Powershell toolkit direct connection to vserver

[Stephanv]

Hi All, NetApp support guided me to this place for support.

The issue is we need powershell scripting to work directly with a vserver so cluster rights are not needed for a customer.

PS > Connect-NcController -name clusterip -vserver vservername

Name                 Address           Vserver              Version

----                 -------           -------              -------

works

Directly to the Vserver fails for me:

PS C> Connect-NcController vserverip

Connect-NcController : Incorrect credentials for vserverip.

At line:1 char:1

+ Connect-NcController vserverip

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : InvalidResult: (vserverip:NcController) [Connect-NcController], NaAuthException

    + FullyQualifiedErrorId : HttpConnectionFailed,DataONTAP.C.PowerShell.SDK.ConnectNcController

I already went over plenty of settings with NetApp support, online documentation but I'm not able to find the issue.

Any suggestions would be appreciated.  Thanks!

[asulliva]

Hello @Stephanv,

When connecting you'll need to specify the name of the SVM...

Connect-NcController -Name $svmMgmt -Vserver $svmName

Edit: note that you want to specify the SVM's management IP address here, not the cluster management IP address.  And, even though you're specifying the SVM management interface, you still need to provide the SVM name.

Hope that helps!

Andrew

[Stephanv]

Hi Andrew @asulliva

Unfortunatly I still get an auth error:

Connect-NcController : Incorrect credentials for svmip
At line:1 char:1
+ Connect-NcController -name svmip -vserver svmname
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidResult: (svmip:NcController) [Connect-NcController], NaAuthException
+ FullyQualifiedErrorId : HttpConnectionFailed,DataONTAP.C.PowerShell.SDK.ConnectNcController

Many thanks!

[asulliva]

I know it sounds silly, but are you using valid credentials?  E.g. "vsadmin" or another vserver specific account (remember that vsadmin needs to have a password set and be unlocked before it can be used)?  Have you validated that you can login to that SVM using SSH?

Andrew

[Stephanv]

I've added users with a vsadmin role and we are testing with those users:

Authentication Acct Is-Nsswitch
User/Group Name Application Method Role Name Locked Group
---------------- ----------- --------- ---------------- ------ -----------
newusera http domain vsadmin - no
newusera  ontapi domain vsadmin - no
newusera  ssh domain vsadmin - no
newuserb http domain vsadmin - no
newuserb ontapi domain vsadmin - no
newuserab ssh domain vsadmin - no
user_ndmp ssh password vsadmin-backup no no
vsadmin http password vsadmin yes no
vsadmin ontapi password vsadmin yes no
vsadmin ssh password vsadmin yes no
10 entries were displayed.