For the record (because it was something new to me). First, I had problems accessing administrative shares (c$, etc$); I could access other shares. Sorry for not mentioning that. Initially this simulator was setup using /etc/passwd authentication. In this mode administrative shares get set to no access at all: ETC$ /etc Remote Administration ** priv access only ** ntapcs3954 states: only root or administrator on the filer may access the particular shares As far as I can tell, that is true for all shares, except administrative shares. For these two particular shares I get the following behaviour: if root volume is set to unix security, I cannot even connect to share, I always get password request if root volume is set to ntfs security, I am able to connect but am not able to access directory in any way I repeat - this happens only for c$ and etc$, only if security for etc$ and/or c$ is set to No Access which happens only if you configure filer to use password authentication. If filer is initially set to workgroup or better, access is automatically set to BUILTIN\Administrators Full Control. But part of problem is, re-running cifs setup does not change existing shares (unless you have deleted them), so even though I had changed filer to workgroup shares remained stuck in No Access mode. So it looks like either a bug or some undocumented feature. If it works as intended, would be nice if someone updated ntapcs3954 to clearly state it.
... View more
As far as I can tell, as soon as AccessControl.xml has been created, all users must be entered there to be able to use SDW to access storage system. At least in my testing as soon as I added one user, even domain administrator completely lost any access via SDW. is it possible to add windows groups instead of individual users (like SOME_DOMAIN\Domain Admins)? is it possible to set default permissions for users not explicitly entered in AccessControl.xml? Compare with SDU where I can be permissive and allow full access if nothing is explicitly configured.
... View more
SDW 6.2 was installed under domain administrator account on 2008 R2. I try to run it using local domain (member of BUILTIN\Administrators) account. GUI works just fine. But CLI fails, both sdcli and storacl: C:\Users\user3>\temp\storacl_x64\storacl.exe
Create Instance of Loader to load SnapDriveRes.dll failed
C:\Users\user3> Is it a known issue?
... View more
If that was question, I am sorry but I missed it. Yes, I created local administrator user during cifs setup, I used option 3 as indicated in subject and I assigned password to administrator user.
... View more
I tested this using DOT 7.3.2, W2k8R2 with SMB2 enabled as non-admin user (member of Domain Users). If cifs.show_snapshot is disabled (off) - which is default: no ~snapshot directory is visible, so it is never copied into offline files user is able to use Previous versions tab in Explorer to access snapshots users are still able to access snapshots by using explicit path names (they must know snapshot names for that) If cifs.show_snapshot is enabled (on), ~snapshot directory is indeed visible in share root. It is not visible under any subfolder, so - assuming you absolutely need this configuration - workaround is to mark individual subfolder(s) available offline instead of whole share. So I'd say default filer configuration perfectly fits your requirements. If not, please show exact CIFS options settings, volume options and describe your offline folder configuration. Get a look at kb45680 as well, it describes various combinations of options to control snapshot visibility.
... View more
You are right, at least for CIFS shares this works fine for normal user (tested under W2k8R2). Per kb45680 user needs at least Read share level permission, but she will likely need it anyway to access share. I do not know where I got this idea; may be it was true in the past or may be it applies to FCP/iSCSI only.
... View more
Have you tried creating a local user account on the filer. Of course. Sorry for not mentioning it, but I thought it was obvious I try to map drive using local account on filer (filer_name\administrator). This fails - on client (Vista) side I awlays get password prompt. User is default administrator created during CIFS setup.
... View more
Downside of "Previous versions" is that user has to be in Administrators group (at least this was the case with WinXP). By default .snapshot directory is not visible. It means when user initially requests share be available offline, it won't include snapshots. But now I wonder what happens when user explicitly enters into ...\~snapshot ... have to test.
... View more
Page 31 (in my copy) of mentioned guide describes recommended cabling sequence for multiple HBAs. Nothing stops you using two quad HBAs with single stack, you just will waste 6 ports out of 8 ... it would be HBA 1 port A and HBA 2 port B.
