Limited Commands on netapp filers

[SEENIKANNAN]

I have netapp filers which has only following commands but using this will not able to find out what is the version of ONTAP version running on this.

I am logging in to the filers via root account. 

Username is root 

It seems to be a old system and I not able to find the commands

If you point me to the right direction it would be helpful.

> ?

?                   ipsec               nis                 snap

cifs                iscsi               options             snapmirror

clone               keymgr              passwd              snapvault

config              lock                ping6               traceroute6

df                  logout              qtree               useradmin

dns                 lun                 quota               vol

echo                nbtstat             radius              vscan

exportfs            ndmpcopy            route               wcc

fpolicy             ndmpd               sectrace            ypcat

fsecurity           ndp                 secureadmin         ypgroup

help                nfs                 sftp                ypmatch

hostname            nfsstat             sis                 ypwhich

igroup

Regards,

SEENIKANNAN

[SpindleNinja]

The command to find the version is just "version" 

[SEENIKANNAN]

if you see on the provided available commands "version" not found. It seems to be older systems not sure which ONTAP is running.

Regards,

SEENIKANNAN

[SpindleNinja]

What's the model number of the controller? 

You can also try running "sysconfig -v"     That command has been around a long while. 

Here's an example from a F330 

https://kb.netapp.com/app/answers/answer_view/a_id/1035973/~/how-to-obtain-the-display-of-filer-information-using-sysconfig--v-

[SEENIKANNAN]

even from the CLI am not able to find the model of the filer

also when i tried "sysconfig" with root, the error message says as below,

sysconfig not found. Type '?' for a list of commands

[SpindleNinja]

can you run "options"  

[SEENIKANNAN]

Yes  i was able to run & here is the output,

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2018.11.12 08:50:28 =~=~=~=~=~=~=~=~=~=~=~=

