Sunday, 18 May 2014

Considerations for 7 to C SVM Fan-In using 7MTT: What are SVM Default Settings?

Introduction

If we’re migrating multiple 7-Mode Systems - pFilers (vFiler0) and/or vFilers - into one SVM (Storage Virtual Machine), we need to consider whether these 7-Mode systems are compatible. It’s much more likely that the 7-Mode systems will be compatible if a standard build procedure has been followed for each.

As always, it’s easier to explain this using an example than cover every scenario (the advantage of being a blogger … no responsibility for trying to document every eventuality.) The below article asks pertinent questions applicable to most scenarios, but answers for a specific scenario.

Cluster and Node Setup

Using 7MTT, we can migrate many incompatibly configured 7-Mode systems, to their own SVM, in a 1 to 1 relationship, and the configuration of the Cluster and Node is rightly independent of these migrations. Of course, this post is considering analogous 7-Mode systems - that is - 7-Mode systems which are candidates for consolidation into a single SVM.

Storage Virtual Machine Setup

Before running 7MTT, we first create the SVM (7MTT CLI can do this.) Creating the SVM is a one off task and is easily done by running the command ‘vserver setup’ and answering the prompts. Before running ‘vserver setup’, first check the outputs from the 7-Mode CLI commands listed below - as run against all the 7-Mode candidates for consolidation - to check for commonality and allow us to correctly answer the vserver setup script right first time.

Step 1. Create a Vserver

7MODE> license

Note: Licenses only exist for pFilers (vFiler0)

Is CIFS licensed? YES
Is NFS licensed? YES

7MODE> cifs
7MODE> nfs status

Is CIFS configured? YES
Is NFS running? YES

Note: Since we’re using 7MTT, we’re not migrating LUNs, so no fcp or iscsi is required. ndmp only needs to be enabled if you have an SVM aware backup application that uses ndmp. You will have ‘options ndmpd.enable on’ in 7-Mode if you’re using SnapVault, but in C-Mode SnapVault uses the Volume SnapMirror engine, not ndmp.

Q1: Choose the Vserver data protocols to be configured {nfs, cifs, fcp, iscsi, ndmp}? nfs,cifs

7MODE> options ldap.enable
7MODE> options nis.enable
7MODE> options dns.enable

Is LDAP enabled? NO
Is NIS enabled? NO
Is DNS enabled? YES

Q2: Choose the Vserver client services to be configured {ldap, nis, dns}? dns

7MODE> vol status -l

What is the common (at least for vol0) volume language? en

Q3: Enter the Vserver language setting? en

Note: The above isn’t so important since we can have volumes with different language settings inside the SVM. For consistency, if we have a common vol0 language, we might want to carry that across.

7MODE> qtree status

What is the common (at least for vol0) volume security style? ntfs

Q4: Enter the Vserver root volume's security style {mixed, ntfs, unix}? ntfs

Step 4: Configure DNS (Domain Name Service)

7MODE> options dns.domainname
7MODE> rdfile /etc/resolv.conf

Q5: Do you want to configure DNS? YES
Q6: Enter the comma separated DNS domain names? lab.priv,test.priv
Q7: Enter the comma separated DNS server IP addresses? X.X.X.X,Y.Y.Y.Y

Step 6: Configure CIFS

7MODE> cifs domaininfo

Q8: Do you want to configure CIFS? YES
Q9: Enter the Active Directory domain name? lab.priv

Storage Virtual Machine Defaults

Note 1: For the below outputs I’ve dropped into diag privilege level ‘set d’ to get the most complete outputs. Also, we’ve dropped into ‘vserver context SVM1’.
Note 2: The list below is essentially the items from the KB FAQ: 7MTT/Transitioned Data ONTAP features and the section ‘Data ONTAP Feature Transition’ and ‘The detailed description’.
Note 3: In the example outputs below, our SVM is called SVM1, our DNS domain is lab.priv, and NETBIOS domain is LAB.
Note 4: Outputs from Clustered Data ONTAP 8.2.1

For a newly created SVM with CIFS, NFS, and DNS configured, the default settings are:

NFS Exports

SVM1::vserver export-policy*> show
Vserver Policy Name Policy ID
------- ----------- ---------
SVM1    default     8589934593

