For Cluster Mode NetApp FPolicy server-auth mode failing when using third party CA signed certificates.   Fpolicy server is getting "tlsv1 alert unknown ca" error while doing SSL handshaking with FPolicy client.   We have installed  public certificate of certificate authority (CA) that is used to sign the FPolicy server certificate on SVM using following command: > security certificate install -type client-ca -vserver <vserver name> Configured external-engine in FPolicy to enable server-auth mode: > vserver fpolicy policy external-engine show -vserver <vserver name> -engine-name <engine name> Vserver: <vserver name> Engine: <engine name> Primary FPolicy Servers: <server ip> Port Number of FPolicy Service: <server port number> Secondary FPolicy Servers: - External Engine Type: asynchronous SSL Option for External Communication: server-auth FQDN or Custom Common Name: - Serial Number of Certificate: - Certificate Authority: - Is Resiliency Feature Enabled: false Maximum Notification Retention Duration: 3m Directory for Notification Storage: - In FPolicy server we are using certificate file to initialize SSL server in following format:                    The certificates must be in PEM format and must be sorted starting with the subject's certificate (actual server certificate), followed by intermediate CA certificates if applicable, and ending at the highest level (root) CA. We are also using certificate's key file for initialize SSL server. Now when we got FPolicy client connection in FPolicy server we are trying to do SSL handshaking and getting following error and SSL handshake failed: " error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca". Note: we are using OpenSSL library API for SSL handshaking.   Also, same issue produces when we use OpenSSL server tool as FPolicy Server. Our Fpolicy Server can handshake and have the cert chain validated with the OpenSSL client tool. NetApp SVM doesn't work with an OpenSSL server tool using the same certs. Does anybody let us know where we are going wrong, what are the correct steps for FPolicy SSL communication using third party CA signed certificate. How to resolve this error/issue? ... View more

Hi@smichae1 and Members, NMSDK shows the wrong count for the qtrees than the list, available on Active IQ Unified Manager Portal. The attached screen print shows the representation in Zedi explorer and I also tried a similar thing programmatically with the same results.   Is it a bug? Because the same observation is there with latest "manageontap-9.8P2.jar"   Any help on this would be really appreciated.   Thanks, ... View more

Hi ,   I am new to APi's, Wrote the below one,  My requirement is to get the quota report for a user. Couls someone kindly help me with the error below. cat quota.py #!/usr/bin/python3 from netapp_ontap import HostConnection from netapp_ontap import NetAppRestError from netapp_ontap.resources import QuotaReport with HostConnection("xxxxxxxx", username="admin", password="XXXXXX", verify=False): resource = QuotaReport( index=2305843013508661248, **{"volume.uuid": "de90a323-1349-49c9-acdf-f6822e82f6db"} ) resource.get() print(resource)   when i run this in python script, i am getting below error.   $ ./quota.py Traceback (most recent call last): File "./quota.py", line 11, in <module> resource.get() File "/usr/local/lib/python3.6/site-packages/netapp_ontap/resources/quota_report.py", line 1339, in get return super()._get(**kwargs) File "/usr/local/lib/python3.6/site-packages/netapp_ontap/utils.py", line 55, in wrapper return on_api_fail(erro) File "/usr/local/lib/python3.6/site-packages/netapp_ontap/utils.py", line 78, in on_api_fail raise NetAppRestError(cause=erro) from None netapp_ontap.error.NetAppRestError: Caused by HTTPError('404 Client Error: Not Found for url: https://10.109.24.221:443/api/storage/quota/reports/2305843013508661248',): "2305843013508661248" is an invalid value for field "volume.uuid" (<UUID>) $   ... View more

Hi,   I notice that there is Get-NcNetDns and Set-NcNetDns (to get the list of DNS servers, and to change the DNS servers), but there is no corresponding Remove-NcNetDns to remove the DNS config from an SVM or the Cluster.   Would it be possible to add that commandlet to the next version of PSTK? Currently we're relying on Invoke-NcSSH for that, and that has some other quirks that make it undesirable   Thanks -Michael ... View more