• No results found

NetApp NCDA Exercise Guide

N/A
N/A
Protected

Academic year: 2021

Share "NetApp NCDA Exercise Guide"

Copied!
209
0
0

Loading.... (view fulltext now)

Full text

(1)

NETAPP UNIVERSITY

Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode

Exercise Guide

Course Number: STRSW-ILT-ANCDA-D87M Catalog Number: STRSW-ILT-ANCDA-D87M-EG Content Version: 1.0

(2)

ATTENTION

The information contained in this guide is intended for training use only. This guide contains information and activities that, while beneficial for the purposes of training in a closed, non-production environment,

can result in downtime or other severe consequences and therefore are not intended as a reference guide. This guide is not a technical reference and should not, under any circumstances, be used in production environments. To obtain reference materials, please refer to the NetApp product documentation located at http://now.netapp.com/ for product information.

COPYRIGHT

© 2010 NetApp, Inc. All rights reserved. Printed in the U.S.A. Specifications subject to change without notice.

No part of this book covered by copyright may be reproduced in any form or by any means—graphic, electronic, or mechanical, including photocopying, recording, taping, or storage in an electronic retrieval system—without prior written permission of the copyright owner. NetApp reserves the right to change any products described herein at any time and without notice.

NetApp assumes no responsibility or liability arising from the use of products or materials described herein, except as expressly agreed to in writing by NetApp. The use or purchase of this product or

materials does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NetApp. The product described in this manual may be protected by one or more U.S. patents, foreign patents,

or pending applications.

RESTRICTED RIGHTS LEGEND

NetApp Documentation is protected by Copyright and is provided to U.S. Government Agencies with LIMITED RIGHTS as defined at FAR 52.227-14(a). Use, duplication, or disclosure by the U.S. Government is subject to the restrictions as set forth therein. In the event of use by a DOD agency, the Government's rights in Documentation are governed by the restrictions in the Technical Data Commercial Items clause at DFARS 252.227-7015 and the Commercial Computer Software and Commercial Computer Software Documentation clause at DFARS 252.227-7202.

TRADEMARK INFORMATION

NetApp, the NetApp logo, Go Further, Faster, Data ONTAP, Appliance Watch, ASUP, AutoSupport, Bolt Design, Center-to-Edge,

ComplianceClock, ComplianceJournal, ContentDirector, Cryptainer, Data Motion, DataFabric, DataFort, Decru, Decru DataFort, Evolution of Storage, Exec-Vault, FAServer, FilerView, FlexCache, FlexClone, FlexShare, FlexVol, FPolicy, Get Successful, gFiler, LockVault, Manage ONTAP, MultiStore, NearStore, NetApp Availability Assurance, NetApp IT As A Service, NetApp ProTech Expert, NetCache, NOW, NOW (NetApp on the Web), ONTAPI, Raid-DP, Replicator-X, SANscreen, SecureAdmin, SecureShare, Shadow Tape, Simulate ONTAP, SmartClone, SnapCache, SnapCopy, SnapDrive, SnapLock, SnapManager, SnapMirror, SnapMover, SnapRestore, Snapshot, SnapStore, SnapSuite, SnapValidator, SnapVault, Spinnaker Networks, Spinnaker Networks logo, SpinCluster, SpinFlex, SpinFS, SpinHA, SpinMove, SpinServer, SpinStor, StoreVault, SyncMirror, Tech OnTap, Topio, vFiler, VFM, VFM (Virtual File Manager), WAFL, and Web Filer are either trademarks, registered trademarks, or service marks of NetApp, Inc. in the United States and/or other countries.

Not all common law marks used by NetApp are listed on this page. Failure of a common law mark to appear on this page does not mean that NetApp does not use the mark nor does it mean that the product is not actively marketed or is not significant within its relevant market. Apple and QuickTime are either trademarks or registered trademarks of Apple Computer, Inc. in the United States and/or other countries. Microsoft and Windows Media are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries.

RealAudio, RealNetworks, RealPlayer, RealSystem, RealText, RealVideo, RealMedia, RealProxy, and SureStream are either trademarks or registered trademarks of RealNetworks, Inc. in the United States and/or other countries.

All other brands or products are either trademarks or registered trademarks of their respective holders and should be treated as such. NetApp is a licensee of the CompactFlash and CF Logo trademarks.

(3)

E-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Welcome

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

TABLE OF CONTENTS

MODULE 1: NCDA OVERVIEW ... E1-1 MODULE 2: NFS OVERVIEW ... E2-1 MODULE 3: NFS SETUP ... E3-1 MODULE 4: EXPORTS AND MOUNTS ... E4-1 MODULE 5: CIFS OVERVIEW ... E5-1 MODULE 6: CIFS WORKGROUPS ... E6-1 MODULE 7: CIFS SHARES AND SESSIONS ... E7-1 MODULE 8: CIFS ACCESS CONTROL ... E8-1 MODULE 9: CIFS DOMAINS ... E9-1 MODULE 10: NAS MULTIPROTOCOL ... E10-1 MODULE 11: NAS TROUBLESHOOTING ... E11-1 MODULE 12: SAN OVERVIEW ... E12-1 MODULE 13: FC CONNECTIVITY ... E13-1 MODULE 14: ISCSI CONNECTIVITY ... E14-1 MODULE 15: LUN ACCESS ... E15-1 MODULE 16: AVAILABILITY OVERVIEW ... E16-1 MODULE 17: SNAPSHOT COPIES ... E17-1 MODULE 18: SNAPRESTORE ... E18-1 MODULE 19: SNAPVAULT ... E19-1 MODULE 20: OPEN SYSTEMS SNAPVAULT ... E20-1 MODULE 21: HIGH AVAILABILITY ... E21-1 MODULE 22: METROCLUSTER ... E22-1 MODULE 23: SNAPMIRROR ... E23-1 MODULE 24: PERFORMANCE ... E24-1 APPENDIX A: ANSWERS ... EA-1 APPENDIX B: MASTER CONFIGURATION WORKSHEET ... EB-1

(4)

MODULE 1: NCDA OVERVIEW

EXERCISE

OVERVIEW

In this exercise, you will identify your primary client machine for the course and install NetApp® System Manager on that machine.