SVM1::vserver export-policy rule*> show
        Policy  Rule  Access   Client    RO
Vserver Name    Index Protocol Match     Rule
------- ------- ----- -------- --------- ----
SVM1    default 1     any      0.0.0.0/0 any

SVM1::vserver export-policy rule*> show -instance
                                    Vserver: SVM1
                                Policy Name: default
                                 Rule Index: 1
                            Access Protocol: any
Client Match Hostname, IP Address, Netgroup, or Domain: 0.0.0.0/0
                             RO Access Rule: any
                             RW Access Rule: any
User ID To Which Anonymous Users Are Mapped: 65534
                   Superuser Security Types: none
               Honor SetUID Bits in SETATTR: true
                  Allow Creation of Devices: true
                 NTFS Unix Security Options: fail
         Vserver NTFS Unix Security Options: use_export_policy
                      Change Ownership Mode: restricted
              Vserver Change Ownership Mode: use_export_policy

SVM1::*> volume show -fields policy
vserver volume  policy
------- ------- -------
SVM1    rootvol default

NFS Kerberos Config

SVM1::vserver nfs kerberos-config*> show
        Logical
Vserver Interface Address        Kerberos SPN
------- --------- -------------- -------- ---
SVM1    lif1      192.168.168.53 disabled -

SVM1::vserver nfs kerberos-config*> show -instance
               Vserver: SVM1
     Logical Interface: lif1
            IP Address: 192.168.168.53
      Kerberos Enabled: disabled
Service Principal Name: -
   Organizational Unit: -

NFS Options

SVM1::vserver nfs*> show
Virtual General
Server  Access  v3      v4.0     v4.1     UDP TCP     SpinAuth
------- ------- ------- -------- -------- --- ------- -------
SVM1    true    enabled disabled disabled -   enabled disabled

SVM1::vserver nfs*> show -instance
                                           Vserver: SVM1
                                General NFS Access: true
             RPC GSS Context Cache High Water Mark: 0
                              RPC GSS Context Idle: 0
                                            NFS v3: enabled
                                          NFS v4.0: disabled
                                      UDP Protocol: -
                                      TCP Protocol: enabled
                               Spin Authentication: disabled
                              Default Windows User: -
                       Enable NFSv3 EJUKEBOX error: true
 Require All NFSv3 Reads to Return Read Attributes: false
Show Change in FSID as NFSv3 Clients Traverse Filesystems: enabled
Enable the Dropping of a Connection When an NFSv3 Request is Dropped: enabled
                Vserver NTFS Unix Security Options: use_export_policy
                     Vserver Change Ownership Mode: use_export_policy
            Force Usage of SpinNp Readdir Requests: false
                        NFS Response Trace Enabled: false
                    NFS Response Trigger (in secs): 60
                         UDP Maximum Transfer Size: 32768
                         TCP Maximum Transfer Size: 65536
                       NFSv3 TCP Maximum Read Size: 65536
                      NFSv3 TCP Maximum Write Size: 65536
                               NFSv4.0 ACL Support: disabled
                   NFSv4.0 Read Delegation Support: disabled
                  NFSv4.0 Write Delegation Support: disabled
Show Change in FSID as NFSv4 Clients Traverse Filesystems: enabled
                          NFSv4.0 Referral Support: disabled
                           NFSv4 ID Mapping Domain: defaultv4iddomain.com
NFSv4 Validate UTF-8 Encoding of Symbolic Link Data: disabled
               NFSv4 Lease Timeout Value (in secs): 30
               NFSv4 Grace Timeout Value (in secs): 45
Preserves and Modifies NFSv4 ACL (and NTFS File Permissions in Unified Security Style): enabled
                     NFSv4.1 Minor Version Support: disabled
                                     Rquota Enable: disabled
                  NFSv4.1 Implementation ID Domain: netapp.com
                    NFSv4.1 Implementation ID Name: NetApp Release 8.2.1 Cluster-Mode
                    NFSv4.1 Implementation ID Date: Fri Mar 21 14:25:07 2014
                      NFSv4.1 Parallel NFS Support: enabled
                         NFSv4.0 Migration Support: disabled
                          NFSv4.1 Referral Support: disabled
                         NFSv4.1 Migration Support: disabled
                               NFSv4.1 ACL Support: disabled
                              NFS vStorage Support: disabled
               NFSv4 support for Numeric Owner IDs: enabled
                             Default Windows Group: -
                   NFSv4.1 Read Delegation Support: disabled
                  NFSv4.1 Write Delegation Support: disabled
Number of Slots in the NFSv4.x Session slot tables: 180
Size of the Reply that will be Cached in Each NFSv4.x Session Slot (in bytes): 640
                    Maximum Number of ACEs per ACL: 400
                               NFS Mount Root Only: enabled
                                     NFS Root Only: disabled
                             Qtree Exports Enabled: disabled
 Validation of Qtree IDs for Qtree File Operations: enabled

