topic Re: 9.11.1 upgrade recreates admin account with 'amqp' application in ONTAP Discussions

9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Wed, 04 Jun 2025 09:52:21 GMT

Per NetApp best practices, we disable the admin account on our clusters and replace it with a different account. However, each time we reboot a node (whether for patching or not), the admin account gets recreated with the http and ontapi applications. Last night I upgraded three of our clusters to 9.11.1 and noticed a third admin entry that gets created with the 'amqp' application. I had not heard of this before but found documentation online. Is this a new normal behavior for 9.11.1? Can anyone provide more insight? Thanks!

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

paul_stejskal — Tue, 28 Feb 2023 15:39:13 GMT

I did some searching internally and couldn't find anything one way or another. I'd recommend going through the audit logs (available in Active IQ under AutoSupport, Management Logs, and audit-mlog.txt.gz or audit-log.gz for node shell, or SPI). Maybe that's a start.

Honestly for something like this, a case may be worth it if you can't figure it out. From what I can tell the Advanced Message Queuing Protocol shouldn't be in use by ONTAP from my searching.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Tue, 28 Feb 2023 15:44:03 GMT

Thanks @paul_stejskal , yeah that's what I was thinking. It doesn't make sense to me. Not sure how to read the logs you referenced but I may open a case as you suggested to take a closer look.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

CHRISMAKI — Tue, 28 Feb 2023 16:25:58 GMT

What documentation have you found regarding this? I was searching for this last week, the only docs I came across was this ancient NetApp Connect link.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Tue, 28 Feb 2023 16:33:58 GMT

That was my experience as well - I found a lot of articles on NetApp Connect, whatever that is.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

CHRISMAKI — Tue, 28 Feb 2023 17:05:03 GMT

NetApp Connect enables users to access on-premises data from existing enterprise collaboration, file synchronization, and share applications quickly and securely, across devices they choose to use. Enterprise information remains managed by your company and stored on premises.

EOA August 2015

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

paul_stejskal — Tue, 28 Feb 2023 19:50:03 GMT

If you do open a case, please post the case # here. At least a couple people are watching this thread. There are conflicting internal references to the feature so I don't know if 9.11 changed something or not.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Tue, 28 Feb 2023 19:59:18 GMT

@paul_stejskal , case #2009488658

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

CHRISMAKI — Tue, 28 Feb 2023 21:37:01 GMT

I think I've found a lead:

https://docs.netapp.com/us-en/ontap-cli-991/cluster-agent-connection-create.html#description

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Wed, 01 Mar 2023 16:04:37 GMT

Nice find @CHRISMAKI . That likely explains what it's for, but I'm still curious why the admin account gets recreated on reboot with that application when it wasn't happening before.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Thu, 02 Mar 2023 18:42:54 GMT

From my NetApp case:

AMQP is a messaging protocol used for a publish/subscribe API that was introduced in ONTAP starting with 9.9.1. That is why the admin account gets created with AMQP.

Cloud Agent is an example of an application that subscribes to the ONTAP Pub/Sub API and uses AMQP over HTTPS.

Re: 9.11.1 upgrade recreates admin account with 'amqp' application

TMADOCTHOMAS — Thu, 02 Mar 2023 18:43:54 GMT

So in summary it's a relatively new feature and that's why admin is just now being recreated with amqp whereas it wasn't previously.