OBJECTIVES

By the end of this exercise, you should be able to:  Identify the exercise environment

 Log in to the exercise environment

 Install NetApp System Manager within your exercise environment

TIME ESTIMATE

(5)

E1-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NCDA Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

EXERCISE 1: NCDA OVERVIEW

To prepare for the exercise environment, you will identify your main client machine, log in to the machine, and install NetApp System Manager.

TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT

In this task, you will log in to your assigned exercise environment. You will perform all other actions starting from this assigned machine.

STEP ACTION

1. Your instructor will assist you in identifying your main Windows® Server. NOTE: This machine

might be a virtual machine.

With the assistance of your instructor, identify the following essential equipment:

DESKTOP CONNECTION Name: _____________________________ IP address: __________________________ Local Administrator Password: ___________________________ Domain Administrator Password: ___________________________ 2. Task complete. Windows Server

(6)

TASK 2: LOG IN TO THE EXERCISE ENVIRONMENT

In this task, you will log in to your assigned exercise environment. You will perform all other actions starting from this assigned machine.

STEP ACTION

1. In this task, you will log in to your assigned exercise environment by way of Remote Desktop

Connection. From this remote Windows environment, you will then have access to your exercise environment.

On your local Windows machine, log in to the remote Windows machine through the Remote Desktop Connection tool.

Click the Remote Desktop Connection link on your desktop. If this link is not available, then ask your instructor where to find the tool.

Type your IP address in to the Computer combo box and click the Connect button.

You might be asked to authenticate. If so, provide the user name and password given to you by your instructor.

You should see the desktop of the remote machine. All other tasks will be initiated from this remote machine.

(7)

E1-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NCDA Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

TASK 3: INSTALL NETAPP SYSTEM MANAGER

In this task, you will install NetApp System Manager on your Windows Server machine.

STEP ACTION

1. On your assigned Windows Server machine, open Windows Explorer and navigate to C:\_files\ANCDA. You might have a shortcut on your desktop to facilitate this step.

Double-click system-manager-setup-1-1.exe. If prompted with a security warning, confirm by clicking Run.

The installation wizard should begin. Click Next to start the wizard.

2. On the license agreement, select the I Agree radio button, and then click Next.

3. Select the default installation location and click Everyone to ensure that any user on this machine

can run this program and click Next.

(8)

STEP ACTION

5. After the installation has completed, you should see a dialog window indicating that the install was

successful.

Click Close to close the installation dialog window.

6. The Launch System Manager window should appear.

Click Cancel so that NetApp System Manager does not launch.

7. Task complete.

(9)

E2-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

MODULE 2: NFS OVERVIEW

EXERCISE

OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current NFS exercise environment.

OBJECTIVES

By the end of this exercise, you should be able to:  Identify the exercise environment

 Log in to your assigned storage system

 Log in to NetApp® System Manager and add your storage system

TIME ESTIMATE

(10)

EXERCISE 2: NFS OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current NFS exercise environment with the assistance of your instructor.

TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT

This task familiarizes you with the exercise environment you will use for all exercises in this course. NOTE: Your Windows® client was identified in the previous module.

STEP ACTION

1. With the assistance of your instructor, identify the following essential equipment:

STORAGE SYSTEM CONNECTION

Name: ______________________________

Internal IP address: __________________________ Terminal IP address: _________________________ Root Password: ____________________________

2. With the assistance of your instructor, identify the following essential equipment:

UNIX/LINUX CONNECTION

NOTE: This machine might be a virtual machine.

Name: _____________________________ IP address: __________________________ Root Password: ___________________________ 3. Task complete. Storage System UNIX/LUNIX Workstation

(11)

E2-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

TASK 2: LOG IN TO YOUR ASSIGNED STORAGE SYSTEM

In this task, you will log in to your assigned storage system and enable SNMP control so NetApp System Manager can manage it.

STEP ACTION

1. Log in to the storage system that has been assigned to you.

Double-click the link to PuTTY on your Windows Server desktop.

Enter the IP address to your assigned storage system and select the Telnet radio button. You use either the NIC interface address or the console address and port if available. NOTE: If you use a NIC interface address, Data ONTAP® 8.0 7-Mode defaults to have SSH enabled. You might need to change the radio button to SSH if Telnet is disabled.

You might want to save this configuration for future use. Type a name in to the Saved Sessions text box and click the Save button.

To open a session with your storage system, click the Open button.

2. On the storage system, type:

system> options snmp

If SNMP is not enabled, enter the following to turn it on: system> options snmp.enable on

Verify it is enabled by entering the following: system> options snmp

(12)

TASK 3: LOG IN TO NETAPP SYSTEM MANAGER AND ADD YOUR STORAGE SYSTEM

In this task, you will set up NetApp System Manager to administer your assigned storage system.

STEP ACTION

1. On your remote Windows Server desktop, double click the NetApp System Manager desktop icon

found on your desktop.

NetApp System Manager should launch.

2.

Click the Add button to associate your storage system to NetApp System Manager.

(13)

E2-5 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

3.

Your storage system should be added to NetApp System Manager. NOTE: you should

refer to the Data ONTAP 8.0 7-Mode Administration course for more details about

configuring your storage system with NetApp System Manager.

In the left pane of NetApp System Manager, expand the node that represents your storage

system by clicking the plus (+) icon next to the name.

Select the Storage node.

Your storage system is probably not configured yet for storage access. Click the Storage

Configuration Wizard link.

The Storage Configuration Wizard should start.

4.

We will manually configure storage in this class. Again, see the Data ONTAP 8.0 7-Mode

Administration course for more details.

Click Next to continue on with the wizard.

5.

On the Configure Aggregates page of the wizard, select Manually create aggregates.

Click Next.

6.

Click Finish to end the wizard.

7.

The Storage node should now have additional items. Click the plus (+) icon next to the

Storage node to expand and view the items available.

If you have never used NetApp System Manager, you might want to explore the items on

your own.

8. Task complete.

(14)

MODULE 3: NFS SETUP

EXERCISE

OVERVIEW

Setting up NFS services on a NetApp® storage system is easy. You will configure the NFS services in this exercise as well as allow your assigned UNIX or LINUX machine to be an admin host for your assigned storage system. This will allow your client host to have default access to your root volume’s configuration file.

OBJECTIVES

By the end of this exercise, you should be able to:  License and configure NFS service

 Add an admin host by way of the setup command

TIME ESTIMATE

(15)

E3-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

EXERCISE 3: NFS SETUP

To set up a NetApp storage system for NFS traffic, you will have to license the storage system and verify the settings.

