Jason;

 

You have to put the AV server account in the “Backup Operators” group. I ran into exactly this same problem a couple days ago and wrote a procedure paper that I submitted to NetApp on how to do it.

 

There’s training material that hints how to do it, but it’s not quite right. The docs that ship with the filers imply it can be done from the filer command line, but this is not correct. Virus scanning is a CIFS-only procedure, so you need to add the CIFS account on the AV server to the captive “Backup Operators” group on the filer.  You must have an administrative account in your domain to do the process. Here’s the overall summary:

 

-          be admin

-          add the domain-based AV account to the backup group on the filer

-          add the domain-based AV account to the backup group on the AV server

-          restart the AV service on the AV server

-          the AV server should automatically “register” with the server and start running

 

I’ll send you the HOWTO if you want to see it. It goes through step-by-step and shows how to do it with screen prints.

 

JKB

 

-----Original Message-----
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Palmer, Jason (EMEA)
Sent: Thursday, July 22, 2004 12:59 PM
To: 'toasters@mathworks.com'
Subject: Trend AV with Filers

 

 

Hi -

We are currently having problems with ou virus scan servers de registering with the filers...

Extract from Syslogs...

Tue Jul 20 03:00:00 GMT [<filer>: kern.uptime.filer:info]:   3:00am up 19:03 0 NFS ops, 4955185 CIFS ops, 46 HTTP ops, 0 DAFS ops, 0 FCP ops, 0 iSCSI ops

Tue Jul 20 03:01:33 GMT [<filer>: Auth08:warning]: Cannot connect to server. Session setup error: Called name not present (0x82)

Tue Jul 20 03:02:37 GMT [<filer>: Auth01:warning]: Cannot connect to server. Socket connect error: Resource temporarily unavailable

Tue Jul 20 03:03:37 GMT [<filer>: Auth05:warning]: Cannot connect to server. Socket connect error: Resource temporarily unavailable

Tue Jul 20 03:04:37 GMT [<filer>: Auth00:warning]: Cannot connect to server. Socket connect error: Resource temporarily unavailable

Tue Jul 20 03:05:37 GMT [<filer>: Auth02:warning]: Cannot connect to server. Socket connect error: Resource temporarily unavailable

Tue Jul 20 03:06:37 GMT [<filer>: Auth03:warning]: Cannot connect to server. Socket connect error: Resource temporarily unavailable

Tue Jul 20 03:07:37 GMT [<filer>: Auth09:warning]: Cannot connect to server. Socket connect error: Resource temporarily unavailable

Tue Jul 20 03:12:57 GMT [<filer>: vscan.server.connecting.disconnect:info]: CIFS: Vscan server <Scanner> deregistered and will be removed from the list of available vscan servers.

Tue Jul 20 03:12:57 GMT [<filer>: OffloadWorker06:info]: Connection with <Scanner> terminated
Tue Jul 20 03:12:57 GMT [<filer>: vscan.dropped.connection:warning]: CIFS: Virus scan server <Scanner> (123.456.789.123) has disconnected from the filer.

Tue Jul 20 03:12:57 GMT [<filer>: vscan.server.connectedNone:warning]: CIFS: Virus scanning is enabled but no vscan (anti-virus) servers are connected to the filer.

Tue Jul 20 03:13:27 GMT [<filer>: vscan.server.connectedNone:warning]: CIFS: Virus scanning is enabled but no vscan (anti-virus) servers are connected to the filer.

Tue Jul 20 04:00:00 GMT [<filer>: kern.uptime.filer:info]:   4:00am up 20:03 0 NFS ops, 5024835 CIFS ops, 46 HTTP ops, 0 DAFS ops, 0 FCP ops, 0 iSCSI ops

There is a bug note (Bug ID: 81237) on the NOW site which states 'This is believed to be a problem with a vendor's anti-virus software.'

Has anyone else had these issues ?  If so, is there a work around or a fix ?

Thanks,

Jason
-----------------------------------
Jason Palmer <Team Leader>
Messaging & Storage Implementation
MCI [EMEA]
-----------------------------------
[e]:  jason.palmer@uk.mci.com

[i]:   http://www.mci.com/uk
-----------------------------------