I'm looking for help on creating some powershell code that retrieves the current DACLs of a volume (or directory path) and stores it as a security descriptor.  I had come across this page on the web (http://www.craig-tolley.co.uk/2016/02/09/assigning-permissions-to-a-volume-through-the-netapp-powershell-toolkit/) and it guided me through applying new permissions using the OnTap Powershell toolkit - however I cannot devise a way to modify the code so that an ACE can be removed or added to the ACL (Security Descriptor).

I presume it's some combination of Get-NcFileDirectorySecurity and (New-NcFileDirectorySecurityNtfs or Add-NcFileDirectorySecurityNtfsDacl).  I've investigated all of the *NcFileDirectorySecurity* cmdlets, and only Get-NCFileDirectorySecurity appears to retrieve currently applied permissions, but it cannot be pipe'd into another cmdlet 😞

My larger objective is to build a WFA command that allows a user to add/remove an AD Group from their volume.   I've found the Powershell toolkit to be much quicker and straightforward than using (Get-Acl / Set-Acl)

connect-NcController $ClusterName

$volName = "vol_test_3"
$Vserver = "svm-lab-a"

Get-NcFileDirectorySecurity -Path "/$volName" -VserverContext $Vserver | New-NcFileDirectorySecurityNtfs -SecurityDescriptor $VolName     #this part doesn't work!   First cmdlet returns ACLs, but doesn't store it within SecurityDescriptor.

Get-NcFileDirectorySecurityNtfsDacl -SecurityDescriptor $volName -Vserver $vserver   #my output is {Administrators,Users,CREATOR OWNER, SYSTEM}.   I'm hoping to capture the DACLs of "/$VolName" - such as displayed by (Get-NcFileDirectorySecurity -Path "/$volName" -VserverContext $Vserver).acls

I am unable to apply the WFA 3.1P2 upgrade to an existing Win2012R2 WFA 3.1P1 system. I keep getting the below error no matter which user/pswd I enter for backing up. System has plenty of space (60GB, 35GB free). 

Ideas?

BTW -- When the install wizard asks for a user/pswd for backup is it asking for: A WFA local user (type=admin -or- type=backup)? A Win2012 local or AD user, admininstrator? Is it using this account or creating this account? Wording is vague so I've tried most all of the above.

Also, as the install finishes it presents the attached logfile for viewing which gives me no clues. Just the same error - an extract:

----- snippet -----

InstallShield 12:01:36: Registering Msi Server...
InstallShield 12:01:36: Invoking script function wfaTakeBackup
Custom Install Log INFORMATION:
Successfullt set regustry root key to HKEY_LOCAL_MACHINE.
Custom Install Log INFORMATION:
Install dir during upgrade INSTALLDIR=C:\Program Files\NetApp\WFA\
Custom Install Log INFORMATION:
szBackupDir=C:\Program Files\NetApp\
Custom Install Log INFORMATION:
Params to create Dir=C:\Program Files\NetApp\WFA-Backups
Custom Install Log ERROR: UPGRADE: Could not take backup of WFA DB during upgrade. Aborting upgrade.
InstallShield 12:07:44: Setup aborted
InstallShield 12:07:44: CallScriptFunctionFromMsiCA() ends, result 0x642
MSI (s) (DC!34) [12:07:44:338]: Leaked MSIHANDLE (559) of type 790531 for thread 2100

------------------

Dave,

I am new to Netapp and looking for a way to get the serial numbers on the disk shelves we have attached to our filers without a physical visit to our Co-lo's. we have a fas2240-2, V3240, and a fas3140?

We recently upgraded WFA to v5.1, and now when I try to export a workflow to a .dar file, I am getting the message "More than one pack can not be exported at a time".  I believe this always worked in v5.0, and only started after the upgrade.  Does anyone know why?

I tried creating my own pack, added a few workflows to that, and then attempted to export that pack, but I'm still getting the same message.

Hi folks

After upgrading WFA to version 5.1 my own command stopped working to send HTML as body. The problem is when I edit the command and save it, HTML will be removed while saving it.

Is there a workaround to not remove HTML code from the commands?

Thank you

Looking at running a POC of WFA. I see it comes as a .EXE download for Windows server and a .bin file. Is there no OVA/OVF for Vmware or the like?

Hello all,

Since 5.1 upgrade and switch to sectigo certificates, we have problems with all of our workflows.

They all fail with :

Cannot get credentials for cluster XXXXX

Cause : The server committed a protocol violation

Since we did WFA & Cluster certificates upgrades at the same time, we cannot say whether the problem comes from one or another.

I tried removing and adding back cluster credentials in WFA configuration, all successfully.

