Quantcast
Channel: ONTAP Discussions topics
Viewing all 4979 articles
Browse latest View live

DNS server is returning ldap errors

$
0
0

Hi All,

 

I'm getting strange errors from DNS server

 

NTAP-clstr::> event log show -message-name secd.*
Time Node Severity Event
------------------- ---------------- ------------- ---------------------------
12/12/2019 08:55:23 nodeA ERROR secd.dns.server.timed.out: DNS server 64.181.180.21 did not respond to vserver = PRDCORP within timeout interval.
12/12/2019 08:55:21 nodeA EMERGENCY secd.ldap.noServers: None of the LDAP servers configured for Vserver (PRDCORP) are currently accessible via the network.
12/12/2019 08:24:01 nodeC ERROR secd.dns.server.timed.out: DNS server 64.181.180.21 did not respond to vserver = PRDCORP within timeout interval.
12/12/2019 08:23:59 nodeC EMERGENCY secd.ldap.noServers: None of the LDAP servers configured for Vserver (PRDSCORP) are currently accessible via the network.

 

 

Upon checking i found the ip address 64.181.180.21 corresponds to one of NTP servers configured on cluster.

 

NTAP-clstr::> ntp server show
(cluster time-service ntp server show)
Server Version
------------------------------ -------
xx.xxx.xx.xxx auto
xxx.xxx.xx.xxx auto
64.181.180.21 auto

 

Can removing the server from ntp confirguration would stop these alert ?

Or Am i looking at wrong place?How to stop these alert from triggering?

 

Looking for some expert advice!!

 


How to find the IP Address of a node

$
0
0

Hi, we have a FAS8200 in cluster mode running v9.1

 

I ran the autosupport, and did not receive the email that i was expecting, so i am looking into tracking what is it that is stopping this from working. 

 

To start with i cannot find the IP Address of the node that should be sending the notfication. it is email as its set to smtp. would anyone be able to tell me the command that i can use to find the ip address please. 

 

I can then track that on the firewall and the email server. 

 

Many thanks

Unable to create/mount iscsi datastore ONTap 9

$
0
0

Hi all,

 

Im having an issue getting an eval of OnTap setup in our lab enviornment.  We get the attached message when trying to provision a datastore through the VMware plugin. I have added the network of the vmkernal interface to the pref file as stated in the error with no luck. I have also tried to just manually provision a LUN through the interface of the appliance and im not able to get VMware to see it. Any help is appreciated. 

CIFS Share space question

$
0
0

Hello all,

 

I created a 100GB CIFS volume with the space guarantee set to none, snapshot reserve 10% on a netapp SIM ONTAP 9.2. There are no snapshots yet. I copied a 10GB file to this share and checked the space usage:

 

cluster1::> df -h /vol/accounting/
Filesystem total used avail capacity Mounted on Vserver
/vol/accounting/ 90GB 10GB 79GB 11% /accounting cifs_svm
/vol/accounting/.snapshot 10GB 0B 10GB 0% /accounting/.snap shot cifs_svm

 

Then I deleted the file and got the following result of the df command:

 

cluster1::> df -h /vol/accounting/
Filesystem total used avail capacity Mounted on Vserver
/vol/accounting/ 90GB 592MB 89GB 1% /accounting cifs_svm
/vol/accounting/.snapshot 10GB 0B 10GB 0% /accounting/.snapshot cifs_svm

 

It seems that these 592MB are used by Performance Metadata.

 

Vserver : cifs_svm
Volume : accounting

Feature Used Used%
-------------------------------- ---------- ------
User Data 24KB 0%
Filesystem Metadata 6.56MB 0%
Inodes 32KB 0%
Snapshot Reserve 10GB 10%
Performance Metadata 586.5MB 1%

Total Used 10.58GB 11%

Total Physical Used 593.2MB 1%

 

NetApp docs say that this is the amount of space used by performance optimization activities and there is no direct method to control it, so there is really not much to do about that? Will it increase significantly in the future? 

 

Thanks

can we creat multiple luns from same volume on AFF300?

$
0
0

Just swifted from EMC VNX, wondering if to create multple luns from same volume is a good practice. it will be easier for us to take snapshot on multiple luns. i didn't see snapshot consistency group on system manager, not sure if it is only avaialbe on command line or snapcenter.

thanks and hava a good weekend !

CIFS share auditing for deleting/modifing/moving items

$
0
0

on EMC VNX, we can redirect the auditing log to different file system. Not sure if we can do the same on NetApp AFF. we will need to trace the file and folder deleting, modifying and moving actions on CIFS shares. Any sugestions will be appreciated.

thanks

Enabling LDAP signing and sealing on the CIFS server

$
0
0

Hello,

In January Microsoft will force "LDAP Signing" (LDAPS) and "channel binding" which will make all unencrypted connections impossible to the ActiveDirectory Domain Controllers.

 

We are running several SVMs (NetApp Release 9.6P3) which currently still do unencrypted LDAP queries on our Active Directory infrastructure domain controllers. These connections generate an MS "event id 2889".

 

The security style of those SVMs are NTFS only and only accessed from Windows clients.

