Environment
Novell Filr
NetAPP ONTAP
NetAPP ONTAP
Situation
When building the first Filr Cluster node, connected to a NetAPP NAS device, the configuration of that node fails.
The installer errors out on a Permission Denied when attempting a chown or chmod on a file or folder hosted on the /vashare mount.
The installer errors out on a Permission Denied when attempting a chown or chmod on a file or folder hosted on the /vashare mount.
Resolution
For a NetAPP hosted NFS share, enable the hidden parameter wafl.root_only_chown off option for the exported volume, as per NetAPP KB 1010211
For a NetAPP hosted CIFS share, enable the hidden parameter cifs.ntfs_ignore_unix_security_ops as per NetAPP KB 3011859
In this case the Filr's /etc/samba/smb.conf must be reconfigured so the [global] section has these options set:
Some of the NetAPP NAS devices require the including of the domain when authenticating, this can be achieved by reconfiguring the Filr's /etc/samba/smb.conf under the [global] section by changing
For a NetAPP hosted CIFS share, enable the hidden parameter cifs.ntfs_ignore_unix_security_ops as per NetAPP KB 3011859
In addition, some of the NetAPP NAS devices only support cifs and not NTLMv2 or up.In this case the Filr's /etc/samba/smb.conf must be reconfigured so the [global] section has these options set:
client ntlmv2 auth = no
client max protocol = NT1
Some of the NetAPP NAS devices require the including of the domain when authenticating, this can be achieved by reconfiguring the Filr's /etc/samba/smb.conf under the [global] section by changing
workgroup = {domain_name}Where {domain_name} reads the domain's short DNS name which can be resolved by the Filr to the IP addresses of the AD Domain controllers.
Cause
The NetAPP ONTAP by default does not allow chown or chmod commands.
These commands are used to populate the /vashare during the configuration, when these commands fail, the initial Filr configuration fails.
The by NetAPP documented hidden parameter is to allow this.
These commands are used to populate the /vashare during the configuration, when these commands fail, the initial Filr configuration fails.
The by NetAPP documented hidden parameter is to allow this.