START OF EXERCISE

TASK 1: LICENSE AND CONFIGURE THE NFS SERVICE

In this task, you will license and verify the current configuration of the NFS service.

STEP ACTION

1. Open a PuTTY session to your storage system.

2. Check whether NFS is licensed on your system with the license command.

system> license

If NFS is not licensed, license the NFS protocol on your storage system.

system> license add XXXXXXX (obtain license code from your instructor)

3. Open up NetApp System Manager; notice that under the Configuration node and Licenses node that

the NFS license was added.

Other changes caused by adding the NFS license include:  Storage > Shared Folders > Exports

 Configuration > Protocols > NFS

4. From the Configuration > Protocols > NFS page within NetApp System Manager, select the Edit

button.

(16)

STEP ACTION

5. NOTE: The NFS versions are available from the Versions tab.

6. NOTE: View the Transport Protocols that are currently configured by selecting the

Transport Protocols tab.

7. NOTE: Other settings are available by selecting the Miscellaneous tab.

8. From the PuTTY sessions, verify the NFS protocol setting using the command-line interface:

system> options nfs

(17)

E3-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

9. Determine which transport portal NFS is using:

system> options nfs.tcp

What is the status of NFS running over TCP? ________ system> options nfs.udp

What is the status of NFS running over UDP? ________

10. Determine the NFS version running:

system> options nfs.v3

What is the status of NFS running the v3 protocol? ________ system> options nfs.v4

What is the status of NFS running the v4 protocol? ________ What is the status of NFS running the v2 protocol? ________ How can you tell? ________

11. Task complete.

TASK 2: ADD AN ADMIN HOST BY WAY OF THE SETUP COMMAND

In this task, you will configure your storage system’s admin host setting with your assigned UNIX or LINUX host. This will allow your UNIX or LINUX host to mount the root volume of your storage system so that you can configure the storage system.

STEP ACTION

1. Establish a console connection to the storage system by way of the terminal server and execute the

setup command.

Enter the following highlighted information when prompted:

NOTE: Your output may differ depending on the hardware you are utilizing.

system> setup

The setup command will rewrite the /etc/rc, /etc/exports,

/etc/hosts, /etc/hosts.equiv, /etc/dgateways, /etc/nsswitch.conf, and /etc/resolv.conf files, saving the original contents of these files in .bak files (e.g. /etc/exports.bak).

Are you sure you want to continue? [yes] Enter Yes or Return to start the wizard.

(18)

STEP ACTION

2. Press Enter to accept the default value for the following questions:

Please enter the new hostname [system]:

Do you want to configure interface groups? [n]:

Please enter the IP address for Network Interface e0a [10.254.134.35]:

Please enter the netmask for Network Interface e0a [255.255.252.0]: Should interface e0a take over a partner IP address during

failover? [n]:

Please enter media type for e0a {100tx-fd, tp-fd, 100tx, tp, auto (10/100/1000)} [auto]:

Please enter flow control for e0a {none, receive, send, full} [full]:

Do you want e0a to support jumbo frames? [n]:

Please enter the IP address for Network Interface e0b []: Should interface e0b take over a partner IP address during failover? [n]:

Please enter the IP address for Network Interface e0c []: Should interface e0c take over a partner IP address during failover? [n]:

Please enter the IP address for Network Interface e0d []: Should interface e0d take over a partner IP address during failover? [n]:

Would you like to continue setup through the web interface? [n]: Please enter the name or IP address of the default gateway

[10.254.132.1]:

3. The admin host questions are next. Enter the name of your UNIX or LINUX machine and then enter

its primary IP address:

The administration host is given root access to the filer's /etc files for system administration. To allow /etc root access to all NFS clients enter RETURN below.

Please enter the name or IP address of the administration host:

LINUX_VM

(19)

E3-6 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

4. Continue through the wizard by pressing Enter for the remainder of the questions:

Please enter timezone [GMT]:

Where is the filer located? [Classroom]: Do you want to run DNS resolver? [y]:

Please enter DNS domain name [development.netappu.com]: You may enter up to 3 nameservers

Please enter the IP address for first nameserver [216.240.23.25]: Do you want another nameserver? [y]:

Please enter the IP address for alternate nameserver [10.254.132.10]:

Do you want another nameserver? [n]: Do you want to run NIS client? [n]:

The Shelf Alternate Control Path Management process provides the ability to recover from certain SAS shelf module failures and provides a level of availability that is higher than systems not using the Alternate Control Path Management process.

Do you want to configure the Shelf Alternate Control Path Management interface for SAS shelves [n]:

5. Now, let’s reboot the storage system to make our changes take effect.

NOTE: Because we only added the admin host setting, we don’t really need to reboot. If this was a

production storage system, you might make the change take effect without rebooting by using the source command.

system> reboot

The setup command automatically updates the following files:

/etc/exports – allowing the admin host to mount the root volume. /etc/hosts.equiv – allowing the admin host to be trusted on the storage system (allows rsh commands).

/etc/hosts – allowing IP resolution of the admin host.

options admin.host – which displays the name of the admin host that was provided during the setup command. If volumes are automatically exported (a feature described later in the course), this setting determines “who” should receive access to the server-generated export.

We will now explore these changes.

6. After the reboot, log in to your storage system. What volumes exist on your storage system?

______________________

(20)

STEP ACTION

7. List the content of the /etc/exports file in the space provided:

HINT: There is a command-line interface command, but you might be able to do it another way.

If you issued a command-line interface command, what command did you run?_____________

How do you list what exports are presently in memory? __________________ Remember this file was populated during the storage system’s setup.

8. Record the IP address and hostname for each entry in the /etc/hosts file as follows:

Host1: IP Address:

9. List the content of the /etc/rc file in the space provided:

HINT: Again, there might be more than one way to accomplish this.

The /etc/rc file sets up interfaces and loads exports, as well as other configurations, during boot up of the storage system. You modify the /etc/rc file by running setup but you can modify it directly. The /etc/rc file is only executed at boot up. To execute any modification to the /etc/rc, use the source command.

system> source /etc/rc

This executed the /etc/rc file again.

