It appears that auto-snapshots-enable is "non-modifiable".   <volume-snapshot-attributes> <!--If true, enable automatic snapshots on the volume. <p> The default value is true. <p> Attributes: non-creatable, non-modifiable--> <auto-snapshots-enabled></auto-snapshots-enabled> <!--If true, enable the visible '.snapshot' directory that is normally present at system internal mount points. This value also turns on access to all other '.snapshot' directories in the volume. <p> The default value is true. <p> Attributes: non-creatable, modifiable--> <snapdir-access-enabled></snapdir-access-enabled> </volume-snapshot-attributes> That at least explains why it didnt change it, not sure if there is an alternate api call for it though. ... View more

I would first try to generate a new certificate on one of the failing systems and make sure it's key length is the max (2048 i think).  The python standard libraries disabled handshake's with key lengths shorter than 1024 (i believe that theres a bug where it actually only works with 2048 key lengths) a few years ago; version i think was somewhere around 2.6.9 or so.   You may also need to add to the default cipher list as i mentioned in my post above.  I believe the order maters.   During my troubleshooting i has also installed the following packages, though i cant confirm if they contributed to my success:     pip install requests[security] urllib3     As a fall back, i have a python 2.6.6 install that i use to verify its not something more than the cert.  Hope that helps. ... View more

I have found two user tables in the db using: dfm database query run "SELECT * FROM sysobjects" name:      perfClientStatCollections type:      U userstat:  0 name:      perfClientStats type:      U userstat:  0 ... still not sure how the data is stored though since client IPs are not an object in DFM... ... View more

Hi, i know this is an old thread but did you happen to get this to work? I can ssh using 'DOMAIN\username'@netappfiler with just cifs setup and adding domain users to the local admin group.  Trying to get this to work with just username@netapp though. Oddly, with just cifs setup, i can add the option "options ldap.ADdomain <domainname>" and successfully use "getXXbyYY getpwbyname_r username" WITHOUT adding ldap.name, ldap.servers or ldap.base. ... View more

aborzenkov wrote: Just remember that "reboot" is required after setting 'vol options <volname> root'.  Doing a failover won't suffice. It will. cf takeover/cf giveback is enough. It provides for moving root volume almost non-disruptively (almost because existing NFS mounts will still become stale and need remount) I'm echoing what a netapp installer told me just last week.  But to be honest i'd take your word over the installer's ... View more

Just remember that "reboot" is required after setting 'vol options <volname> root'.  Doing a failover won't suffice. ... View more

Adai, I've never noticed the "Storage Controller Tools"... Took me a while to figure out how to get that to show up but i found it.  Thanks everyone, between the two tools I have a solution for sure.  If it didnt hijack this thread i'd mark as answered ... View more

Thanks! I'll check out the guide. ... View more

I have config advisor installed and only recently began using to check filer health.  I remember something about checking config files but a quick glance at it and i dont see any mention of /etc/rc or /etc/hosts... something in 3.0.1 maybe? ... View more

I understand what you're saying.  The problem is that NetApp offers no method(that im aware of) to check and/or verify /etc/rc and /etc/hosts file health, history and comparison with it's HA pair. At least 80% of our failed fail-over attempts have been due to misconfigured /etc/rc and /etc/hosts files.  After multiple failures I've had to make it a habit to manually compare those two files between HA pairs prior to a maintenance, which doesn't just consist of comparing between the pair, but verifying all active interfaces, vifs etc.. exist in the rc file.  Also, I actually have matching /etc/rc files between HA pairs (minus the hostname).  So matching configs between the two is absolutely critical in my environment. OnCommand Config Mgmt just seems like a fitting place to offer some historical and automated checks between HA pairs... Perhaps this should be a separate function in config mgmt and not built-in to what already exists.  Maybe an additional area called HA or HA Pair Config Management?  If it could be intelligent enough to check that a filer's active configuration exists in /etc/rc and /etc/hosts that would save us a LOT of headaches.  It could also help restore faith in System Manager... when it's fixed. I imagine a good comparision check could work like this: HA pair1 Compare /etc/rc (ignore hostname) filer 1 Compare etc/rc with running config Verify anything in /etc/rc with `hostname` has an entry in /etc/hosts filer 2 Compare etc/rc with running config Verify anything in /etc/rc with `hostname` has an entry in /etc/hosts I did have time to review my post, let me know if this doesn't make sense. Thanks, Matt ... View more

