toasters

toasters@lists.teaparty.net

13529 discussions

SSH Public Key Authentication in Clustered Data OnTap
by Alexander Griesser 15 Jul '14

15 Jul '14

Hey there, I've tried to set up SSH public key authentication on a new cluster pair (8.2.1P1) today and failed miserably - has anyone configured that as of yet? What I've done (and what seems to be the correct procedure) is: security login create -username admin -application ssh -authmethod publickey -role admin -vserver CLUSTERNAME security login publickey create -vserver CLUSTERNAME -username admin -index 0 -publickey "ssh-rsa AAAAB3....C8=" -comment ANEXIA The resulting configuration looks like that: ::> security login show -application ssh Vserver: CLUSTERNAME Authentication Acct UserName Application Method Role Name Locked ---------------- ----------- -------------- ---------------- ------ admin ssh password admin no admin ssh publickey admin - 2 entries were displayed. ::> security login publickey show Vserver: CLUSTERNAME UserName: admin Index: 0 Public Key: ssh-rsa AAAAB3....C8= Fingerprint: a7:08:e1:0d:22:ea:59:97:f9:3e:5c:1d:2a:84:ec:40 Bubblebabble fingerprint: xokel-...-soxex Comment: ANEXIA But when I try to login using username "admin" and my private key (which works on hundreds of other boxes and also on all of my 7-mode filers), the filer just seems to refuse my key and prompts me for the password. Also (maybe unrelated), when logging in via SSH, I do always get this warning message: Could not chdir to home directory /var/home/admin: No such file or directory Getting this on two Clustered Data Ontap systems so far, both running 8.2.1. Thanks, Alexander Griesser System-Administrator ANEXIA Internetdienstleistungs GmbH E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

4 7

Re: SSH Public Key Authentication in Clustered Data OnTap
by Daniel Burkland 14 Jul '14

14 Jul '14

Alexander, The issue you are experiencing with the "/var/home/admin" error message is related to Bug #820968. To resolve this issue perform the following on each node in the cluster: 1. Login to systemshell: *Note:* You might need to unlock the diag account. For more information, see 1012484 <https://kb.netapp.com/support/index?page=content&id=1012484>: Data ONTAP 8: How to unlock the diag user account ::> set diag ::*> systemshell -node <node_name> % cd /var/home % sudo mkdir diag % sudo mkdir admin % sudo chown diag:nogroup diag % sudo chown admin:nogroup admin Dan Burkland Sent from my mobile device, please excuse typos.

2 1

cDOT deployment: racks layout planning
by Momonth 11 Jul '14

11 Jul '14

Hi All, I'm looking at deploying cDOT cluster based on "FAS 8040 HA" from scratch (to serve both NAS + SAN environment), current plan is to start with 2 HA pairs ie 4 nodes, each node: DS4246 24*4TB SATA x3 DS2246 24*1.2TB SAS x5 and then continue to grow with another HA pair ie + 2 more nodes. I'd also like to plan for 4th HA pair for purposes of (possible) HW upgrades. For each HA pair I plan to allocate two racks (a standard 42U rack). I wonder if anyone has had similar deployment to see what was racks layout design. "FAS 8040 HA" is a single chassis two controllers appliance so it has to be in one rack. How to distribute shelves, given that I plan to add both SAS and SATA shelves later on. Also what would be the best place to put 10Gb cluster interconnect switches? Cheers, Vladimir

4 5

Re: Re: LACP oddness
by isaac.gonzalez 02 Jul '14

02 Jul '14

Hi guys, Have you solved this problem? I've the same problem since the upgrade to 8.2 and Cisco switches. Have you tried disabling fast path ? ip.fastpath.enable OFF I tried to disable it, but the problem continues, I've opened a case with Netapp. Isaac

1 0

"Best" way to create and manage SnapVault relationships?
by Ray Van Dolson 02 Jul '14