To learn more about the source command, see the manual (man) page. system> man source

10. Task complete.

(21)

E4-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

MODULE 4: EXPORTS AND MOUNTS

EXERCISE

OVERVIEW

This lab allows you to practice what you learned in class regarding file sharing. You will create volumes, qtrees, and files. The volumes, qtrees, and files will be exported on the storage system and mounted to a mountpoint on the NFS client. It is assumed that you are familiar with the exportfs, mount, mkdir, and cd commands. If not, refer to the lecture notes during this lab exercise.

OBJECTIVES

By the end of this exercise, you should be able to:

 Mount the root volume of the storage system on an admin host  Export a volume using the command-line interface

 Rename a volume and verify the automatic export  Export and mount a qtree

 Export to a subnet  Export to a netgroup

 Export a qtree using NetApp® System Manager  Mount an export from an admin host

TIME ESTIMATE

(22)

EXERCISE 4: EXPORTS AND MOUNTS

In this exercise, you will create new resources, export them to various targets and mount them from an NFS client. START OF EXERCISE

TASK 1: MOUNT THE ROOT VOLUME OF THE STORAGE SYSTEM ON AN ADMIN HOST

In the previous exercise, you configured a UNIX or LINUX host as an admin host. Now, mount the root volume so you can modify configuration files from the admin host.

STEP ACTION

1. Launch NetApp System Manager and navigate to: Storage > Shared Folders > Exports

2. Notice that the root volume is exported by default just like you observed from the command-line

interface in the previous exercise.

2. Log in to your UNIX or LINUX machine with a PuTTY client.

NOTE: Your UNIX or LINUX machine might use SSH. Check with your instructor if you have any

questions.

3. Create a mountpoint using the name of your assigned storage system.

# mkdir /mnt/<system>

Replace <system > with the name of your storage system. Create a vol0 directory under /mnt/<system>:

(23)

E4-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

4. Mount /vol/vol0 to this mountpoint.

# mount <system>:/vol/vol0 /mnt/<system>/vol0

5. Change the directory to the mountpoint and list the contents. # cd /mnt/<system>/vol0

# ls –la

What are the contents of the directory? _____

6. Notice that under /mnt/<system >/vol0 there is an etc directory.

Is this the etc directory for your local UNIX host or your storage system?_________

There is also an etc directory under /. Is this the etc directory for your local host or your storage system? ____________

NOTE: It is easy to get them confused and to modify the wrong system. 7. Task complete.

TASK 2: EXPORT A VOLUME USING THE COMMAND-LINE INTERFACE

In this task, you will create a new aggregate and volume and verify the volume was exported automatically.

STEP ACTION

1. Examine the contents of the /etc/exports file with the rdfile command. system> rdfile /etc/exports

Compare the output from above with the output from using the exportfs command. system> exportfs

What is the difference between the outputs?

2. Create an aggregate and a flexible volume with the following commands:

The following command will create an aggregate with three disks with a single parity disk. system> aggr create aggr1 –t raid4 3

The following command will create a flexible volume called NFStest: system> vol create NFStest aggr1 10g

(24)

STEP ACTION

3. Verify the volume is created and exported using the

rdfile

and

exportfs

commands:

system> rdfile /etc/exports

Using the

exportfs

command, verify the volume is exported:

system> exportfs

What option allows a newly created volume to be exported automatically? HINT: Look at system> options nfs

4. Note the access permission for the exported volume and record it here: 5. Task complete.

TASK 3: RENAME A VOLUME AND VERIFY THE AUTOMATIC EXPORT

In this task, you will rename a volume that was automatically exported and verify the export after the renaming operation. Then you will mount the newly renamed volume from a host.

STEP ACTION

1. At the storage system command-line interface, rename the volume from NFStest to NFSvol: system> vol rename NFStest NFSvol

2. At the storage system command-line interface, view the exported file systems:

system> exportfs

Notice that the /etc/exports file has been modified and that the exports have been automatically updated.

3. Create a mountpoint on the UNIX host and mount the volume:

# mkdir /mnt/<system>/NFSvol

# mount <system>:/vol/NFSvol /mnt/<system>/NFSvol Verify the mount operation:

# cd /mnt/<system>/NFSvol # ls

(25)

E4-5 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

TASK 4: EXPORT AND MOUNT A QTREE

In this task, you will create a qtree. You will then export it by editing the /etc/exports file and then reload the persisted exports. You will then mount the qtree export.

STEP ACTION

1. At the storage system command-line interface, use the

qtree create

command to create a

qtree named unix_tree on NFSvol:

system> qtree create /vol/NFSvol/unix_tree

2. Verify that the security style is set to UNIX:

(26)

STEP ACTION

3. Let us now export this new qtree. Connect to your UNIX host and edit the /etc/exports file on the storage system.

Grant access to /vol/NFSvol/unix_tree by adding the following line:

/vol/NFSvol/unix_tree -rw=<UNIX/LINUX HOST>,root=<UNIX/LINUX HOST>

To edit the file, you can use vi. If you are not familiar with this technique, refer to the following: Verify your current location

# pwd

/mnt/system/vol0

If you are not here, within the vol0 mount point, change your directory to this location. Change directory into your assigned storage system’s etc directory.

# cd etc

Run vi on the exports file. # vi exports

Your exports file will now be available in the vi editor and the editor will be in command mode. Scroll down to the last line.

Type Shift-A, capital A, to append to the end of the line you are currently on. Enter Return to move to the next line.

Type in the following line: /vol/NFSvol/unix_tree -rw=<UNIX/LINUX

HOST>,root=<UNIX/LINUX HOST> replacing the <UNIX/LINUX HOST> with your

assigned UNIX/LINUX hostname or IP address.

Click the ESC button to move out of append mode and back to command mode. Enter :wq to write the file and quit vi.

Verify your changes using the cat command. # cat exports

...

/vol/NFSvol/unix_tree -rw=host1,root=host1

4. At the storage system command-line interface, run the following command to export the new entry to memory:

system> exportfs –a system> exportfs

(27)

E4-7 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

5. Create the following mountpoint on the UNIX host: # mkdir /mnt/<system>/unix_tree

6. Mount the new export:

# mount <system>:/vol/NFSvol/unix_tree /mnt/<system>/unix_tree Verify unix_tree is mounted from the storage system:

# mount

7. Change your current directory to the new mountpoint:

# cd /mnt/<system>/unix_tree # touch unix_file

Verify that you created a new file with the touch command: # ls –l

8. Task complete.

TASK 5: EXPORT TO A SUBNET

In this task, you will export a resource to a subnet.