WFA is running on Windows Server 2012 Standard (upgrade from WFA previous..... previous... versions)

Any ideas ?

Thanks,

GS.

H there,  I recently installed NetApp Workflow Automation into our environment (v5.1.0.0.3) and I'm trying to import the SVM DR pack into this but getting error message "The version of .dar file used to import is 4.1.0.0.2. The supported WFA version from which a .dar file can be imported is 4.2 or later."

Any tips on resolving this or obtaining the correct versioned dar file? Cheers Ian

The intention with using the pack is to streamline testing SVM DR process in a bubble without actually initiating an SVM DR failover.

Trying to clone the Send email command and edit it. The clone works, but as soon as I try to change and save it, an error is thrown similar to below. The column number changes with different changes and attempts, but the error is consistent.

Unexpected character ('p' (code 112)): was expecting comma to separate Object entries at [Source: (ByteArrayInputStream); line: 1, column: 4696]

WFA Version: 5.1.0.0.2-B5596552

Adding LDAPs Servers to Authentication is not possible after Uprade to WFA5.1:

LDAP only works without any problems..

Also modifing existing entries does not work:

Anyone have the same problems?

I am having issues getting VCenter 6.5 added as a data source.

I have added the Datasource Script for VMware vCenter 6.0 version 1.2.0 dated 11/07/2017 pack.

When I attempt to add my vcenter as a data source, it returns the following error:

Could not get rest parameter host.
Cause: The underlying connection was closed: An unexpected error occurred on a receive.. An existing connection was forcibly closed by the remote host

I have verified the username and password I'm using are correct.

I can run remote PowerShell scripts against this VCenter from another host with PowerShell installed.

I also get a similar error when trying to run a simple create flex volume workflow on a filer.  Ther server.log repeats this error over and over:

command denied to user 'restricted'@'localhost' for table 'global_config'

Not sure if this is related.  If not, I'll break it into two different threads.

Any suggestions?

I've found several threads about home drive management packs, but nothing that seems compatible with WFA 5.1. Does anyone have such a pack?

Beth

Is there a way to trigger a worflow(WFA) from Unified Manager when an Alert is triggered?

if so, where can I find more details about triggering Workflows in Unified Manager

Hi,

I have developed a custom command in the WFA as below

param (
[parameter(Mandatory=$true, HelpMessage="Cluster IP address")]
[string]$Cluster,

[parameter(Mandatory=$true, HelpMessage="Storage Virtual Machine name")]
[string]$VserverName
)

# connect to controller
Connect-WfaCluster $Cluster

# create the export policy
Get-WFALogger -Info -message $("Getting status of Avscanner '" +$VserverName + "'")
Get-NcVscanConnection -VserverContext $VserverName -ErrorAction Stop

when i am testing it, this is executing successfully, but i am not getting any output as expected(status of vscan)

can someone please help me on this

i manually use vserver vscan connection-status show this command to get the status. 

With work flow automation, how to create a work flow to enable and disable vscan as there are no built in commands to create a work flow

commands i manually use(by logging in to CDOT) to enable/disable

vserver vscan enable <vservername>

vserver vscan disable <vservername>

If i have to create separate command, what parameters/objects should be taken in to consideration to  create it.

should it be in perl or powershell

@allanp 

All - after upgrading from WFA 4.2 to 5.0.1 - we have 1 datasource erroring out with the following. We currently use the "CUSTOM_SNAPSHOT" schema. We worked with NetApp PS Allan Parker.

@allanp - can you assist? Any help would be appreciated.

"Out of range value for column 'size_kb' at row 1 Query is: LOAD DATA INFILE 'C:/Program Files/NetApp/WFA/jboss/standalone/tmp/wfa/snapshot.csv' INTO TABLE wfa_staging.custom_snapshot_snapshot"

Fails with following error

Request failed: Exception calling "GetResponse" with "0" argument(s): "The remote server returned an error: (401) Unauthorized." Location: Row '1' step 'Invoke WFA Workflow'.

The value for "Credentials" parameter is "WFA-Loopback". It works in 4.1 but fails in WFA 5.

I changed the password also but that didn't resolved the issue.

Any help would be much appreciated.

Hello,

I'm trying to configure mail server in WFA configuration.

I'm typing the host server, then I'm launcing a test and this one is successful and I receive the email.

When I'm trying to aplly the new config by clicking to save, I receive an error: "server fault.refer to the log for more info".

The port 25 is opened and tested and alslo send test email is working.

Can you pls assit on this configuration?

Logs generated are attcached

Hi, 

I don't know if anyone else has expirenced this behaviour as well.

I had a fresh installed Windows server 2016, and installed the WFA 4.2 build (WFA-x64-V4.2.0.0.1-B4759965)

The installation was successful but the predefined account "admin" was not working when trying to access the WFA instance. 