Options Options

SVM1::*> options
    cifs.grant_implicit_exe_perms disabled
    cifs.wins_servers  -

UNIX Users and Groups

SVM1::vserver services unix-group*> show
Vserver Name   ID
------- ------ --
SVM1    daemon 1
SVM1    nobody 65535
SVM1    pcuser 65534
SVM1    root   0

SVM1::vserver services unix-group*> show -instance

   Vserver: SVM1
Group Name: daemon
  Group ID: 1
     Users: -

   Vserver: SVM1
Group Name: nobody
  Group ID: 65535
     Users: -

   Vserver: SVM1
Group Name: pcuser
  Group ID: 65534
     Users: -

   Vserver: SVM1
Group Name: root
  Group ID: 0
     Users: -

SVM1::vserver services unix-user*> show
        User   User  Group Full
Vserver Name   ID    ID    Name
------- ------ ----- ----- ----
SVM1    nobody 65535 65535
SVM1    pcuser 65534 65534
SVM1    root   0     1

CIFS: Shares

SVM1::vserver cifs share*> show
Vserver Share  Path Properties Comment ACL
------- ------ ---- ---------- ------- ---
SVM1    admin$ /    browsable  -       -
SVM1    c$     /    oplocks    -       BUILTIN\Administrators / Full Control
                    browsable
                    changenotify
SVM1    ipc$   /    browsable  -       -

SVM1::vserver cifs share*> show -instance

                      Vserver: SVM1
                        Share: admin$
     CIFS Server NetBIOS Name: SVM1
                         Path: /
             Share Properties: browsable
           Symlink Properties: -
      File Mode Creation Mask: -
 Directory Mode Creation Mask: -
                Share Comment: -
                    Share ACL: -
File Attribute Cache Lifetime: -
                  Volume Name: rootvol
                Offline Files: -
Vscan File-Operations Profile: standard

                      Vserver: SVM1
                        Share: c$
     CIFS Server NetBIOS Name: SVM1
                         Path: /
             Share Properties: oplocks
                               browsable
                               changenotify
           Symlink Properties: enable
      File Mode Creation Mask: -
 Directory Mode Creation Mask: -
                Share Comment: -
                    Share ACL: BUILTIN\Administrators / Full Control
File Attribute Cache Lifetime: -
                  Volume Name: rootvol
                Offline Files: -
Vscan File-Operations Profile: standard

                      Vserver: SVM1
                        Share: ipc$
     CIFS Server NetBIOS Name: SVM1
                         Path: /
             Share Properties: browsable
           Symlink Properties: -
      File Mode Creation Mask: -
 Directory Mode Creation Mask: -
                Share Comment: -
                    Share ACL: -
File Attribute Cache Lifetime: -
                  Volume Name: rootvol
                Offline Files: -
Vscan File-Operations Profile: standard

CIFS: Home Directory Paths (/etc/cifs_homedir.cfg)

SVM1::vserver cifs home-directory search-path*> show
This table is currently empty.

CIFS: Preferred DC

SVM1::vserver cifs domain preferred-dc*> show
This table is currently empty.

CIFS: Name-Mappings (/etc/usermap.cfg)

SVM1::vserver name-mapping*> show
This table is currently empty.

CIFS: symlinks

SVM1::vserver cifs symlink*> show
This table is currently empty.

CIFS: Audit-Log Configuration

SVM1::*> cifs audit start
Error: Cannot enable auditing for Vserver "SVM1". Reason: You must create an audit configuration before enabling auditing.

SVM1::*> vserver audit enable
Error: command failed: Cannot enable auditing for Vserver "SVM1". Reason: You must create an audit configuration before enabling auditing.