STEP ACTION

1. Create the following qtree:

(28)

STEP ACTION

2. Export this qtree to the subnet. Use the subnet address of the current training environment in one of the following ways:

/vol/NFSvol/subnet -rw=<current_subnet>/24,root=<current_subnet>/24

or

/vol/NFSvol/subnet -rw=”<current_subnet>

<subnet_mask>”,root=”<current_subnet> <subnet_mask> NOTE: Use your assigned UNIX host’s IP address and the correct subnet mask.

For example: /vol/NFSvol/subnet -rw=10.10.10.0/24,root=10.10.10.0/24 or /vol/NFSvol/subnet -rw=”10.10.10.0 255.255.255.0”, root=”10.10.10.0 255.255.255.0

Export the file system after editing the /etc/exports file.

3. Mount the subnet qtree to the following location: /mnt/<system>/subnet # mkdir /mnt/<system>/subnet

# mount <system>:/vol/NFSvol/subnet /mnt/<system>/subnet

Change the directory to the mountpoint and create a file named subnet_file using the touch command.

(29)

E4-9 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

TASK 6: EXPORT TO A NETGROUP

In this task, you will identify targets and resources, create the /etc/netgroup file, create the /etc/nsswitch.conf file, and verify content of the /etc/rmtab and /etc/hosts files.

STEP ACTION

1. Verify the existence of the netgroup file from the host with the ls command or from the storage system with the rdfile command.

From the admin host:

# cd /mnt/<system>/vol0/etc # ls –l net*

# more netgroup From the storage system:

system> rdfile /etc/netgroup

Does the file exist? ________________________________________ If no, what error message did you receive? ______________________

(30)

STEP ACTION

2. Use a UNIX or LINUX host or the wrfile command to create three groups.

The groups are: trustedhosts, untrustedhosts, and allhosts. Add your assigned UNIX admin host to the trustedhost group and create other ‘dummy’ hosts for the untrustedhosts. Place the trustedhosts and untrustedhosts in the allhosts folder. See the WRFILE METHOD below for an example.

VI METHOD:

From the UNIX host:

# cd /mnt/<system>/vol0/etc # vi netgroup

Use the WRFILE METHOD for the correct data.

WRFILE METHOD

From the storage system command-line interface, use the wrfile command to create the netgroup file.

system> wrfile /etc/netgroup Enter the following netgroups:

trustedhosts (adminhost,,) (name_of_your_station,,) untrustedhosts (host1,,) (host2,,)

allhosts trustedhosts untrustedhosts

(Make sure to press Enter after the last line.) Press Ctrl-C to save entries

NOTE: Disregard the error message generated; this message will always appear.

CAUTION: Use the wrfile command sparingly. If available, use vi editor or other equivalent

commands instead.

Verify your entries with the rdfile command again: system> rdfile /etc/netgroup

NOTE: It may take up to 60 seconds for modifications of the netgroup file to take effect. 3. The rmtab file records a list of all the hosts mounted the storage system since boot up.

Check to see if the rmtab file exists and identify the contents of the file. # ls –l /mnt/<storage_system>/vol0/etc/rmtab # more /mnt/<storage_system>/vol0/etc/rmtab # more !$

Or, from the storage system:

(31)

E4-11 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

4. The nsswitch.conf file contains information on the order of the mechanism to resolve hostname-to-IP, passwords, netgroups, as well as other configurations.

Verify the existence of the nsswitch.conf file on the storage system: # ls –l /mnt/<system>/vol0/etc/nsswitch.conf # more !$

Or, from the storage system, use the rdfile command to verify the existence of the nsswitch.conf file:

system> rdfile /etc/nsswitch.conf

5. Using the rdfile command, view the contents of the /etc/hosts file: system> rdfile /etc/hosts

What is the output of this command?

____________________________________________________ ____________________________________________________ Make sure your assigned UNIX host is on the list.

6. Create a qtree in the NFSvol volume named netgroupA.

7. Export netgroupA to the trusted targets (the netgroup trustedhosts) with rw permissions.

8. Mount the netgroupA qtree to the following location /mnt/<system>/netgroupA (where <system> is the name of your storage system).

9. Change the directory to the mountpoint and create a file named netgroup_file. You have successfully exported a resource to a netgroup.

10. Task complete.

TASK 7: EXPORT A QTREE USING NETAPP SYSTEM MANAGER

In this task, you will export a qtree using NetApp System Manager and change the logical name of the export.

STEP ACTION

1. Using System Manager, create a qtree by navigating to Storage > Qtrees.

(32)

STEP ACTION

2. Add the following infromation to the Create Qtree window:

Name: readTree Volume: NFSVol

Enable oplocks: [unchecked] Securtiy Style: unix

Click the Create button to create the new qtree.

3. Now, let us create an export for this new qtree.

Click Storage > Shared Folders > Exports.

4. Click Create to start the Create Share and Export wizard.

Click Next.

5. Within the Shared Folder Location, click Browse and the Browse For Folder dialog should appear.

Expand aggr1 and the select NFSvol. Select the readTree folder.

Verify that the folder path to export is /vol/NFSvol/readTree and click OK.

6. Click Next in the Shared Folder Location.

The Share Protocols dialog appears.

NOTE: We only have NFS licensed currently, so only NFS exports are only available.

Change the Export Name to /readTree. Click Next.

(33)

E4-13 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

7. In the NFS Permissions dialog, change the default permissions by selecting the current default and

clicking Edit.

Within Edit Host Permissions, change the permissions for All hosts to Allow Read-Only.

Click OK.

8. Verify the permissions.

Click Next.

9. Review the Share Summary dialog and click Next.

10. Click Finish to end the wizard.

11. Observe you new export under Storage > Shared Folders > Exports.

12. Task complete.

TASK 8: MOUNT AN EXPORT FROM AN ADMIN HOST

In this task, you will mount the export created earlier in this exercise.

STEP ACTION

1. Establish a PuTTY session to the admin host and create a directory for your storage system.

2. Create the readTree directory under the system_name directory:

(34)

STEP ACTION

3. Mount the storage system’s root volume to the directory you just created and view the contents.

When mounting the root volume, use the storage system name or IP address. # mount <IP_address>:/readTree /mnt/<system_name>/readTree

# cd /mnt/<system_name>/readTree

4. You should now be able to view the directory structure of your storage system’s root volume.

# ls –al /mnt/<system_name>/readTree How does this compare with the local clients root? (Hint # ls –al /)

_______________________________________________

5. Try to create a file at the root of the storage system:

# touch foo

Was it successful? ______________________

6. Task complete.

(35)

E5-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

MODULE 5: CIFS OVERVIEW

EXERCISE

OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current CIFS exercise environment.

