Greetings,
I am having some difficulties accessing our filers with OnTap 7 via Linux. Perhaps someone in this list could point me in the right direction.
The version of Linux is Open Enterprise Server (minimal install) which makes it functionally equivalent to SuSE Linux Enterprise Server 9 SP1. It is running Kernel 2.6.5-155-smp and Samba 3.0.14a (originally 3.0.9 but updated when issues surfaced).
The filers I have tried accessing consist of FAS270s and a R200. They are using FlexVols and OnTap 7. Data shares are available via CIFS and NFS and are configured with NTFS Security Mode. The filers are members of an Active Directory Domain (Windows Server 2003 PDC).
I have a number of odd issues that have surfaced.
Issue 1; -------- smbmount returns permission denied and odd path presentation.
The Linux box is a member of the active directory domain. I can use wbinfo to list domain users and groups, as well as getent passwd and group. I am able to authenticate via kerberos, and can use smbmount against Windows server shares fine.
However, when I attempt to mount a share on a NetApp filer using mount -t smbfs -o username=someuser,workgroup=THEDOMAIN //NETAPP/SHARE /mnt/SHARE the operation appears to complete successfully. If I enter mount I can see the /mnt/SHARE as active. If I travese into the /mnt/SHARE folder and type ls I get a permission denied error. Syslog shows kernel: smb_lookup: find /// failed, error=-13. After some digging it appears that error=-13 is an EACCESS authentication issue. So I assumed I did not have permissions.
If I type ls -alFG from the /mnt folder in Linux there is no /mnt/SHARE directory. If I type ls there is one, and if I unmount /mnt/SHARE then type ls -alFG the directory is there.
In further troubleshooting I can browse the share from Windows, and from the same Linux workstation smbclient //NETAPP/SHARE -U someuser -W THEDOMAIN allows me to browse succesfully.
Issue 2; -------- /bin/ls: reading directory .: Cannot allocate memory
If I mount the same share via cifs (mount -t cifs -o user=someuser,domain=THEDOMAIN //NETAPP/SHARE /mnt/SHARE) the operation completes with no error. If I cd into /mnt/SHARE then type ls I get the error above (/bin/ls: reading directory .: Cannot allocate memory). If I continue to type ls it will eventually display the directory. If I cd into a subfolder the error returns.
Both of these operations work fine against a Windows 2003 Server share. Does anyone have any ideas? The messages file on the filer itself does not provide any significant error messages.
Thank you very much for any information anyone can provide.
Linux Config Files; -------------- smb.conf--
[global] workgroup = THEDOMAIN realm = THEDOMAIN.COM idmap uid = 10000-20000 idmap gid = 10000-20000 security = ADS netbios name = LINUXBOX password server = PDC.THEDOMAIN.COM encrypt passwords = yes log level = 5 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins server = 10.0.0.1 10.0.0.2 name resolve order = wins lmhosts hosts bcast winbind enum users = yes winbind enum groups = yes winbind use default domain = yes
krb5.conf--
[libdefaults] default_realm = THEDOMAIN.COM
[realms] THEDOMAIN.COM = { kdc = pdc.thedomain.com }
[domain_realm] .thedomain.com = THEDOMAIN.COM
[logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log
[appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false }
Ryan,
Regarding Issue 1; In OnTab 7 CIFS SMB signing is by default enabled (Network Appliance Field Alert Notice #248 June 24, 2005)
You 'mount -t smbfs' will not function properly with this feauture enabled.
To solve this problem you can either; - disable smb signing : options cifs.disable_server_smbsign on or - use the 'mount.cifs' command to mount your shares under Linux.
Good luck,
Miklas
On Tue, 2005-08-02 at 08:09 -0400, Ryan Kather wrote:
Greetings,
I am having some difficulties accessing our filers with OnTap 7 via Linux. Perhaps someone in this list could point me in the right direction.