 

From what I understood, there are 2 ways of switching to the ldap "sign and sealing mode". The first and simpliest method is changing the session-security-for-ad-ldap  setting to "true", which I did for all SVMs, and to be sure, I also restarted all CIFS Server of the SVMs.

https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.cdot-famg-cifs%2FGUID-77F3AAB5-D8A2-43D7-803D-8797BB75334E.html&lang=en

 

Unfortunately, this doesn't seam to work or at least not always, because SVMs still query in clear (no SSL/TLS) as we still log some "event id 2889"  on our Domain Controllers from all SVMs.  All connections that are logged are made from the SVM computer account like: "DOMAIN\SVMCITEST2103$"

 

I would really appreciate some help, ideas or any hint to fix this issue?

 

Is there some log file (I could view or inspect) and/or any additional ontap commands we could use in Ontap to troubleshoot this kind of issues?

 

Thank you very much for any help!

Kind regards,

Didier

create multiple SVMs on two node cluster

$
0
0

We are switching from EMC VNX5600 to NetApp AFF, we have around 50 virutal data movers and 50 cifs servers on EMC for different applications. Sice we only allow one CIFS server on one SVM on NetApp, looks we will need to create 50 SVMs.  We are still wondering if we should merge to a few SVMs or just keep the same amount of SVMs.  Please share your experience. thanks.


fas 2240

$
0
0

What were the challenges we will face while using FAS 2240

Interoperability Matrix Tool

OnTap 9 trusted hosts

$
0
0

Hi,

 

In 7Mode, System Manager could setup trusted hosts allow specific ip address for adminitration. But OnTap 9, I cannot found setup trusted hosts in System Manager, I also try modify firewall policy mgmt allow specific ip address access mgmt http, https and ssh, the cluster management LIF also apply mgmt firewall policy, but another IP still could access and login, any idea?


Best regards,

Chung

CIFS share access 7Mode vs cMode

$
0
0

Hi,

 

7Mode CIFS share only Domain Admins share and local permission, normal user could map the drive letter and did not require provide credential, of course normal user cannot access the drive letter

 

but in OnTap 9 CIFS share only Domain Admins share and local permission, normal user could not map the drive letter and must require provide credential

 

because many users with different login script, any options setup allow normal user could map the drive letter only, even did not have permission access OnTap 9 CIFS


Best regards,

Chung

encryption for volume replication

$
0
0

we are on AFF 9.6P3, currently on configuration and set up staging. Just wondering what kind of encrption we should implement. we have uncrypted disks.

1) should we enable the aggregate level encryption or only use volume level?  will aggregate encryption affect any performa nce since all volumes will be software encrypted?

2) we will use snapmirror to replicate some tier one cifs volumes to our DR sites, i assume we will need encrption for replication. i heard the encryption is not enabled by default. Please share your experience.

3). we are handling hostital data, is the onboard key management good enough for us or should we pick a third pary one?

thanks

from WAFL to share or LUN

$
0
0

Can someone explain how NetApp curves out CIFS shares or LUNs from volumes, what is the role of WAFL involved?

netapp cifs share aliases

$
0
0

we are merging cifs servers to single SVM, can some one share experience how can we make alias for each data share, can different LIF be used for each share/alias?

thanks


snapmirror source volume size (resize) - will the destination vol resize too?

$
0
0

Hello

I found some post here about this but it is still not clear to me. ONTAP 9.5P3. SVM snapmirror DP.

1) if I resize the source volume is it going the destination vol resize accordingly? What must be set to make it work?

2) is there any special procedure how to resize snapmirrored vol to resize the destination accordingly?

3) I cannot find such an obvious task described in any doc. Is there any doc that describes this?

 

Thank you

Unable to connect to ONTAP cluster from zExplore Developmet Interface

$
0
0

Unable to connect to ONTAP cluster from zExplore Developmet Interface, I am running a ONTAP Select cluster running on VMWare. I am seeing an error attached screenshot as soon as I open zexplore. 

 

And, when I try to connec to my cluster, I am seeing connection timed out error. But I am able to ping the cluster IP from cmd and able to connect to GUI from browser from my PC.

 

SSL certificate is not installed.

Please suggest any solutions for this.

 

Thanks.

 

SVM Root Volume Move Level of Disruption?

$
0
0

I am about to move a SVM root volume (volume move start ...) from a node/shelf that is being removed to one that is staying in the cluster. By all accounts it is non-disruptive, but that depends on the customer definition of what disruptive means. So does an SVM root volume move:

  1. Cause any CIFs or NFS temporary disconnects
    OR
  2. Cause any service disruption/disconnects at all?

Thank you in advance.

LIF Modify of Home Node/Port Disruptive or Cause Disconnect?

$
0
0

Hello!

I have inherited a situation where the CIFs & NFS LIFs from a retiring node in a switched cluster have been migrated (during an outage window because of the disconnect/reconnect issue), but are still showing as not home (i.e. the new node is curr-node, but not home-node).

 

Does modifying the LIF property and making the new node the home-node of the LIF cause _any_ disruption or temporary disconnects?

 

Thank you in advance.

Mark

cifs share migration from EMC VNX to NetApp

$
0
0

we will need to migrate a cifs file system with multiple shares from EMC VNX to NetApp, can someone share your experience?

1).  move data from share to share or from file system to volume? which way is better?

2). is that possible to maintain all share permissions?

3). what is the best utility can we use for moving data?

thanks and have a good weekend !

Viewing all 4979 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>