OBJECTIVES

By the end of this exercise, you should be able to:

 Identify the hardware available in your exercise configuration

TIME ESTIMATE

(36)

EXERCISE 5: CIFS OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current CIFS exercise environment with the assistance of your instructor.

START OF EXERCISE

TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT

This task familiarizes you with the exercise environment you will use for all exercises in this course.

STEP ACTION

1.

With the assistance of your instructor, identify the following essential equipment:

Windows Server

NOTE: This machine might be a virtual machine.

ALSO NOTE: When login into the Windows Server, authenticate with the domain.

Name: ______________________________ IP address: _________________________ Domain Administrator Password: __________________________ Local Administrator Password: __________________________ Domain Controller Domain Name: _______________________ Controller IP address: _________________________ DNS: ____________________________ IP address: _________________________

(37)

E5-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Overview

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION Storage System Name: ___________________________________ Type: ___________________________________ Internal IP address: _______________________________ Terminal IP address: _______________________________ Root Password: _______________________________

2.

Task complete.

END OF EXERCISE

(38)

MODULE 6: CIFS WORKGROUPS

EXERCISE

OVERVIEW

The goal of this lab is to give you an opportunity to configure a storage system for a Windows® workgroup environment. In a future exercise, you will repurpose the storage system for an Active Directory domain environment.

OBJECTIVES

By the end of this exercise, you should be able to:

 Configure a storage system for a Windows workgroup environment

 Review the results of cifs setup in a Windows workgroup environment

TIME ESTIMATE

(39)

E6-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

EXERCISE 6: CIFS WORKGROUPS

Windows workgroup is a fast ad-hoc method of associating a group of machines. NetApp® storage systems can participate in this loose association of machines. In this exercise, you will configure your assigned storage system to work in a Windows workgroup environment using the command-line interface. We will use NetApp System Manager when we convert the workgroup configuration to an Active Directory domain.

START OF EXERCISE

TASK 1: CONFIGURE A STORAGE SYSTEM FOR A WINDOWS WORKGROUP ENVIRONMENT

In this task, you will log in to your assigned storage system and configure the CIFS services within Data ONTAP®.

STEP ACTION

1. Open a PuTTY interface to your assigned storage system.

2. Type license at the storage system’s command prompt to view the current list of licenses

registered.

License CIFS by entering the following command and using the CIFS license code provided by your instructor:

system> license add xxxxxx

Confirm the license was successfully added by reissuing the license command at the prompt.

3. Before configuring the CIFS services, at the storage system prompt (in your Telnet session), enter

the following command and view the default storage system security style and NT administrator privileges:

system> options wafl

Look at the wafl.default_security_style option.

What is the volume (and all qtrees on the volume) default security style?

______________

Look at the wafl.nt_admin_priv_map_to_root option. Does the NT (Windows) administrator have privileges to map to the UNIX root user? ___________________

4. Enter the following command and view the security style of the root volume:

system> qtree status

(40)

STEP ACTION

5. Configure the CIFS services by entering the following command:

system> cifs setup

NOTE: Steps 6 through 13 will assist you in entering the correct parameters.

6. Answer no [n] to WINS.

7. Configure the security style as (2) NTFS-only filer.

NOTE: Normally, if we use both NFS and CIFS on the same storage system you should select (1)

Multiprotocol, but we want to observe the resulting effect on the storage system.

8. Type in a root password and press Enter key. Repeat.

NOTE: By default, Data ONTAP 8.0 7-Mode requires a harden password. The root password must

be at least 8 characters, 2 alphabetic characters, and 1 number.

9. Press Enter to keep default CIFS server (storage system) name. (Obtain the storage system name

from your instructor.)

10. Choose 3 for Windows workgroup authentication using the storage system’s local user accounts.

11. Press Enter to keep the default name for the workgroup [WORKGROUP].

12. Answer yes [y] to create the local administrator (system\administrator) account.

13. Enter the password twice for the local administrator password.

NOTE: The name and password for the local administrator on the storage system must match the

(41)

E6-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

14. CIFS should now be configured. Verify CIFS configuration using NetApp System Manager by

navigating to:

Configuration > Protocols > CIFS

15. After configuring the CIFS services, enter the following command and view the default storage

system security style and NT administrator privileges: system> options wafl

 What is the volume (and all qtrees on the volume) default security style? ___________________

 Does the NT (Windows) administrator have automatic privileges to map to the UNIX root user? _______________

16. Enter the following command and view the security style of the root volume:

system> qtree status

After configuring the CIFS services, what is the security style of your root volume? __________________

After configuring the CIFS services, what is the security style of your NFSvol volume? __________________

(42)

STEP ACTION

17. Change NFSvol back to a unix security style using the following command:

system> qtree security /vol/NFSvol unix

Verify:

system> qtree status

18. Task complete.

TASK 2: REVIEW THE RESULTS OF CIFS SETUP IN A WINDOW WORKGROUP ENVIRONMENT

In this task, you will review the files modified during the process of configuring the storage system’s CIFS server for a Windows Workgroup environment. All commands in the lab are entered at the storage system prompt.

STEP ACTION

1. At the storage system prompt, review the CIFS configuration file with the rdfile command by

typing:

system> rdfile /etc/cifsconfig_setup.cfg

Notice how this file holds all the configurations entered during the wizard questions of the cifs setup command.

2. At the storage system prompt, review the following files with the rdfile command:

 /etc/usermap.cfg  /etc/passwd

 /etc/nsswitch.conf

(43)

E6-6 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

3. As you recall, cifs setup created a local administrator. We will now verify this new user was

created.

system> useradmin user list administrator

Now, we will verify that this user was added to the lclgroups.cfg file under the BUILTIN\Administrators group.

system> rdfile /etc/lclgroups.cfg

Notice there is a SID under the BUILTIN\Administrators group. Because the lclgroups.cfg file is a newly created file, there should only be one SID. Now, let’s verify that this SID is the same as the administrator that we saw with the useradmin command:

system> cifs lookup {copy the SID here}

This SID should resolve to the storage system’s local administrator that was created with cifs setup.