I noticed that the use was never created in the table user within the database wfa.

I tried several ways to install it, but always came up with the same situation. 

The only hint i have is that i changed to a admin password that was less complex then pwgen gave me with the specific options i had in the CLI command.

Hi All,

I've a problem with a workflow after I've updated WFA version from 4.1 to 5.0.1.  An user input query which select a snapshot drops an error when I wanted to modify/save the workflow:

Addionally I have a Acquire data source" and “Wait for data source acquisition” fail error, but I will try this souliton suggested here: https://kb.netapp.com/app/answers/answer_view/a_id/1087616

But right now I'm not able to save it because of the above mentioned error.

What do you Guys suggest?

Many Thanks

Zoltan

I'm using WFA to create a new qtree in an existing volume, and then using the 'Set Quota' command. The problem I'm having is it's not activating the quota. Here's a screenshot of the issue after going to 'Storage', then 'Quotas'. 

You can see it show NA for the space usage. I have to go to the 'Quota Status on Volumes' tab and then click 'Deactivate' and 'Activate' for the volume where the quota resides. Then it will show correctly, like this:

How can I get WFA to handle this so I don't have to manually Deactivate/Activate?

Do we need to enable web client service on the Windows 2008 server where WFA is installed?

Please find the attached screenshot.

I've found various sample vco workflow that seems to use getUserInputValues from com.netapp.oncommand.wfa (that is the WFA vCO Plugin) but it seems that this action is missing from 3.1 version of the plugin.

Does anyone have it and could post it or give me some help on how to create it? 

It seems a really useful function that is missing.

I'm getting this error when I try to search and define an existing quota rule. Does anyone know what I'm doing wrong with my resource selection parameters shown below?

Workflow aborted.
No results were found. The following filters have returned empty results:
Select one Quota Rule by its natural keys
Location: 'Search or define' command > 'Quota_Rule_1' tab > 'quota' variable

Hello,

I am trying to connect WFADB to Graphana to pull out the execution logs from WFA and display them as graph in Grafana.

I understood that WFADB is not exposed to public only accesible within the installed server.

But Is there any way to connect to WFADB from external server?

Hello all smart people.

I'm trying to create a workflow to create a volume with NFS export.

But I'm stuck on the export rule part, the software isn't accepting my variable for clientmatch, ro, rw and superuser that Iam supposed to get from the export rule table.

It feel's like I have looked everywhere and it all looks like the default "create a clustered data ontap nfs volume", but it's not working.

Under here is how it's configured and what defenition I have in the workflow command:

The user input tab:

The workflow command defenitions:

getValueAt2D($ExportRuleSpecs,ExportRuleLoopIndex,1)
getValueAt2D($ExportRuleSpecs,ExportRuleLoopIndex,2)
getValueAt2D($ExportRuleSpecs,ExportRuleLoopIndex,3)
getValueAt2D($ExportRuleSpecs,ExportRuleLoopIndex,4)

This is how I test it via the preview function:

And the result is this error:

Failed to resolve expression 'getValueAt2D($ExportRuleSpecs,ExportRuleLoopIndex,1)'
Location: 'Create export rule' command > 'Export_Rule' tab > 'Create_Export_Rule' variable > 'clientmatch' property

I'd be glad for all help to get past this issue!

Regards Martin Sandell

When I try to export the workflow It gives error like below snapshot. What should be the problem with WFA. I tried restarting server but still it throws the same error

I have a workflow that returns this error on preview when I input more than three records in a table structure. It runs fine on three or less. I have an exact replica in my lab and that one is working fine. Does anyone know what the issue could be?

Has anyone tested using WFA in an ONTAP 9.3 (or higher) environment where administrative users all have multifactor authentication enabled?

I'm wondering if the built in Connect-WFACluster can support a public-key and password combination or if anyone has already customized the Connect-WFACluster (or more correctly the underlying POSH toolkit Connect-NcCluster command) to support the addition of the multifactor (publickey + password) authentication (ontapi using SAML)?     

Thanks

Colin

I’m trying to create a WFA filter that will give me the first available volume name with the lowest possible number . The already existing filters in WFA only gives the next available volume name/number after the existing ones. Let’s say that their already exist volumes with names like vol01, vol02, vol04, vol05 and vol06. The existing filters, for example the filter: “Filter volumes by name and numeric suffix in a specified Storage Virtual Machine”, will give the next volume name= vol07. Instead I would like to have the next volume name with the lowest possible number, that will be in this example= vol03 as there is a gap between vol02 and vol04.
Does any wfa/sql hacker has some good examples that could solve this problem for me?