SVM1::*> vserver audit show
This table is currently empty.

CIFS: Local Users and Groups (LUG)

SVM1::vserver cifs users-and-groups local-user*> show
Vserver User Name          Full Name Description
------- ------------------ --------- -------------
SVM1    SVM1\Administrator           Built-in administrator account

SVM1::vserver cifs users-and-groups local-user*> show -instance
            Vserver: SVM1
          User Name: SVM1\Administrator
          Full Name:
        Description: Built-in administrator account
Is Account Disabled: true

SVM1::vserver cifs users-and-groups local-user*> show-membership
Vserver User Name          Membership
------- ------------------ ----------------------
SVM1    SVM1\Administrator BUILTIN\Administrators

SVM1::vserver cifs users-and-groups local-user*> show-sid
Vserver Local User         SID
------- ------------------ -------------------------------
SVM1    SVM1\Administrator S-1-5-21-1395698318-4035919541-3613059517-500

VM1::vserver cifs users-and-groups local-group*> show
Vserver Group Name               Description
------- ------------------------ ----------------------------
SVM1    BUILTIN\Administrators   Built-in Administrators group
SVM1    BUILTIN\Backup Operators Backup Operators group
SVM1    BUILTIN\Power Users      Restricted administrative privileges
SVM1    BUILTIN\Users            All users

SVM1::vserver cifs users-and-groups local-group*> show-members
Vserver Group Name             Members
------- ---------------------- ------------------
SVM1    BUILTIN\Administrators SVM1\Administrator
                               LAB\Domain Admins
        BUILTIN\Users          LAB\Domain Users

SVM1::vserver cifs users-and-groups local-group*> show-sid
Vserver Local Group              SID
------- ------------------------ ------------
SVM1    BUILTIN\Administrators   S-1-5-32-544
SVM1    BUILTIN\Backup Operators S-1-5-32-551
SVM1    BUILTIN\Power Users      S-1-5-32-547
SVM1    BUILTIN\Users            S-1-5-32-545

SVM1::vserver cifs users-and-groups privilege*> show
This table is currently empty.

SVM1::vserver cifs users-and-groups*> show-domain-sid
Vserver Domain SID
------- ----------------------------------------
SVM1    S-1-5-21-1395698318-4035919541-3613059517

CIFS: Name-Mapping-Search

SVM1::vserver cifs domain name-mapping-search*> show
This table is currently empty.

CIFS: GPO Settings

SVM1::vserver cifs group-policy*> show
Vserver GPO Status
------- ----------
SVM1    disabled

SVM1::vserver cifs group-policy*> show -instance

                 Vserver: SVM1
     Group Policy Status: disabled
Group Policy Zapi Status: false

CIFS: CIFS Server Settings

SVM1::vserver cifs*> show
        Server Status Domain/Workgroup Authentication
Vserver Name   Admin  Name             Style
------- ------ ------ ---------------- --------------
SVM1    SVM1   up     LAB              domain

SVM1::vserver cifs*> show -instance

                                          Vserver: SVM1
                         CIFS Server NetBIOS Name: SVM1
                    NetBIOS Domain/Workgroup Name: LAB
                      Fully Qualified Domain Name: LAB.PRIV
Default Site Used by LIFs Without Site Membership:
                             Authentication Style: domain
                CIFS Server Administrative Status: up

CIFS: Options

SVM1::vserver cifs options*> show -instance

                                           Vserver: SVM1
                                 Default UNIX User: pcuser
                    Read Grants Exec for Mode Bits: disabled
    Windows Internet Name Service (WINS) Addresses: -
                 Enable/Disable all SMB2 Protocols: true
                  Enable/Disable the SMB3 Protocol: true
Maximum Simultaneous Operations per TCP Connection: 255
       Maximum Depth of Directories to Shadow Copy: 5
           Enable/Disable the Copy Offload Feature: true
                                Default UNIX Group: -
      Enable/Disable the Shadow Copy Feature (VSS): true
                Refer Clients to More Optimal LIFs: false
          Enable/Disable Local User Authentication: true
             Enable/Disable Local Users and Groups: true
              Enable/Disable Reparse Point Support: true
           Enable/Disable Export Policies for CIFS: false
Enable/Disable Enumeration of Trusted Domain and Search Capability: true
Size of File System Sector Reported to SMB Clients (bytes): 4096

CIFS: Security

SVM1::vserver cifs security*> show

                 Kerberos Clock Skew:     5 minutes
                 Kerberos Ticket Age:    10 hours
                Kerberos Renewal Age:     7 days
                 Is Signing Required: false
     Is Password Complexity Required:  true
Use start_tls For AD LDAP connection: false

CIFS: Shadowcopy

SVM1::vserver cifs shadowcopy*> show
This table is currently empty.