4.

Task complete.

(44)

MODULE 7: CIFS SHARES AND SESSIONS

EXERCISE

OVERVIEW

The purpose of this activity is to perform routine CIFS administration procedures on your storage system in a Windows® Workgroup environment. You will view the current list of shares, add a new share, verify access to the share, and display session information.

OBJECTIVES

By the end of this exercise, you should be able to:  View current shares

 Create new shares using the command-line interface  Verify shares access and display session information

TIME ESTIMATE

(45)

E7-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Shares and Sessions

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

EXERCISE 7: CIFS SHARES AND SESSIONS

Now that your storage system is configured for CIFS, you will view the default shares, add new shares, and access the shares.

START OF EXERCISE

TASK 1: VIEW CURRENT SHARES

In this task, you will log in to the storage system and work with the default shares.

STEP ACTION

1. If you are not already logged in, use the Remote Desktop connection to log in to your Windows

workstation as “Administrator.”

NOTE: Use the IP address and password provided by the instructor.

2. On your Windows workstation, go to StartRun. In the Run window, enter the following to

browse the shares on your storage system, and click OK: \\IP_Address_of _Your_Storage_System

What share(s) display? _________________________

3. In the address bar of the Web browser, change the address to the following:

\\IP_Address_of _Your_Storage_System\C$

What folder(s) display? __________________________

4. At your storage system prompt, view the CIFS sessions by entering the following command:

system> cifs sessions

What user currently has a session with the storage system? __________________________________________________ What account is the user mapped to? _______________________

(46)

STEP ACTION

5. At the storage system prompt, verify the user mapping by entering the following command:

system> options wafl.nt_admin_priv_map_to_root

Is this option set to “on”? _________________

If wafl.nt_admin_priv_map_to_root is on, then the local administrator’s user mapping is “root.”

Verify the default UNIX user name by entering the following command: system> options wafl.default_unix_user

Is there a default UNIX user? If yes, what is the user name? ________________________________

If the wafl.default_unix_user is set to a user name (for example, pcuser), then this is the default user mapping for any Windows user that is not explicitly mapped.

Verify that the default UNIX user name is in the /etc/passwd file by entering the following command:

system> rdfile /etc/passwd

Is the default UNIX user name in the /etc/passwd file? _____________

6. Task complete.

TASK 2: CREATE A NEW SHARE USING THE COMMAND-LINE INTERFACE

In this task, you will create a new share using the command-line interface.

STEP ACTION

1. At your storage system prompt, create a qtree named wintree in NFSvol:

system> qtree create /vol/NFSvol/wintree

Normally, a qtree created in NFSvol would be a unix security type because it would inherit the

security style from its containing volume. NOTE: We will discuss security styles in the next module. For now, change the security style to ntfs by entering:

system> qtree security /vol/NFSvol/wintree ntfs

2. Create a new share called winshare (for the qtree wintree) on the storage system by entering the

following command at the storage system prompt:

system> cifs shares –add winshare /vol/NFSvol/wintree Answer yes if you are asked whether you want to use this share name.

(47)

E7-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Shares and Sessions

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

3. View the newly created winshare share by entering the following command at the storage system

prompt:

system> cifs shares winshare

Which group has access to this share? _______________________ What are the share permissions? _______________________

4. Task complete.

TASK 3: VERIFY SHARE ACCESS AND DISPLAY SESSION INFORMATION

In this task, you access the new share that you created previously and check the session information.

STEP ACTION

1. On the Windows Server, open Windows Explorer and, as the administrator, map a network drive

to the new share winshare.

NOTE: Depending on the environment, you might want to create a share using the storage system’s IP address instead of the hostname.

2. After mapping the network drive to winshare in Windows Explorer:

a) Right-click the winshare share mapping and choose Properties. b)

Click the Security tab and view the NTFS file permissions.

3. On the Windows workstation, create a text file with WordPad and save the file to the new share

winshare.

a) Go to Start

>

Programs

>

Accessories

>

WordPad.

b) Open WordPad and type something to create a text document. c) Save the file to the winshare share.

4. On the Windows workstation using Windows Explorer, go to the mapped network drive for the

winshare share to view the newly created text file: a) Right-click the text file and choose Properties.

b) Click the Security tab and view the NTFS file permissions for the text file. c) What group has access to this file? ____________________________ List the file access permissions for the text file:__________________ d) Close all the open windows.

(48)

STEP ACTION

5. At the storage system prompt, view the CIFS sessions by entering the following command:

system> cifs sessions

From your Windows workstation, who has a session with the storage system? __________________________________________________

6. Task complete.

(49)

E8-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

MODULE 8: CIFS ACCESS CONTROL

EXERCISE

OVERVIEW

The purpose of this activity is to perform routine CIFS administration procedures on your storage system in a Windows® workgroup environment. You will create a local user account and administer user access, add a new share, map a network drive to the new share and verify access to the share, and create a local group.

OBJECTIVES

By the end of this exercise, you should be able to:

 Add a new local user account and configure user access  Access a network drive and work with access control  Create a local group

TIME ESTIMATE

(50)

EXERCISE 8: CIFS ACCESS CONTROL

Currently, the storage system’s CIFS service is configured in a Windows Workgroup mode. We will create a local user account and configure local access control.

START OF EXERCISE

TASK 1: ADD A NEW LOCAL USER ACCOUNT AND CONFIGURE USER ACCESS

In this task, you will create a local user account on your storage system. All commands in the lab are entered at the storage system prompt.

STEP ACTION

1. Verify that you have a PuTTY session with your assigned storage system.

2. Recall that the storage system currently is in a Windows workgroup. To verify that the storage

system is a server in a Windows workgroup, enter the following command: system> cifs sessions

Is the storage system in a Windows workgroup? ________________

3. Before adding a local user to the storage system, check the current security options to determine

password rules by entering the following command: system> options security

What is the value for the security.passwd.rules.enable? _________

If the security.passwd.rules.enable option is “on,” then in order to create a local user, you will need to come up with a password using the following rules:

 It must be at least eight characters long

 It must contain at least two alphabetic characters  It must contain at least one digit

If security.passwd.rules.enable.option is “off,” then the restrictions will not be enforced when you create a password.

