cookie_monster Posted July 20, 2009 Posted July 20, 2009 (edited) Does anyone know if there will be a JBOD addon for the 7110 yet? Also I can't get the Phone Home service to connect either, i've definitely entered the right proxy and port I get the message below. We're on EMBC if that helps anyone. The appliance was unable to connect to the remote support servers (or the web proxy, if specified). Check your proxy and network configuration Thanks. Edited July 20, 2009 by cookie_monster
Hebdenlad Posted July 20, 2009 Posted July 20, 2009 UPDATE: The latest firmware release doesn't provide a solution to the FF3.5 bugs or the two-domain issue, but I do have a workaround for the latter if it affects anyone else: We have full trust between our two domains, but the S7000 still won't see user accounts or groups on Domain B if it's joined to Domain A. As Ric_ points out, the most obvious solution would be to create a group in Domain A and add users from Domain B to it. However, this doesn't appear to be possible, at least not for us and other people I found online. What you can do however is add a group from one domain to a group on another domain, so the solution is to create a group in Domain A called Domain B Users and give Domain B's admin account control of it. Then go onto Domain B, pick a group that contains all your Domain B users, to go 'Member Of' and select Domain B Users from Domain A. You can now go onto the S7000 and add Domain B Users@Domain A from the same domain that the SAN is on, and it will apply the permissions to the users on Domain B. Anyone know about submitting bugs to Sun regarding the FF3.5 issues? Cheers, Chris Morning. If you guys are coming across bugs on a regular basis can you please feed them back to me as soon as you can? Once I know about them I can determine if they are actually bugs or if there is a solution that already exists. You can either PM or reply on here and I'll pick it up as soon as possible. If they are real showstoppers then log a support call and / or call me via the number I have on here. Cheers, Phil
Ric_ Posted July 20, 2009 Author Posted July 20, 2009 Does anyone know if there will be a JBOD addon for the 7110 yet? It's no secret that this won't be possible. Also I can't get the Phone Home service to connect either, i've definitely entered the right proxy and port I get the message below. We're on EMBC if that helps anyone. Are you using a local proxy? Does that have error logs that suggest what the problem might be?
cookie_monster Posted July 20, 2009 Posted July 20, 2009 (edited) It's no secret that this won't be possible. Oh...this was being seriously talked about as an option when we bought it So there are no expansion options for the 7110 then, if we want more storage we just buy another unit? Are you using a local proxy? Does that have error logs that suggest what the problem might be? It goes straight to the LEA proxy, all i see in the logs is Registered new client public key for SOA Failed (unable to connect) Cheers. Edited July 20, 2009 by cookie_monster
Ric_ Posted July 20, 2009 Author Posted July 20, 2009 Oh...this was being seriously talked about as an option when we bought it So there are no expansion options for the 7110 then, if we want more storage we just buy another unit? Replacing the disks may be an option - Sun down't currently have an upgrade option though so it means buying lots of new SAS disk It goes straight to the LEA proxy, all i see in the logs is If you have a local proxy that could be used, you would be able to get more log messages. Mine run through a Smoothie UTM which goes upstream to the LA proxy.
cookie_monster Posted July 20, 2009 Posted July 20, 2009 Replacing the disks may be an option - Sun down't currently have an upgrade option though so it means buying lots of new SAS disk I think we'll just buy a second unit next year but maybe a higher spec model that will support JBOD, i'm a bit dissapointed about that. If you have a local proxy that could be used, you would be able to get more log messages. Mine run through a Smoothie UTM which goes upstream to the LA proxy. We have just got a smoothwall UTM so i'll give that a try.