The version of Linux is Open Enterprise Server (minimal install) which makes it functionally equivalent to SuSE Linux Enterprise Server 9 SP1. It is running Kernel 2.6.5-155-smp and Samba 3.0.14a (originally 3.0.9 but updated when issues surfaced).
The filers I have tried accessing consist of FAS270s and a R200. They are using FlexVols and OnTap 7. Data shares are available via CIFS and NFS and are configured with NTFS Security Mode. The filers are members of an Active Directory Domain (Windows Server 2003 PDC).
I have a number of odd issues that have surfaced.
Issue 1;
smbmount returns permission denied and odd path presentation.
The Linux box is a member of the active directory domain. I can use wbinfo to list domain users and groups, as well as getent passwd and group. I am able to authenticate via kerberos, and can use smbmount against Windows server shares fine.
However, when I attempt to mount a share on a NetApp filer using mount -t smbfs -o username=someuser,workgroup=THEDOMAIN //NETAPP/SHARE /mnt/SHARE the operation appears to complete successfully. If I enter mount I can see the /mnt/SHARE as active. If I travese into the /mnt/SHARE folder and type ls I get a permission denied error. Syslog shows kernel: smb_lookup: find /// failed, error=-13. After some digging it appears that error=-13 is an EACCESS authentication issue. So I assumed I did not have permissions.
If I type ls -alFG from the /mnt folder in Linux there is no /mnt/SHARE directory. If I type ls there is one, and if I unmount /mnt/SHARE then type ls -alFG the directory is there.
In further troubleshooting I can browse the share from Windows, and from the same Linux workstation smbclient //NETAPP/SHARE -U someuser -W THEDOMAIN allows me to browse succesfully.
Issue 2;
/bin/ls: reading directory .: Cannot allocate memory
If I mount the same share via cifs (mount -t cifs -o user=someuser,domain=THEDOMAIN //NETAPP/SHARE /mnt/SHARE) the operation completes with no error. If I cd into /mnt/SHARE then type ls I get the error above (/bin/ls: reading directory .: Cannot allocate memory). If I continue to type ls it will eventually display the directory. If I cd into a subfolder the error returns.
Both of these operations work fine against a Windows 2003 Server share. Does anyone have any ideas? The messages file on the filer itself does not provide any significant error messages.
Thank you very much for any information anyone can provide.
Linux Config Files;
smb.conf--
[global] workgroup = THEDOMAIN realm = THEDOMAIN.COM idmap uid = 10000-20000 idmap gid = 10000-20000 security = ADS netbios name = LINUXBOX password server = PDC.THEDOMAIN.COM encrypt passwords = yes log level = 5 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins server = 10.0.0.1 10.0.0.2 name resolve order = wins lmhosts hosts bcast winbind enum users = yes winbind enum groups = yes winbind use default domain = yes
krb5.conf--
[libdefaults] default_realm = THEDOMAIN.COM
[realms] THEDOMAIN.COM = { kdc = pdc.thedomain.com }
[domain_realm] .thedomain.com = THEDOMAIN.COM
[logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log
[appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false }
*************************************************************************************************************
Op deze e-mail is een disclaimer van toepassing, ga naar http://www.multikabel.nl/emaildisclaimer
A disclaimer is applicable to this email, please refer to http://www.multikabel.nl/emaildisclaimer
*************************************************************************************************************
Miklas,
Regarding Issue 1; In OnTab 7 CIFS SMB signing is by default enabled (Network Appliance Field Alert Notice #248 June 24, 2005)
You 'mount -t smbfs' will not function properly with this feauture enabled.
To solve this problem you can either;
- disable smb signing : options cifs.disable_server_smbsign on
Very interesting. I will try this immediately.
or
- use the 'mount.cifs' command to mount your shares under Linux.
mount.cifs fails with unable to allocate memory errors, which I elaborated on in my initial post. I do not receive these errors against Windows Server 2000 or 2003 shares.
Brief Explanation: If I type ls from a directory mounted with mount.cifs I get the could not allocate memory error. If I continue to type ls, eventually it lists the directory. I can create and copy files, but any subdirectory I traverse to, immediately returns that error again. If I wait long enough as well without activity the error returns.
Good luck,
Thank you. Though at this point, it's looking like NFS may be the answer. The filesystem rights aren't presented the same, but they appear good enough. Apparently NFS is a much faster as well.. which would help a great deal.
Ryan.
On Tue, 2005-08-02 at 08:09 -0400, Ryan Kather wrote:
Greetings,
I am having some difficulties accessing our filers with OnTap 7 via Linux. Perhaps someone in this list could point me in the right direction.
The version of Linux is Open Enterprise Server (minimal install) which makes it functionally equivalent to SuSE Linux Enterprise Server 9 SP1. It is running Kernel 2.6.5-155-smp and Samba 3.0.14a (originally 3.0.9 but updated when issues surfaced).
The filers I have tried accessing consist of FAS270s and a R200. They are using FlexVols and OnTap 7. Data shares are available via CIFS and NFS and are configured with NTFS Security Mode. The filers are members of an Active Directory Domain (Windows Server 2003 PDC).
I have a number of odd issues that have surfaced.
Issue 1;
smbmount returns permission denied and odd path presentation.
The Linux box is a member of the active directory domain. I can use wbinfo to list domain users and groups, as well as getent passwd and group. I am able to authenticate via kerberos, and can use smbmount against Windows server shares fine.
However, when I attempt to mount a share on a NetApp filer using mount -t smbfs -o username=someuser,workgroup=THEDOMAIN //NETAPP/SHARE /mnt/SHARE the operation appears to complete successfully. If I enter mount I can see the /mnt/SHARE as active. If I travese into the /mnt/SHARE folder and type ls I get a permission denied error. Syslog shows kernel: smb_lookup: find /// failed, error=-13. After some digging it appears that error=-13 is an EACCESS authentication issue. So I assumed I did not have permissions.
If I type ls -alFG from the /mnt folder in Linux there is no /mnt/SHARE directory. If I type ls there is one, and if I unmount /mnt/SHARE then type ls -alFG the directory is there.
In further troubleshooting I can browse the share from Windows, and from the same Linux workstation smbclient //NETAPP/SHARE -U someuser -W THEDOMAIN allows me to browse succesfully.
Issue 2;
/bin/ls: reading directory .: Cannot allocate memory
If I mount the same share via cifs (mount -t cifs -o user=someuser,domain=THEDOMAIN //NETAPP/SHARE /mnt/SHARE) the operation completes with no error. If I cd into /mnt/SHARE then type ls I get the error above (/bin/ls: reading directory .: Cannot allocate memory). If I continue to type ls it will eventually display the directory. If I cd into a subfolder the error returns.
Both of these operations work fine against a Windows 2003 Server share. Does anyone have any ideas? The messages file on the filer itself does not provide any significant error messages.
Thank you very much for any information anyone can provide.
Linux Config Files;
smb.conf--
[global] workgroup = THEDOMAIN realm = THEDOMAIN.COM idmap uid = 10000-20000 idmap gid = 10000-20000 security = ADS netbios name = LINUXBOX password server = PDC.THEDOMAIN.COM encrypt passwords = yes log level = 5 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins server = 10.0.0.1 10.0.0.2 name resolve order = wins lmhosts hosts bcast winbind enum users = yes winbind enum groups = yes winbind use default domain = yes
krb5.conf--
[libdefaults] default_realm = THEDOMAIN.COM
[realms] THEDOMAIN.COM = { kdc = pdc.thedomain.com }
[domain_realm] .thedomain.com = THEDOMAIN.COM
[logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log
[appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false }
Op deze e-mail is een disclaimer van toepassing, ga naar http://www.multikabel.nl/emaildisclaimer
A disclaimer is applicable to this email, please refer to http://www.multikabel.nl/emaildisclaimer
-
Miklas Laan -
Ryan Kather