DNS (/etc/resolv.conf)

SVM1::vserver services dns*> show -instance

           Vserver: SVM1
           Domains: lab.priv, test.priv
      Name Servers: 192.168.168.11
Enable/Disable DNS: enabled
    Timeout (secs): 2
  Maximum Attempts: 1

NIS

Note: Remember, our Vserver SVM1 was not configured with NIS

SVM1::vserver services nis-domain*> show
This table is currently empty.

LDAP

Note: Remember, our Vserver SVM1 was not configured with LDAP

SVM1::vserver services ldap*> show
This table is currently empty.

SVM1::vserver services ldap client*> show
This table is currently empty.

Hosts (/etc/hosts)

SVM1::vserver services dns hosts*> show
This table is currently empty.

Quotas

SVM1::volume quota*> show
                      Scan
Vserver Volume  State Status
------- ------- ----- ------
SVM1    rootvol off        -

SVM1::volume quota*> show -instance

              Vserver Name: SVM1
               Volume Name: rootvol
               Quota State: off
               Scan Status: -
          Logging Messages: -
          Logging Interval: -
          Sub Quota Status: none
  Last Quota Error Message: -
Collection of Quota Errors: -
       User Quota enforced: -
      Group Quota enforced: -
       Tree Quota enforced: -

SVM1::volume quota policy*> show
Vserver Policy Name Last Modified      Policy ID
------- ----------- ----------------   ---------
SVM1    default     5/17/2014 21:09:41 8589934593

SVM1::volume quota policy rule*> show
This table is currently empty.

Schedules

SVM1::job schedule*> show
Name   Type     Description
------ -------- -----------
5min   cron     @:00,:05,:10,:15,:20,:25,:30,:35,:40,:45,:50,:55
8hour  cron     @2:15,10:15,18:15
RepositoryBalanceMonitorJobSchedule
       interval Every 10m
daily  cron     @0:10
hourly cron     @:05
weekly cron     Sun@0:15

Snapshot Schedule (Policies in CDOT)

SVM1::volume snapshot policy*> show -instance

                  Vserver: SVM1
     Snapshot Policy Name: default
  Snapshot Policy Enabled: true
             Policy Owner: cluster-admin
                  Comment: Default policy with hourly, daily & weekly schedules.
Total Number of Schedules: 3
    Schedule Count Prefix SnapMirror Label
    -------- ----- ------ ----------------
    hourly       6 hourly -
    daily        2 daily  daily
    weekly       2 weekly weekly

                  Vserver: SVM1
     Snapshot Policy Name: default-1weekly
  Snapshot Policy Enabled: true
             Policy Owner: cluster-admin
                  Comment: Default policy with 6 hourly, 2 daily & 1 weekly schedule.
Total Number of Schedules: 3
    Schedule Count Prefix SnapMirror Label
    -------- ----- ------ ----------------
    hourly       6 hourly -
    daily        2 daily  -
    weekly       1 weekly -

                  Vserver: SVM1
     Snapshot Policy Name: none
  Snapshot Policy Enabled: false
             Policy Owner: cluster-admin
                  Comment: Policy for no automatic snapshots.
Total Number of Schedules: 0
    Schedule Count Prefix SnapMirror Label
    -------- ----- ------ ----------------
    -            - -      -

Volume Settings

Volume settings are transitioned by 7MTT. The below outputs shows the default volume settings for our SVM’s rootvol, and configurable (modify-able) volume modify output:

SVM1::volume*> show
Vserver Volume  Aggregate State  Type Size Available Used%
------- ------- --------- ------ ---- ---- --------- -----
SVM1    rootvol aggr1     online RW   20MB   18.88MB    5%