We're referring to Operations Manager AKA DFM, not Systems Manager. /rant For the record, i reported system manager causing /etc/rc and /etc/hosts file corruption late last year.  It was easy to replicate the issue even from a clean install of windows and yet, doesn't show up as a bug until now... bad bad bad.  There's also a corruption issue while using ssh to connect to RLM port to paste a config file using wrfile. ... View more

Ok, so that explains why i still see the option in oncommand and in /etc/registry. All right, so it was available in 7.3.x, 'not available' in 8.0.x and available again in 8.1.x.  Thanks for the help! Also, saw this in the 8.0.3 release notes: FTPS is not supported File Transfer Protocol over Secure Socket Layer (FTPS) was introduced in a previous Data ONTAP release, but it is not supported in the Data ONTAP 8.0 release family. If you enabled FTPS in a previous Data ONTAP release family, it is no longer available as an option for file access when you run the Data ONTAP 8.0 release family. SFTP is not supported Secure File Transfer Protocol (SFTP) was introduced in a previous Data ONTAP release, but it is not supported in the Data ONTAP 8.0 release family. If you enabled SFTP in a previous Data ONTAP release family, it is no longer available as an option for file access when you run the Data ONTAP 8.0 release family. ... View more

Interesting, I just realized that theres only two mentions of SFTP in 8.0 7-Mode File Access and Protocols Management Guide but in the 7.3.3 guide is has complete setup instructions.  So i'm assuming it was removed in 8.0 and re-added in 8.1?  ... View more

Bumping your question because of the following: why are /etc/rc and /etc/hosts not included? OnCommand Pulls options.sftp but when i try and query those options from command line, they're missing.  Even tried under priv set advanced. 2 was answered in my other post. SFTP is not available in 8.0.x. ... View more

I recently had a pair of 3140s BOTH panic due to the PAM modules.  Support pointed us at this bug id and workaround to reduce the ext-cache-tagstore-oversize-percent to 50.  I believe default is 75. http://support.netapp.com/cgi-bin/bol?Type=Detail&Display=528631 Whats confusing is that the workarounds are recommended for versions that are also in the 'fixed in version' section... Yesterday we had a meeting with our var and netapp reps and we mentioned this problem as we have mostly 3140s.  They said that with PAM modules we will not be able to upgrade to 8.1 due to the bottom line increased system resource utilization.  They did mention a version where it will be supported but i cant remember which one... want to say 8.2 (i think it correlated to the new wafl version). ... View more

You might catch it in the auditing logs.  You have to turn it on in ontap and on the share.  Check the docs, it's been a while since i've messed with auditing. ... View more

You're correct, I'm confusing 8.1 with what ever future version does away with the 7-mode/cluster-mode split...  We recently did some serious long term planning which is throwing me off. ... View more

That makes sense. This may not apply to this scenario; but we did have issues accessing netapp cifs shares on windows 7 when first going through a win2k3 DFS server.  I think it had to do with NTLM versions.  Upgrading to 2008 dfs servers fixed the issue. ... View more

We don't have any 8.1 installs yet but have begun planning.  It's all about card slots.  8.1 upgrades require a dedicated two port 10G-E card.  The card cant be used for any traffic other than HA/ontap stuff.  If you've got a flash cache card installed, you most likely dont have enough room for the card. Simple as that, slots! ... View more

Rafael, have you tried setting the 'share' permissions to everyone-Full?  Then just manage permissions via NTFS.  My train of thought is that maybe share permission authentication is handled differently than NTFS; from the file server's perspective. ... View more