02 Jul '14

I have a FlexVol on Filer1 and a second filer ("Filer2") at a remote site. Filer2 already has aggregates and volumes carved out on it, but does have an aggregate with quite a bit of free space. I'd like to SnapVault my volume on Filer1 to Filer2 as well as create some snapshot retention schedules on both sides. Curious what all of you out there see as your preferred way to set this up: - CLI - System Manager - Management Console (Protection Manager) -- this is the thick client - Operations Manager (web interface -- formerly DFM?) The Management Console route seems to possibly be the most elegant, but is also fairly confusing. And it seems like it wants to work with unprovisioned storage rather than storage which has already been carved up and is in active use. Thanks, Ray

2 1

vol lang undefined
by Philbert Rupkins 29 Jun '14

29 Jun '14

Hello Toasters, We inherited an array with vol0's volume language set to undefined. As a result, most of this array's user volumes also do not have vol lang defined. This includes both NFS and CIFS shares. There are currently no problems but we would like to align ourselves with best practices. Generally speaking, vol lang should be set to eng_us across the environment. A couple questions in regard to making the change from 'undefined' to 'en_us': 1. What does a volume language of 'undefined' effectively mean? Does NetApp default to a language code (POSIX, en_us, other?) when the volume language is set to undefined? 2. Can the volume language be safely changed? In the event that files are inaccessible after changing the volume language, can we simply revert the vol lang setting back to 'undefined' in order to again allow access to the files? I ask the second question because I see the documentation states that changing the volume language of an existing volume may render some files inaccessible. Thanks in advance for any insight you have into this matter! Any other suggestions on handling this appropriately would be appreciated! -Phil

3 4

3rd party support for 'older' systems
by Paul Letta 25 Jun '14

25 Jun '14

Anyone out there have recommendations for 3rd party support once a filer gets 4+yr old and/or EOL? HW and phone support I can see being pretty easy to provide.... but how does s/w support go.. I guess no s/w contract with NetApp...then no s/w updates? Just wondering what others have done. Thanks, Paul

2 1

Install Wildcard Certificate for OnCommand Unified Manager / Performance Manager
by Alexander Griesser 21 Jun '14

21 Jun '14

Hey, has anyone ever tried to install a wildcard certificate for OCUM or OCPM? The only options I have is to download a CSR from the appliance but there does not seem to be a way to upload my own SSL key + certificate. Best, Alexander Griesser System-Administrator ANEXIA Internetdienstleistungs GmbH Telefon: +43-5-0556-320 Telefax: +43-5-0556-500 E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

1 0

CLI method to get shelf PSU fru
by Jordan Slingerland 20 Jun '14

20 Jun '14

I cannot seem to find a CLI method to get the FRU of the PSU's in a DS14-Mk4-FC shelf. 8.1.4P1 7m. Any ideas? For the seventh consecutive year, Independent Health was named one of the best companies to work for in New York State. Go to www.independenthealth.com to view careers and available positions. We are an Equal Opportunity Employer. CONFIDENTIALITY NOTICE: This e-mail and its attachments (collectively referred to as "e-mail") may contain confidential information that is privileged and protected from disclosure by Federal and State confidentiality laws, rules or regulations. This e-mail is intended for the designated addressee only. If you are not the designated addressee, you are notified that any disclosure, copying or distribution of this e-mail may be unlawful and may subject you to legal consequences. If you have received this e-mail in error, please contact me immediately by telephone at (716) 631 - 3001 and delete the e-mail from your computer immediately. Thank you for your attention.

2 2

v-series lun ownership
by Svein Harang 18 Jun '14

18 Jun '14

Hi everybody, I came across a strange problem today, and all the well-meaning people on google and netapp community could not provide an answer as far as I could see. Nutshell: New environment, first v-series, fabric metro cluster. After assigning the disks wrongly the first time (missing -p <pool>) I’ve tried "disk assign <disk_id> -o unowned ” without luck, I did a "disk remove_ownership”. It worked, sort of. There is one LUN left, which both controllers claim that the other controller own. Since the controllers can’t unown luns they don’t own, I am finding myself in a bit of a pickle. Has anyone come across this situation before? -- Sincerely / Mvh Svein Harang <sh(a)basefarm.com> +47 4000 4200 Direct: +47 417 36 019

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters