping (Pass II)[directories] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: estimated 146499 KB. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: dumping (Pass III) [directories] f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:26:48 2001: Begin level 0 r estore f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:26:48 2001: Reading directo ries from the backup f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: dumping (Pass IV) [regular files] f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:26:48 2001: Creating files and directories. f820-rtp: LOG: RESTORE: f820-rtp: LOG: Warning: cannot create directory oracle: File exists f820-rtp: LOG: RESTORE: f820-rtp: LOG: Warning: cannot create directory test: Fi le exists f820-rtp: LOG: RESTORE: f820-rtp: LOG: Warning: cannot create directory dmj: Fil e exists f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:26:48 2001: Writing data to files. f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:27:08 2001: Restoring NT AC Ls. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: dumping (Pass V) [ACLs] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: 146901 KB f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: DUMP IS DONE f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Deleting "/vol/vol0/../snapshot_for_ba ckup.1" snapshot. f820-rtp: LOG: RESTORE: f820-rtp: LOG: RESTORE IS DONE f820-rtp: HALT: The operation was successful! Waiting for f760cl1-rtp to halt too. The transfer was successful, but the source filer hasn't halted yet. Elapsed time: 0 hours, 0 minutes, 49 seconds. f760cl1-rtp: HALT: The operation was successful! The transfer is complete. Elapsed time: 0 hours, 0 minutes, 50 seconds. ------------------ now the incremental ------------------------- root@ultra5-rtp%[/usr/local/bin]>./ndmpcopy f760cl1-rtp:/vol/vol0/home f820-rtp: /vol/vol0/home -level 9 -dpass Source password: Destination password: Connecting to f760cl1-rtp. Connecting to f820-rtp. f760cl1-rtp: CONNECT: Connection established. f820-rtp: CONNECT: Connection established. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: creating "/vol/vol0/../snapshot_for_ba ckup.3" snapshot. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Using subtree dump f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Date of this level 9 dump: Tue Mar 27 14:41:38 2001. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Date of last level 0 dump: Tue Mar 27 14:38:20 2001. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Dumping /vol/vol0/home/ to NDMP connec tion f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: mapping (Pass I)[regular files] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: mapping (Pass II)[directories] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: estimated 10274 KB. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: dumping (Pass III) [directories] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: dumping (Pass IV) [regular files] f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:35:38 2001: Begin increment al restore f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:35:39 2001: Reading directo ries from the backup f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:35:39 2001: Creating new fi les and directories. f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:35:39 2001: Writing data to files. f820-rtp: LOG: RESTORE: f820-rtp: LOG: Tue Mar 27 19:35:41 2001: Restoring NT AC Ls. f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: dumping (Pass V) [ACLs] f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: 10681 KB f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: DUMP IS DONE f760cl1-rtp: LOG: DUMP: f760cl1-rtp: LOG: Deleting "/vol/vol0/../snapshot_for_ba ckup.3" snapshot. f820-rtp: LOG: RESTORE: f820-rtp: LOG: RESTORE IS DONE f820-rtp: HALT: The operation was successful! Waiting for f760cl1-rtp to halt too. The transfer was successful, but the source filer hasn't halted yet. Elapsed time: 0 hours, 0 minutes, 45 seconds. f760cl1-rtp: HALT: The operation was successful! The transfer is complete. Elapsed time: 0 hours, 0 minutes, 46 seconds.

1 0

Re: Question on "vol copy"
by dmaloy＠atomaintl.com 24 May '01

24 May '01

Allen, The method that I have used in the past which I believe works better than vol copy is the tar command: mount both filesystems to your adminhost: mount tornado:/vol/users /tornado/vol/users mount tempest:/vol/vol0/users /tempest/vol/vol0/users cd to /tornado/vol/users and issue the tar command: tar -cf - . | (cd /tempest/vol/vol0/users ; tar -xvpf -) Doing this should also defrag the filesystems which I don't believe vol copy does...Someone can correct me here if I fell asleep during that part of the class. Don Maloy Intier Automotive Sr. CAD Administrator 19888 Haggerty Road Livonia, MI 48152 734.432.4418 "Allen, Pat" <pat(a)mbari.or To: "Toasters (E-mail)" <toasters(a)mathworks.com> g> cc: (bcc: Don Maloy/PDD/DORTEC) Subject: Question on "vol copy" 05/24/01 02:22 PM Hi all, I have an existing 740 (tornado) with two volumes - vol0 and users. I have a new 740 (tempest) with just vol0 and a qtree named "users". I want to copy all the user directories from torando:/vol/users to tempest:/vol/vol0/users in the easiest and quickest method possible. Both of the filers are connected via gig-ethernet to our main switch so using a filer-to-filer transfer would be the fastest. Do any of you know if the "vol copy" command can be used in this case. Can I specify that the destination is actually a qtree? The documentation for the vol command also says that the destination volume must be offline but that the root volume can't be taken offline. Is this a catch-22? Thanks for the help! --- Pat Allen (pat(a)mbari.org) Monterey Bay Aquarium Research Institute (MBARI) 7700 Sandholdt Rd, Moss Landing, CA 95039 (voice) 831-775-1724; (fax) 831-775-1620

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters