Anyone using snaplock to protect against rogue admin? Good/bad/useless?
(Compared to offsiting tapes)
_____
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Merrick, Jeffrey Sent: Thursday, January 27, 2005 8:48 AM To: aaron hirsch; toasters@mathworks.com Subject: RE: SnapLock Questions
The man page for the vol command specifies that one can use suffixes of d/m/y for days/months/years when specifying the volume retention period parameters.
A Snaplock Enterprise volume doesn't let an admin "expire the volume" but it does let an admin destroy it.
From a Linux system, you can see the atime (access time of a file, which is overloaded to keep the retention date if the file is on a WORM volume) by mounting the file system and running "stat <filename>"
From Solaris, mount the file system and run "ls -lu <filename>"
Jeff
-----Original Message----- From: aaron hirsch [mailto:aaronh@uptime.net] Sent: Thursday, January 27, 2005 7:01 AM To: toasters@mathworks.com Subject: RE: SnapLock Questions
Rene,
SnapLock comes in two versions, Compliance and Enterprise. I'm not sure if you can change either to day/hours/minutes, but the Enterprise version is MUCH more flexible and will allow you, as admin, to expire the volume at any given time you choose.
As for the outside software I'm not sure...
-----Original Message----- From: Rene Koehnen-Wiesemes [mailto:Rene.Koehnen-Wiesemes@morse.com] Sent: Thursday, January 27, 2005 8:06 AM To: 'toasters@mathworks.com' Subject: SnapLock Questions
Hello,
with the new ONTAP 7G (7.0RC5) release I've found new vol options parameters:
· vol options volume_name snaplock_minimum_retention 3y · vol options volume_name snaplock_default_period min · vol options volume_name snaplock_maximum_period 10y
Is it possible to decrease these values for test purpose to month or days e.g.:
· vol options volume_name snaplock_minimum_retention 3d · vol options volume_name snaplock_default_period min · vol options volume_name snaplock_maximum_period 10d
Additional I need to know if there is a software outside to set the "Last Access Date" metadata of files (the Retention Date for snaplock!) on Solaris or Windows based systems?
Thanks for your help.
René
You bet. SnapLock Compliance (SLC) is typically used as part of a regulatory compliant archival solution. SLC trust no one including good admins who sometimes become rogue ones. Customers seeking long term protection of digital assets can use SnapLock Enterprise (SLE) and its trusted storage admin model. The trusted storage admin in SnapLock Enterprise can destroy the volume in its entirety but still not tamper with any file contained in the volume.
-chris
--- Michael Christian mchristi@yahoo-inc.com wrote:
Anyone using snaplock to protect against rogue admin? Good/bad/useless?
(Compared to offsiting tapes)
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Merrick, Jeffrey Sent: Thursday, January 27, 2005 8:48 AM To: aaron hirsch; toasters@mathworks.com Subject: RE: SnapLock Questions
The man page for the vol command specifies that one can use suffixes of d/m/y for days/months/years when specifying the volume retention period parameters.
A Snaplock Enterprise volume doesn't let an admin "expire the volume" but it does let an admin destroy it.
From a Linux system, you can see the atime (access time of a file, which is overloaded to keep the retention date if the file is on a WORM volume) by mounting the file system and running "stat <filename>"
From Solaris, mount the file system and run "ls -lu <filename>"
Jeff
-----Original Message----- From: aaron hirsch [mailto:aaronh@uptime.net] Sent: Thursday, January 27, 2005 7:01 AM To: toasters@mathworks.com Subject: RE: SnapLock Questions
Rene,
SnapLock comes in two versions, Compliance and Enterprise. I'm not sure if you can change either to day/hours/minutes, but the Enterprise version is MUCH more flexible and will allow you, as admin, to expire the volume at any given time you choose.
As for the outside software I'm not sure...
-----Original Message----- From: Rene Koehnen-Wiesemes [mailto:Rene.Koehnen-Wiesemes@morse.com] Sent: Thursday, January 27, 2005 8:06 AM To: 'toasters@mathworks.com' Subject: SnapLock Questions
Hello,
with the new ONTAP 7G (7.0RC5) release I've found new vol options parameters:
� vol options volume_name snaplock_minimum_retention 3y � vol options volume_name snaplock_default_period min � vol options volume_name snaplock_maximum_period 10y
Is it possible to decrease these values for test purpose to month or days e.g.:
� vol options volume_name snaplock_minimum_retention 3d � vol options volume_name snaplock_default_period min � vol options volume_name snaplock_maximum_period 10d
Additional I need to know if there is a software outside to set the "Last Access Date" metadata of files (the Retention Date for snaplock!) on Solaris or Windows based systems?
Thanks for your help.
Ren�
-- Dipl.-Ing. Ren� K�hnen-Wiesemes Senior IT Specialist
Morse GmbH Oskar-Messter-Stra�e 13 D-85737 Ismaning
Tel: +49 (0)89 94 49 40-228 Mobil: +49 (0) 172 829 0367 Fax: +49 (0)89 94 49 40-110 mailto:rene.koehnen-wiesemes@morse-techsol.de <www.morse.de>
Rene,
To set the last access time attribute in Unix you can use the touch -a command (touch -a MMDDhhmmYY on most platforms). On Windows there isn't a native utility to do this. We do have an unsupported utility for Windows to set the retention date called snaplocker. Your NetApp sales team should be able to provide a copy to you if interested.
-chris
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Merrick, Jeffrey Sent: Thursday, January 27, 2005 8:48 AM To: aaron hirsch; toasters@mathworks.com Subject: RE: SnapLock Questions
The man page for the vol command specifies that one can use suffixes of d/m/y for days/months/years when specifying the volume retention period parameters.
A Snaplock Enterprise volume doesn't let an admin "expire the volume" but it does let an admin destroy it.
From a Linux system, you can see the atime (access time of a file, which is overloaded to keep the retention date if the file is on a WORM volume) by mounting the file system and running "stat <filename>"
From Solaris, mount the file system and run "ls -lu <filename>"
Jeff
-----Original Message----- From: aaron hirsch [mailto:aaronh@uptime.net] Sent: Thursday, January 27, 2005 7:01 AM To: toasters@mathworks.com Subject: RE: SnapLock Questions
Rene,
SnapLock comes in two versions, Compliance and Enterprise. I'm not sure if you can change either to day/hours/minutes, but the Enterprise version is MUCH more flexible and will allow you, as admin, to expire the volume at any given time you choose.
As for the outside software I'm not sure...
-----Original Message----- From: Rene Koehnen-Wiesemes [mailto:Rene.Koehnen-Wiesemes@morse.com] Sent: Thursday, January 27, 2005 8:06 AM To: 'toasters@mathworks.com' Subject: SnapLock Questions
Hello,
with the new ONTAP 7G (7.0RC5) release I've found new vol options parameters:
� vol options volume_name snaplock_minimum_retention 3y � vol options volume_name snaplock_default_period min � vol options volume_name snaplock_maximum_period 10y
Is it possible to decrease these values for test purpose to month or days e.g.:
� vol options volume_name snaplock_minimum_retention 3d � vol options volume_name snaplock_default_period min � vol options volume_name snaplock_maximum_period 10d
Additional I need to know if there is a software outside to set the "Last Access Date" metadata of files (the Retention Date for snaplock!) on Solaris or Windows based systems?
Thanks for your help.
Ren�
-- Dipl.-Ing. Ren� K�hnen-Wiesemes Senior IT Specialist
Morse GmbH Oskar-Messter-Stra�e 13 D-85737 Ismaning
Tel: +49 (0)89 94 49 40-228 Mobil: +49 (0) 172 829 0367 Fax: +49 (0)89 94 49 40-110 mailto:rene.koehnen-wiesemes@morse-techsol.de <www.morse.de>
-
Christopher Lueth -
Michael Christian