netapp filer>
netapp filer>
netapp filer>
netapp filer>
netapp filer>
netapp filer>
netapp filer>
netapp filer>
netapp filer> options
cifs.LMCompatibilityLevel 1
cifs.W2K_password_change off
cifs.W2K_password_change_interval 4w
cifs.W2K_password_change_within 3600h
cifs.audit.account_mgmt_events.enable off
cifs.audit.autosave.file.extension
cifs.audit.autosave.file.limit 0
cifs.audit.autosave.onsize.enable off
cifs.audit.autosave.onsize.threshold 75%
cifs.audit.autosave.ontime.enable off
cifs.audit.autosave.ontime.interval 1d
cifs.audit.enable off
cifs.audit.file_access_events.enable on
cifs.audit.liveview.allowed_users
cifs.audit.liveview.enable off
cifs.audit.logon_events.enable on
cifs.audit.logsize 524288
cifs.audit.nfs.enable off
cifs.audit.nfs.filter.filename
cifs.audit.saveas /etc/log/adtlog.evt
cifs.bypass_traverse_checking on
cifs.comment
cifs.gpo.enable off
cifs.gpo.trace.enable off
cifs.grant_implicit_exe_perms off
cifs.guest_account
cifs.home_dir_namestyle
cifs.idle_timeout 1800
cifs.ipv6.enable off
cifs.max_mpx 50
cifs.ms_snapshot_mode xp
cifs.netbios_aliases
cifs.netbios_over_tcp.enable on
cifs.nfs_root_ignore_acl on
cifs.oplocks.enable on
cifs.oplocks.opendelta 0
cifs.per_client_stats.enable off
cifs.perfmon.allowed_users
cifs.perm_check_ro_del_ok off
cifs.perm_check_use_gid on
cifs.preserve_unix_security off
cifs.restrict_anonymous 0
cifs.restrict_anonymous.enable off
cifs.save_case on
cifs.scopeid
cifs.search_domains
cifs.show_snapshot off
cifs.shutdown_msg_level 2
cifs.sidcache.enable on
cifs.sidcache.lifetime 1440
cifs.signing.enable off
cifs.smb2.enable on
cifs.smb2.signing.required off
cifs.smb2_1.branch_cache.enable off
cifs.snapshot_file_folding.enable off
cifs.symlinks.cycleguard on
cifs.symlinks.enable on
cifs.trace_dc_connection off
cifs.trace_login on
cifs.universal_nested_groups.enable on
cifs.widelink.ttl 10m
dns.cache.enable on
dns.domainname netapp.com
dns.enable on
dns.update.enable off
flexcache.access none
flexcache.deleg.high_water 90
flexcache.deleg.low_water 50
flexcache.enable off
flexcache.per_client_stats on
fpolicy.enable on
fpolicy.i2p_ems_interval 60
ftpd.3way.enable off
ftpd.anonymous.enable off
ftpd.anonymous.home_dir
ftpd.anonymous.name anonymous
ftpd.auth_style mixed
ftpd.bypass_traverse_checking off
ftpd.dir.override
ftpd.dir.restriction off
ftpd.enable off
ftpd.explicit.allow_secure_data_conn on
ftpd.explicit.enable off
ftpd.implicit.enable off
ftpd.ipv6.enable off
ftpd.locking none
ftpd.log.enable on
ftpd.log.filesize 512k
ftpd.log.nfiles 6
ftpd.tcp_window_size 28960
httpd.access legacy
httpd.autoindex.enable off
httpd.bypass_traverse_checking off
httpd.enable off
httpd.ipv6.enable off
httpd.log.format common
httpd.method.trace.enable off
httpd.rootdir XXX
ip.ipsec.enable off
kerberos.file_keytab.enable off
kerberos.file_keytab.principal
kerberos.file_keytab.realm
ldap.ADdomain netapp.com
ldap.base dc=netapp,dc=com
ldap.base.group
ldap.base.netgroup
ldap.base.passwd
ldap.enable off
ldap.fast_timeout.enable on
ldap.minimum_bind_level simple
ldap.name cn=ghlookup,ou=service accounts,ou=corp,dn=netapp,dn=com
ldap.nssmap.attribute.gecos gecos
ldap.nssmap.attribute.gidNumber gidNumber
ldap.nssmap.attribute.groupname cn
ldap.nssmap.attribute.homeDirectory unixHomeDirectory
ldap.nssmap.attribute.loginShell loginShell
ldap.nssmap.attribute.memberNisNetgroup memberNisNetgroup
ldap.nssmap.attribute.memberUid memberUid
ldap.nssmap.attribute.netgroupname cn
ldap.nssmap.attribute.nisNetgroupTriple nisNetgroupTriple
ldap.nssmap.attribute.uid sAMAccountName
ldap.nssmap.attribute.uidNumber uidNumber
ldap.nssmap.attribute.uniqueMember Member
ldap.nssmap.attribute.userPassword userPassword
ldap.nssmap.objectClass.groupOfUniqueNames Group
ldap.nssmap.objectClass.nisNetgroup nisNetgroup
ldap.nssmap.objectClass.posixAccount User
ldap.nssmap.objectClass.posixGroup Group
ldap.passwd ******
ldap.port 389
ldap.retry_delay 120
ldap.rfc2307bis.enable on
ldap.servers
ldap.servers.preferred
ldap.ssl.enable off
ldap.timeout 20
ldap.usermap.attribute.unixaccount unixaccount
ldap.usermap.attribute.windowsaccount windowsaccount
ldap.usermap.base
ldap.usermap.enable off
ndmpd.access all
ndmpd.authtype challenge
ndmpd.connectlog.enabled off
ndmpd.data_port_range all
ndmpd.enable on
ndmpd.ignore_ctime.enabled off
ndmpd.maxversion 4
ndmpd.offset_map.enable on
ndmpd.password_length 16
ndmpd.tcpnodelay.enable off
ndmpd.tcpwinsize 32768
nfs.acache.persistence.enabled on
nfs.always.deny.truncate on
nfs.assist.queue.limit 40
nfs.export.allow_provisional_access on
nfs.export.auto-update on
nfs.export.exportfs_comment_on_delete on
nfs.export.harvest.timeout 1800
nfs.export.neg.timeout 3600
nfs.export.pos.timeout 36000
nfs.export.resolve.timeout 6
nfs.hide_snapshot off
nfs.ipv6.enable off
nfs.kerberos.enable off
nfs.locking.check_domain on
nfs.max_num_aux_groups 256
nfs.mount_rootonly on
nfs.mountd.trace on
nfs.netgroup.strict off
nfs.nfs_rootonly off
nfs.notify.carryover on
nfs.ntacl_display_permissive_perms off
nfs.per_client_stats.enable on
nfs.require_valid_mapped_uid off
nfs.response.trace off
nfs.response.trigger 60
nfs.rpcsec.trace off
nfs.tcp.enable on
nfs.thin_prov.ejuke off
nfs.udp.enable on
nfs.udp.xfersize 32768
nfs.v2.df_2gb_lim off
nfs.v2.enable on
nfs.v3.enable on
nfs.v4.acl.enable off
nfs.v4.enable off
nfs.v4.id.allow_numerics off
nfs.v4.id.domain netapp.com
nfs.v4.read_delegation off
nfs.v4.write_delegation off
nfs.vstorage.enable off
nfs.webnfs.enable off
nfs.webnfs.rootdir XXX
nfs.webnfs.rootdir.set off
nis.domainname
nis.enable off
nis.group_update.enable off
nis.group_update_schedule 24
nis.netgroup.domain_search.enable on
nis.netgroup.legacy_nisdomain_search.enable on
nis.servers *
nis.slave.enable off
nlm.cleanup.timeout 100
nlm.trace off
pcnfsd.enable off
pcnfsd.umask 22
rquotad.enable off
rsh.access legacy
security.admin.authentication internal
security.admin.nsswitchgroup
security.passwd.firstlogin.enable off
security.passwd.lockout.numtries
security.passwd.rules.enable on
security.passwd.rules.everyone on
security.passwd.rules.history 6
security.passwd.rules.maximum 256
security.passwd.rules.minimum 8
security.passwd.rules.minimum.alphabetic 2
security.passwd.rules.minimum.digit 1
security.passwd.rules.minimum.lowercase 0
security.passwd.rules.minimum.symbol 0
security.passwd.rules.minimum.uppercase 0
sftp.auth_style mixed
sftp.bypass_traverse_checking off
sftp.dir_override
sftp.dir_restriction off
sftp.enable off
sftp.locking none
sftp.log_enable on
sftp.log_filesize 512k
sftp.log_nfiles 6
sftp.override_client_permissions off
snapmirror.access legacy
snapmirror.checkip.enable off
snapmirror.enable on
snapvault.access host=filer
snapvault.enable on
ssh.access *
ssh.enable on
ssh.idle.timeout 600
ssh.passwd_auth.enable on
ssh.port 22
ssh.pubkey_auth.enable on
ssh1.enable off
ssh2.enable on
wafl.default_nt_user
wafl.default_unix_user pcuser
wafl.nt_admin_priv_map_to_root on
wafl.wcc_minutes_valid 20
netapp filer>
netapp filer>
netapp filer>
netapp filer> exit
logout