SVM1::volume*> show -instance
                                     Vserver Name: SVM1
                                      Volume Name: rootvol
                                   Aggregate Name: aggr1
                                      Volume Size: 20MB
                                     Name Ordinal: base
                               Volume Data Set ID: 1025
                        Volume Master Data Set ID: 2147484673
                                     Volume State: online
                                      Volume Type: RW
                                     Volume Style: flex
                           Is Cluster-Mode Volume: true
                            Is Constituent Volume: false
                                    Export Policy: default
                                          User ID: -
                                         Group ID: -
                                   Security Style: ntfs
                                 UNIX Permissions: ------------
                                    Junction Path: /
                             Junction Path Source: -
                                  Junction Active: -
                           Junction Parent Volume: -
                              Vserver Root Volume: true
                                          Comment:
                                   Available Size: 18.88MB
                                  Filesystem Size: 20MB
                          Total User-Visible Size: 19MB
                                        Used Size: 124KB
                                  Used Percentage: 5%
             Volume Nearly Full Threshold Percent: 95%
                    Volume Full Threshold Percent: 98%
             Maximum Autosize (for flexvols only): 24MB
           Autosize Increment (for flexvols only): 1MB
                                 Minimum Autosize: 20MB
               Autosize Grow Threshold Percentage: 85%
             Autosize Shrink Threshold Percentage: 50%
                                    Autosize Mode: off
             Autosize Enabled (for flexvols only): false
              Total Files (for user-visible data): 566
               Files Used (for user-visible data): 97
                           Maximum Directory Size: 15.91MB
                            Space Guarantee Style: volume
                        Space Guarantee in Effect: true
                               Minimum Read Ahead: false
                       Access Time Update Enabled: true
                Snapshot Directory Access Enabled: true
                     Space Reserved for Snapshots: 5%
                            Snapshot Reserve Used: 42%
                                  Snapshot Policy: default
                                    Creation Time: Sat May 17 21:09:42 2014
                                         Language: en
                                     Clone Volume: false
                           FlexCache Cache Policy: -
                        FlexCache Minimum Reserve: -
                            FlexCache Delegations: true
                                        Node name: CLU1N1
                               UUID of the Volume: 2f51521f-ddff-11e3-be1b-123478563412
                                    NVFAIL Option: off
                          Volume's Nvfailed State: false
                        Is File System Size Fixed: false
                                    Extent Option: off
                    Reserved Space for Overwrites: 0B
                               Fractional Reserve: 100%
                       Load Sharing Source Volume: -
                               Move Target Volume: false
                          Physical Replica Volume: false
                       Maximum Write Alloc Blocks: 0
                      Snapshot Cloning Dependency: off
                     Use Unicode Directory Format: true
            Convert Directories to Unicode Format: true
                Primary Space Management Strategy: volume_grow
                         Read Reallocation Option: off
                 Inconsistency in the File System: false
                     Is Volume Quiesced (On-Disk): false
                   Is Volume Quiesced (In-Memory): false
                       Transition Operation State: none
                              Transition Behavior: none
                            Copied for Transition: false
                                     Transitioned: false
        Volume Contains Shared or Compressed Data: false
       Volume Efficiency metadata Logging Enabled: false
                Space Saved by Storage Efficiency: 0B
           Percentage Saved by Storage Efficiency: 0%
                     Space Saved by Deduplication: 0B
                Percentage Saved by Deduplication: 0%
                    Space Shared by Deduplication: 0B
                       Space Saved by Compression: 0B
            Percentage Space Saved by Compression: 0%
                      Instance UUID of the Volume: 4573d88f-f8cb-48e7-a8be-791a9126fad5
                    Provenance UUID of the Volume: 4573d88f-f8cb-48e7-a8be-791a9126fad5
                                       Block Type: 64-bit
                      FlexCache Connection Status: -
  Virtual Machine Alignment 512-Byte Sector Count: -
                 Virtual Machine Alignment Suffix: -
                                 Is Volume Moving: false
                   Flash Pool Caching Eligibility: read-write
    Flash Pool Write Caching Ineligibility Reason: -
                       Managed By Storage Service: -
                             Storage Service Name: -
Create Namespace Mirror Constituents For SnapDiff Use: -
         Action When Attributes Are Not Reachable: -
                          Constituent Volume Role: -
            Maximum Size of Namespace Constituent: -
            Maximum Size of Each Data Constituent: -
                              Directory Bit Width: -
                            QoS Policy Group Name: -
                  Is Volume Move in Cutover Phase: false
          Number of Snapshot Copies in the Volume: 7

