In case you are using (or planning to use) C-Mode, you may be interested in 8.2.2 changes: Under certain circumstances, you might want to disable the presentation of UNIX permissions as NTFS ACLs. If this functionality is disabled, Data ONTAP presents UNIX security-style volumes as FAT volumes to SMB clients. This may provide work around for your problem, because programs should not expect to find SID on FAT volume in the first place ... I wonder, for all I can tell Unix qtree was presented as FAT in 7-Mode forever ... ah, it is cifs.preserve_unix_security option. Which default to off according to documentation. Check how it is set - you may try to flip it.
... View more
The difference between “snap restore” and “snapmirror restore” is, “snapmirror restore” preserves all snapshots on a volume, while “snap restore” will discard all snapshots newer than restore point. This explains why “snap restore” is rejected, while “snapmirror restore” is allowed. Also “snapmirror restore” normally will do differential, not full, transfer.
... View more
There are a couple of scripts (SnapMirror log parser, SnapMirror log summary) on toolchest. They may need some tweaking, but could serve as starting point to avoid reimplementing it from scratch.
... View more
Should be no problem. Old root aggregate will be detected as foreign and remain offline, you simply destroy it. This assumes you do it online, while target file is running.
... View more
It's impossible in general case - mapping is not one-to-one. It can also be one way only ... Security tab on Unix qtree cannot be used to change permissions anyway. It is mostly to allow you to see original, unix, mode bits. What problems did you have on Unix side? As long as user mapping is set up correctly, I'd actually expected it to be easier.
... View more
I would not trust system manager at this point. It is quite possible that it needed SnapMirror.conf on source (i.e. new destination) or that it did not find common snapshot with "correct" name. Next time start with doing reverse resync using CLI. This will also make troubleshooting easier.
... View more
I do not think it is possible. There is no way to store Windows SID on qtree with unix security style. When you check file security attributes from Windows, filer fakes SIDs. User mapping between Windows and Unix exists only for the purposes of access control. May be you could store home directory on ntfs qtree. You can access them from Unix using NFS as well.
... View more
Yes, this is correct. This is also documented this way. You cannot export nested mounts with less restrictive permissions than parent mounts.
... View more
Recently I did head swap from FAS2240 to FAS8020. Initial DOT was 8.1 so I first updated DOT to 8.2 and then did headswap. All disks from FAS2240 shelf were relocated to external DS2246, so 8020 got exactly the same disks as 2240. Today while looking for another customer system I noticed that no ASUP were present from new heads. I checked FAS8020 confugration and found that trasnsport was HTTPS while it was SMTP before. Then I found that both date and timezone were wrong; and to round it off, NTP servers disappeared. Anyone has seen it before? I'm not exactly sure when it happened to be honest, but ASUP from FAS2240 are still present and stop at correct point in time. So I assume it has something to do with either update or head swap ... Not everything was lost. E.g. SP configuration remained. Obviously everything that is based on configuration files remained as well. It really looks like only options were reset to default.
... View more
I tested technique described here: https://kb.netapp.com/support/index?page=content&id=1012161 and it appears to work. YMMV. I would contact support to be sure as always when you have to use diag level commands … Alternative is to unjoin node from cluster and join again using single port.
... View more