[SeanHatfield · Accepted solution]

You, sir, were handed the blue pill.  In other words, you were given root creds to a vfiler.  

You can't escape the vfiler, so you'll need credentials and management ips for the hosting 7mode system to get at the version and sysconfig commands.

vfiler command set:

test7m> vfiler run vf1 ?

===== vf1
?                   igroup              nis                 snap                
arp                 ipsec               options             snaplock            
cifs                iscsi               passwd              snapmirror          
clone               keymgr              ping                snapvault           
config              lock                ping6               traceroute          
df                  logout              qtree               traceroute6         
dns                 lun                 quota               useradmin           
du                  nbtstat             radius              vol                 
echo                ndmpcopy            route               vscan               
exportfs            ndmpd               sectrace            wcc                 
fpolicy             ndp                 secureadmin         ypcat               
fsecurity           netstat             setup               ypgroup             
help                nfs                 sftp                ypmatch             
hostname            nfsstat             sis                 ypwhich             
test7m> 

Real filer command set:

test7m> ?
?                   fpolicy             nis                 sis                 
acpadmin            fsecurity           options             smtape              
aggr                ftp                 orouted             snap                
arp                 halt                partner             snaplock            
autosupport         help                passwd              snapmirror          
backup              hostname            ping                snapvault           
bmc                 httpstat            ping6               snmp                
cdpd                ic                  pktt                software            
cf                  ifconfig            portset             source              
charmap             ifgrp               priority            sp                  
cifs                ifstat              priv                stats               
clone               igroup              qtree               storage             
config              ipsec               quota               sysconfig           
coredump            ipspace             radius              sysstat             
date                iscsi               rdate               system              
dcb                 key_manager         rdfile              timezone            
df                  keymgr              reallocate          traceroute          
disk                license             reboot              traceroute6         
disk_fw_update      lock                restore             ups                 
dns                 logger              restore_backup      uptime              
download            logout              revert_to           useradmin           
du                  lun                 rlm                 version             
dump                man                 route               vfiler              
echo                maxfiles            routed              vlan                
ems                 mt                  rshstat             vmservices          
environment         nbtstat             sasadmin            vol                 
exportfs            ndmpcopy            sasstat             vscan               
fcadmin             ndmpd               savecore            wcc                 
fcnic               ndp                 sectrace            wrfile              
fcp                 netdiag             secureadmin         ypcat               
fcstat              netstat             setup               ypgroup             
file                nfs                 sftp                ypmatch             
flexcache           nfsstat             shelfchk            ypwhich             
test7m> 

[SpindleNinja]

That was driving me batty trying to figure out what the heck was that...    Haven't touched those in years. 

[SEENIKANNAN]

Actually I am not sure what are these?

Can you help me with the some good documents for better understanding 

[SeanHatfield]

vFilers were part of the multistore feature, which provided secure multitenancy back in the 7mode days.

Here's a good place to start:

https://library.netapp.com/ecmdocs/ECMP1222473/html/GUID-AC776453-E3CA-4509-BEAD-3DCDD8A46FCA.html

Then read through the multistore management guide:

https://library.netapp.com/ecm/ecm_download_file/ECMP1155585

[SEENIKANNAN]

How do we confirm running options command vfiler is configured?