SVM1::volume*> vol modify -volume rootvol -
-atime-update
 -autosize
 -autosize-grow-threshold-percent
 -autosize-increment
 -autosize-increment-percent
 -autosize-mode
 -autosize-reset
 -autosize-shrink-threshold-percent
 -comment
 -convert-ucode
 -enable-snapdiff
 -extent-enabled
 -fc-delegs-enabled
 -files
 -filesys-size-fixed
 -flexcache-cache-policy
 -flexcache-min-reserve
 -foreground
 -fractional-reserve
 -group
 -in-nvfailed-state
 -is-managed-by-service
 -junction-active
 -max-autosize
 -max-data-constituent-size
 -maxdir-size
 -max-namespace-constituent-size
 -max-write-alloc-blocks
 -min-autosize
 -min-readahead
 -ns-mirror-aggr-list
 -nvfail
 -percent-snapshot-space
 -policy
 -qos-policy-group
 -read-realloc
 -security-style
 -size
 -snapdir-access
 -snapshot-clone-dependency
 -snapshot-policy
 -space-full-threshold-percent
 -space-guarantee
 -space-mgmt-try-first
 -space-nearly-full-threshold-percent
 -state
 -storage-service
 -unix-permissions
 -unreachable-attr-action
 -user
 -vserver

Qtree Settings

Qtree settings are transitioned by 7MTT. The below outputs shows the default qtree settings for our SVM’s rootvol, and configurable (modify-able) qtree modify output:

SVM1::*> qtree show
Vserver Volume  Qtree Style Oplocks Status
------- ------- ----- ----- ------- ------
SVM1    rootvol ""    ntfs  enable  normal

SVM1::*> qtree show -instance

              Vserver Name: SVM1
               Volume Name: rootvol
                Qtree Name: ""
                Qtree Path: /vol/rootvol
            Security Style: ntfs
               Oplock Mode: enable
          Unix Permissions: -
                  Qtree Id: 0
              Qtree Status: normal
             Export Policy: default
Is Export Policy Inherited: true

SVM1::*> qtree modify -
 -export-policy
 -qtree
 -qtree-path
 -oplock-mode
 -security-style
 -volume
 -vserver
 -unix-permissions

Manually Transitioned Stuff

Default configuration of some stuff that needs to be manually transitioned is below:

Anti-Virus

SVM1::vserver vscan*> show
Vserver Vscan Status
------- ------------
SVM1    off

SVM1::vserver vscan*> scanner-pool show
This table is currently empty.

SVM1::vserver vscan*> scanner-pool show-active
                              Privileged
Vserver Scanner Pools Servers Users
------- ------------- ------- -----
SVM1    -             -       -

SVM1::vserver vscan*> on-access-policy
    create  delete  disable enable  modify  show

SVM1::vserver vscan*> on-access-policy show
        Policy   Policy                          File-Ext Policy
Vserver Name     Owner   Protocol Paths Excluded Excluded Status
------- -------- ------- -------- -------------- -------- ------
SVM1    default_ cluster CIFS     -              -        on
        CIFS

SVM1::vserver vscan*> on-access-policy show -instance

                           Vserver: SVM1
                            Policy: default_CIFS
                     Policy Status: on
               Policy Config Owner: cluster
              File-Access Protocol: CIFS
                           Filters: scan-mandatory
Max File Size Allowed for Scanning: 2GB
            File-Paths Not to Scan: -
       File-Extensions Not to Scan: -

SVM1::*> cifs share modify -vscan-fileop-profile
    no-scan     standard    strict      writes-only

Fpolicy

SVM1::vserver fpolicy policy*> show
This table is currently empty.

SVM1::vserver fpolicy*> show
This table is currently empty.

SVM1::vserver fpolicy*> show-engine
This table is currently empty.

BranchCache Settings

SVM1::vserver cifs branchcache*> show
This table is currently empty.

Things to be Researched Regards Existence/Location in CDOT

/etc/nsswitch.conf
/etc/passwd
/etc/group

No comments:

Post a Comment