4. Add a local user (your name) in the predefined Guests group to the storage system by entering the

following command:

User names are case insensitive.

system> useradmin user add your_name –g Guests

Remember your password._________________________

5. Verify that the local user (you) was added to the storage system by entering the following

command:

system> useradmin user list your_name What are the capabilities of your new local user?

(51)

E8-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

6. Check the allowed capabilities for the local administrator account by entering the following

command:

system> useradmin user list administrator What are the capabilities of the local administrator?

_______________________________________________

7. View the list of all local storage system users by entering the following command:

system> useradmin user list

What local users are listed? _____________________________________

8. Task complete.

TASK 2: ACCESS A NETWORK DRIVE AND WORK WITH ACCESS CONTROL

In this task, you will map a network drive to a share. Recall that in a Windows workgroup, user authentication is performed locally on the storage system.

STEP ACTION

1. On your assigned Windows server, map a drive to a storage system share \\IP_Address_of

_Your_Storage_System\C$.

2. At the storage system prompt in your Telnet session, view the CIFS sessions by entering the

following command:

system> cifs sessions

Who has a session with the storage system?

__________________________________________________

You logged in to the Windows as “Administrator” with a password. This “Administrator” was authenticated locally on the storage system with the local Administrator account (note that the user names match). The local Administrator account has the same password as the Windows

Administrator.

This is called “pass-through” user authentication, and it works only if the names and passwords match on both the storage system and Windows workstation.

The Administrator account has permission to view the hidden C$ share.

3. On the Windows workstation, open Windows Explorer and disconnect all network drives attached

(52)

STEP ACTION

4. On the Windows workstation, log off as the Administrator and then log back in as the Administrator

to clear the share cache.

a) Go to Start > Log Off administrator… and click the Log off button when you are asked if you are sure that you want to log off.

b) Use the Remote Desktop connection to log back in to your Windows workstation as the Administrator with the Administrator password.

5. On your Windows workstation, map a drive to a storage system share for a different local user (your

name) by opening Windows Explorer and click Map network drive. The Map Network Drive window appears.

a) In the Drive list box, select any unused letter. b) In the Folder list box, enter the following:

\\IP_Address_of _Your_Storage_System\C$ c) Click Connect using a different credentials. d) Click Finish.

e) The Windows Security window appears. Enter your User name.

(Name_of _Your_Storage_System \your_name). f) Enter your Password. (password for your_name). g) Click the OK button.

h) Click the Finish button.

i) The Connect to …window appears. j) The user name matches

Name_of _Your_Storage_System \your_name. k) In the password text box, enter your password. l) Click the OK button.

Are you able to connect to C$ share? _____________________

If not, go to Step 5 b), and in the Folder list box, enter \\IP_Address_of

_Your_Storage_System\Home and proceed again to map the network drive to the share.

The Guests group has no capabilities and, therefore, you cannot access the C$ share, but you can access the Home share because it is available to the Everyone

(53)

E8-5 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

STEP ACTION

6. At the storage system prompt, view the CIFS sessions by entering the following command:

system> cifs sessions

From your Windows workstation, who has a session with the storage system? __________________________________________________

7.

Task complete.

TASK 3: CREATE A LOCAL GROUP

In this task, you will create a new local group on your storage system.

STEP ACTION

1. Before creating a new local group on your storage system, view the current groups on the storage

system by entering the following command at the storage system prompt: system> useradmin group list

2. At the storage system prompt, create a local group on the storage system called “friends” with the

Data ONTAP® predefined role “power” by entering the following command: system> useradmin group add friends –r power

3. At the storage system prompt, verify the newly created group by entering the following command:

system> useradmin group list friends

How many capabilities are assigned to the “power” role for the friends group? __________________________

(54)

STEP ACTION

4. On the Windows workstation, change the security properties of the text file on the winshare share.

a) Open Windows Explorer and go to the mapped winshare drive to view the text file. b) Right-click the text file and choose Properties.

c) Select the Security tab and under Group or user names, click Edit and then click the Add button.

d) In the Enter the object names to select text box, enter friends. e) Click the OK button.

f) Click the friends group. What permissions are displayed for the friends group? _____________________________

g) Click the Everyone group. How do the friends permissions differ from the permissions in the Everyone group? ___________________________________________________ h) Now, click the Apply button on the Security tab, and then click the OK button. Click the

OK button.

5. At the storage system prompt, modify the local user (your name) and add the friends group to the

user by entering the following command:

system> useradmin user modify your_name –g Guests,friends

6. At the storage system prompt, verify the groups and capabilities of the newly changed local user

(your name) by entering the following command: system> useradmin user list your_name

To which groups does the local user (your name) now belong?________________ Have the local user (your name) capabilities changed? If yes, how?

________________________________________________

7. Task complete.

(55)

E9-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Domains

© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

MODULE 9: CIFS DOMAINS

EXERCISE

OVERVIEW

The purpose of this activity is to reconfigure the storage system’s CIFS server for an Active Directory environment. You will then create a domain user, create shares, and administrate those shares.

OBJECTIVES

By the end of this exercise, you should be able to:

 Terminate CIFS services using NetApp® System Manager  Configure DNS using NetApp System Manager

 Configure the time services using NetApp System Manager  Reconfigure the CIFS services using NetApp System Manager  Create a 32-bit aggregate using NetApp System Manager  Create a volume using NetApp System Manager

 Create shares and manage the permissions of the shares  Create a domain user

 Create a share with Computer Management  Map shares to drive letters

 Display CIFS sessions

TIME ESTIMATE

References

Related documents

The obtained outcomes showed that aspirin therapy reduced the rate of recurrence of VTE by about 40% compared to placebo, which suggests that it could be an interesting

Since 1994 South Africa has participated in various conflict resolutions efforts such as the mediation in Nigeria, leading negotiations between governments and

While our results also suggest that the “Success Attributes” curriculum had a positive impact on the outcomes of HPDS students, the ongoing negative impact of

Public Administration and Policy Development - MU, Political Science American National Government and Politics - MU, Political Science Politics and Public Policy - WVSU,

[r]

Our results confirm that the higher ordered moments of money growth rate(converted from the past history of money growth rates) influence the yields of bonds with various maturities

This report is based on that case study and explores the central question: ‘despite the odds stacked against them, what makes it possible for male survivors of conflict-related

If you are upgrading from an earlier version of the software, pay special attention to the notes describing features that have been changed or added to reckon accounts since your