Duke Posted July 21, 2009 Posted July 21, 2009 Also I can't get the Phone Home service to connect either, i've definitely entered the right proxy and port I get the message below. We're on EMBC if that helps anyone. I had some issues with this too. The 7410 wouldn't accept our external ISP (SWGfL) proxy, which is my preferred option as it doesn't rely on anything internal, doesn't require authentication and has very little filtering. I also couldn't use our internal ISA server, either with or without authentication, even if I set up a rule on ISA to pass through all traffic from the 7410. In the end I had to tell it to use our internal filtering system with authentication and give the 7410 a username that doesn't get any filtering, and it seemed to accept this and do Phone Homes. However, I still can't upload support bundles which is a pain, it just completely fails and I'm not really sure why. The internal filter goes upstream to the ISP proxy so there shouldn't be any issues there. Think Sun might need to do some more diverse proxy testing? It's something that'll affect most educational sites... Cheers, Chris
cookie_monster Posted July 21, 2009 Posted July 21, 2009 I'll have a go at pointing it to the smoothwall when I get chance cheers. Have you tried NFS on your SAN? I configured an NFS share but when I add it in Xen it shows as taking up all 1400Gb, how do you limit the space availiable to an NFS share? I tried setting a Reservation of 250Gb in the Space Usage tab. Any idea?
Duke Posted July 21, 2009 Posted July 21, 2009 You should be able to use the quota on the share page to set up how much space you want to be visible and accessible. Because you don't have to set up a specific size on a share like you do on a LUN, by default it will see all the available space and just use what it needs.
ArchersIT Posted July 21, 2009 Posted July 21, 2009 I had some issues with this too. The 7410 wouldn't accept our external ISP (SWGfL) proxy, which is my preferred option as it doesn't rely on anything internal, doesn't require authentication and has very little filtering. I also couldn't use our internal ISA server, either with or without authentication, even if I set up a rule on ISA to pass through all traffic from the 7410. In the end I had to tell it to use our internal filtering system with authentication and give the 7410 a username that doesn't get any filtering, and it seemed to accept this and do Phone Homes. However, I still can't upload support bundles which is a pain, it just completely fails and I'm not really sure why. The internal filter goes upstream to the ISP proxy so there shouldn't be any issues there. Think Sun might need to do some more diverse proxy testing? It's something that'll affect most educational sites... Cheers, Chris It all works here for our 7110 going through our ISA 2004 server and onwards to our E2BN proxy. Phone home - support bundles the lot. No authentication setup - just a rule to let it talk out. Jonathan 1
Duke Posted July 21, 2009 Posted July 21, 2009 Strange, wonder why ours didn't work then... I'll give it another go at some point, cheers.
cookie_monster Posted July 21, 2009 Posted July 21, 2009 by default it will see all the available space and just use what it needs. But then if I wanted to setup a LUN or CIFS share I couldn't. I'll try the quota again, it didn't seem to do anything last time.
Duke Posted July 21, 2009 Posted July 21, 2009 But then if I wanted to setup a LUN or CIFS share I couldn't. I'll try the quota again, it didn't seem to do anything last time. It doesn't actually partition/format any of the space it hasn't used so all the rest of your SAN is still free to use as you want. You'd only run into problems if your un-quota'd CIFS/NFS shares filled up all the space on the SAN, at least as far as I understand it. You could leave all your CIFS/NFS shares without a quota and just keep an eye on them, but it's probably a good idea to set a sensible quota on all of them just to avoid accidentally filling the whole SAN.
cookie_monster Posted July 21, 2009 Posted July 21, 2009 Ok I just created a LUN as well and it worked. Interestingly when I set a reserved amount on the SAN it says Size 250Gb but in Xen it still thinks it had 1.4Tb. Not to worry that's probably just how Xen looks at it, I wonder what happens if it runs into the limit maybe i'll try it. Have you gone with NFS in the end for your VM's?
Duke Posted July 21, 2009 Posted July 21, 2009 Have you gone with NFS in the end for your VM's? Nothing definite yet, but it looks likely from what everyone is saying and how the performance figures look. We won't be virtualising everything until next year so I've got a bit of time to see how things develop.