... View more
I try to setup simulator test bed (sim 7.3.2) on my workplace; this is Vista in domain. I have no way to add simulator to this domain anyway, so it is setup over Vmware host-only interface using workgroup authentication. Unfortunately I am not able to connect to it - I always get password request from Vista interface. I verified using cifs.trace_login that connect request actually comes in and is accepted (i.e. windows user is mapped to valid Unix user). On Vista I see that system tries to connect to simulator but nothing more. I suspect the problem is actually on Vista side (some domain policy settings); I appreciate any hint what could it be. Thank you!
... View more
According to the manual: Any Snapshot copies inadvertently made at the storage system console or through FilerView are dimmed (unavailable) in the SnapDrive MMC plug-in and are not usable by SnapDrive. How does SD recognize that snapshot was created manually?
... View more
exactly how much -p helps with snapshot deltas That I can answer reallocate -p has zero impact on volume snapshot size. I'd add to your list interaction with VSM. Data transferred after reallocate will be defragmented; but after reallocate -p - not (at least if I correctly understand how it works). This may need to be taken in account if destination is often used for tasks like backup verification.
... View more
This request makes no sense. Software that was packaged as SAN Foundation Kit for Solaris 9 and below is now part of base operating system in Solaris 10. So requirement should be either specific driver version or specific Solaris 10 update level.
... View more
While discussing another multiprotocol access issue I realized that I have never seen the answer to this. Let's suppose I set default security to mixed. Then newly created volume will get security style "mixed"; but which security will get root of this volume? It must have either Unix or ACL; how is one selected?
... View more
my understanding ... is that software Licenses are tied to the serial number and are non-transferrable. If a system is sold from one company to another, the new company needs to buy the licenses. These two statements contradict each other. If license is tied to serial number, then moving serial number (to another company) will automatically move license. Actually this is exactly what happens when you transfer ownership on NOW. The question is of course whether company (not being NetApp reseller) can legally sell NetApp equipment ... this starts with the question - to use NetApp support new owner company must be registered on NOW as a customer; I do not think third-party seller on ebay is able to do it
... View more
That's what I would expect too, but as mentioned there is no clear statement anywhere in documentation which I have seen (training, DOT manuals, TR, various presentations on fieldportal). I'd love someone from NetApp to confirm it
... View more
SM (semi-)sync documentation states, that although NVRAM/CP-sync fowarding happens immediately, client still sees data corresponding to the latest "visibility snapshot" which by default is done every 3 minutes. To naive reader it sounds, like in spite of "sync" I am going to lose up to 3 minutes data. I could not find any description how data, that has been transferred since the latest visibility snapshot, can be made available on destination. Could somebody clarify it? To make it clear, what I mean: When replicating synchronously or semi-synchronously, using SnapMirror, changes to the source volume do not show immediately on the destination volume, even though the changes have been replicated. The changes are shown only after the source system takes an automatic Snapshot copy of the source volume. And yes, I know about TR-3326, it does not answer this question, unfortunatly.
... View more
To my knowledge the only major functional difference between NetApp DSM and MS DSM on 2008 is support of mixed FCP/iSCSI access to LUN (requires NetApp DSM). Correction: of course NetApp DSM supports more failover modes and can be used without ALUA. Message was edited by: aborzenkov
... View more
Check zoning; check library settings (some libraries may offer configuration of access restrictions, similar to LUN masking). It could also be this bug: http://now.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=197075
... View more
Log that you pasted does not show any error (except PS which is benign). What exactly happens after the last message? You can remove shelf if it is self-contained (i.e. aggregate contains only disks in this shelf). If shelf contains root volume, filer won't boot. If some aggregate has disks in this shelf and another one, aggregate will come up incomplete and you won't be able access data in it. Again, if it is root aggregate, filer won't boot.
... View more