Duke Posted July 22, 2009 Posted July 22, 2009 Question time again! Is anyone doing differential or incremental backups of their S7000? Backup Exec 10d doesn't work properly on the SAN with using the modified time, for some reason it just does a full backup each night instead of just catching the files that have changed. I've switched it over to using the archive bit and it now seems to be just getting the modified files with the archive bit set. However, Windows does a pretty useless job of handling the archive bit and it can be reset but users, other programs, or just not turned on/off by Windows in the first place. Has anyone got the S7000 reliably doing differential/incremental backups in a different way or with a newer version of BE? Second question is whether anyone is still seeing irregularities in CIFS permissions? Most things are working fine for me, but one of my colleagues tried to give students write permissions on a subfolder where they typically only have inherited read permissions. This hung on him and failed, so he made a new folder and tried the same and it worked. However, I now have another folder which has write/read permissions that Windows says is inherited from the parent, but the parent just had read permissions! Any thoughts? Chris
Ric_ Posted July 22, 2009 Author Posted July 22, 2009 @Duke: I haven't noticed any backup issues but then I only do full backups (my baby 7110 is a little smaller than your monster) and I use Retrospect rather than Backup Exec. I had a couple of CIFS permissions problems at first but they were cleared up by a firmware update. You on the latest software (Q2.3.1)? If you speak to Sun they'll get you to update that before anything so you may as well check it first. 1
Duke Posted July 22, 2009 Posted July 22, 2009 Yep, I'm on the latest release so that shouldn't be a problem. On that note, if there a mailing list for S7000 updates? I know they do an RSS feed, but that's not exactly the easiest way to get notifications... My full backups work fine too, it's just the daily differentials I'm having problems with. I'm wondering if it's worth ditching Backup Exec, it's not exactly the best product in the world and it's far from cheap. The only thing is it's industry standard... Thanks. Chris
Ric_ Posted July 22, 2009 Author Posted July 22, 2009 Yep, I'm on the latest release so that shouldn't be a problem. On that note, if there a mailing list for S7000 updates? I know they do an RSS feed, but that's not exactly the easiest way to get notifications... I just have the RSS feed from Fishworks in my IE toolbar and then check it every so often. My full backups work fine too, it's just the daily differentials I'm having problems with. I'm wondering if it's worth ditching Backup Exec, it's not exactly the best product in the world and it's far from cheap. The only thing is it's industry standard... It is ridiculously expensive and is there really an 'industry standard' backup software? I've been thinking about using Amanda - see Amanda Open Source Backup and AMANDA, The Advanced Maryland Automatic Network Disk Archiver . I think that this has NDMP too and I've got a feeling that it's a Sun supported backup solution too which is a bonus.
cookie_monster Posted July 22, 2009 Posted July 22, 2009 (edited) The backup specialist at one of our suppliers who has used BackupExec for over 10 years has been testing MS Data protection manager and was only the other day telling me that he conciders it to be a much better product and costs less. It might be worth a look. @ Ric_, Amanda looks interesting have you tried it? Edited July 22, 2009 by cookie_monster
Ric_ Posted July 22, 2009 Author Posted July 22, 2009 @ Ric_, Amanda looks interesting have you tried it? I intend to give it a bash... I may even get a price on Enterprise because they do educational discounts. I may have lied about NDMP support mind
cookie_monster Posted July 22, 2009 Posted July 22, 2009 When you update the firmware on the SAN do you turn off your VM's and your Xen/VMWare servers as well or is is sufficient to just make sure that no VM's are running when it restarts.
Ric_ Posted July 22, 2009 Author Posted July 22, 2009 When you update the firmware on the SAN do you turn off your VM's and your Xen/VMWare servers as well or is is sufficient to just make sure that no VM's are running when it restarts. Just make sure your VMs are shut down - one of mine decided to ignore the fact that I told it not to reboot and it did it anyway... screwing all sorts!
Duke Posted July 22, 2009 Posted July 22, 2009 Amanda is definitely one of the biggest names in open-source backup software. There's a big section on it in the O'Reilly Backup & Recovery book so I think I'll have a look through it. How does the open source and smaller vendor's backup solutions do with things like tape drives, which often work best with drivers from the backup providers themselves? When you update the firmware on the SAN do you turn off your VM's and your Xen/VMWare servers as well or is is sufficient to just make sure that no VM's are running when it restarts. Must admit I'd never really thought about this (haven't had any VMs running as they've only been on for testing). How much of an issue is having the odd read/write to a CIFS share during a firmware update and reboot? Cheers, Chris
Ric_ Posted July 22, 2009 Author Posted July 22, 2009 Must admit I'd never really thought about this (haven't had any VMs running as they've only been on for testing). How much of an issue is having the odd read/write to a CIFS share during a firmware update and reboot? During the upload and patching phase it doesn't really matter but obviously the reboot phase kinda of breaks everything!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now