Adaptec 5325301656 - Snap Server 14000 NAS Administrator'S Manual Download

Page: 51 / 224

Snap Server Administrator Guide

Chapter 3

User & Group Management

Authentication validates a user’s identity by requiring the user to provide a

registered login name and corresponding password. Snap Servers ship with

predefined local users and groups that allow administrative and guest user

access to the server via all protocols. Administrators may choose to join the

Snap Server to a traditional Windows NT or Active Directory domain, and

Windows clients can then authenticate to the server using their domain

credentials. To accommodate NFS clients, the Snap Server can also join an

NIS domain, and the Snap Server can look up user and group IDs

maintained by the domain. For authentication control beyond the guest

account, Macintosh and FTP client login credentials can be created locally

on the sever.

Topics in User and Group Configuration:

• Default User and Group Settings
• UID and GID Assignments
• Local Users and Groups
• NIS Domain

Summary of Contents for 5325301656 - Snap Server 14000 NAS

Page 1: ...Snap Server Administrator Guide GuardianOS v5 0 For GuardianOS powered Snap Servers and Expansion Arrays ...

Page 2: ......

Page 3: ...ris are registered trademarks of Sun Microsystems Inc Netscape is a registered trademark of Netscape Communications Corp AppleShare AppleTalk Macintosh and MacOS are registered trademarks of Apple Computer AIX is a registered trademark of IBM Corporation OpenView and HP UX are trademarks or registered trademarks of Hewlett Packard Company BrightStor Unicenter TNG ARCserve eTrust and Unicenter are ...

Page 4: ...NY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE PO...

Page 5: ... exported into or to a national or resident of any country to which the U S embargoes goods or to anyone on the U S Treasury Department s list of Specially Designated Nationals or the U S Commerce Department s Table of Denial Orders You agree to ascertain necessary licensing procedures and obtain required licenses before exporting or re exporting either You also agree to indemnify Adaptec and assu...

Page 6: ...everse engineer the Program except as expressly permitted under applicable law c Remove or alter any of the copyright notices or other proprietary markings on any copies of the Program or d Perform publish or release benchmarks or other comparisons of the Program without CA s prior written consent 3 CA may immediately terminate this Agreement in the event of any failure to comply with any of the a...

Page 7: ... Data Protection Tasks 16 Migrating Data from Legacy Servers to the Snap Server 16 Configuring the Snap Server as a Print Server 17 Configuring an APC Brand UPS 17 SnapExtensions 17 Chapter 2 Network Access to the Server 19 Viewing Current Network Settings 20 TCP IP Options 21 Configuring TCP IP Settings 23 Default Network Protocol Settings 25 Windows Networking Configuration 26 NFS Access 30 Appl...

Page 8: ...rage Configuration 42 Changing the Default Storage Configuration 42 RAIDs 43 Volumes 47 Quotas 49 Data Migration 50 Expansion Arrays 52 Disks and Units 55 Chapter 5 iSCSI Disks 63 Configuring iSCSI Initiators 64 iSCSI Configuration on the Snap Server 73 Creating iSCSI Disks 76 Chapter 6 Share and File Access 79 Configuring Share and Folder Security Overview 80 Components and Options 82 SnapTrees a...

Page 9: ...ackup Operations 99 Chapter 8 Disaster Recovery 101 Backing Up Server and Volume Settings 101 Backing Up the NetVault Database Directory 104 Recovering the NetVault Database 105 Disaster Recovery Procedural Overview 107 Chapter 9 CA eTrust Antivirus Software 109 Antivirus Dependencies 110 Launching the CA eTrust Antivirus GUI 111 The Local Scanner View 112 Scan Job Configuration and Scheduling 113...

Page 10: ...kup and Replication Solutions 131 Integrated Backup Solutions for the Snap Server 132 Off the Shelf Backup Solutions for the Snap Server 135 Appendix B Command Line Interface 151 SnapCLI Syntax 151 Scripts in SnapCLI 154 Appendix C Troubleshooting Snap Servers 159 The Meaning of LED Indicators 160 System Reset Options 178 Networking Issues 180 Miscellaneous Issues 184 Phone Home Support 186 Append...

Page 11: ...of the Snap Server 110 and Snap Server 210 are encouraged to consult the User s Guide for Snap Server 110 and 210 as their primary reference and to refer to this Administrator s Guide for advanced guidelines Service and Technical Support For an immediate response to a service inquiry use our Expert Knowledge Base System at http www snapserver com kb Simply type in your question to view a list of p...

Page 12: ...t you type directly into a text field a command line or a Web page Buttons on a keyboard Courier Italic A variable for which you must substitute a value Courier Bold Commands you enter in a command line interface Right Click This document uses the Windows convention in describing keyboard access to context sensitive menus For example To rename a group right click a group and then select Rename Mac...

Page 13: ...y backup agents and detailed instructions on using the Administration Tool Hardware Configuration and Options Guide User CD and Web Lists hardware specifications for Snap Servers and Snap Disk expansion arrays User Guide for Snap Server 110 and 210 Provides an overview of the configuration and maintenance of the Snap Server 110 and 210 Release Notes html User CD Contains late breaking information ...

Page 14: ...tions for installing StorAssure client backup software The StorAssure CD includes a User Guide Field Service Documentation Service CD and Web Provides detailed instructions for the replacement of disk drives adapter cards power assemblies slide rails and other hardware components Source and Location Content ...

Page 15: ...ts Snap Server 210 The Snap Server 210 is a desktop file server with two disk drives and four USB ports Snap Server 410 The Snap Server 410 is a 1U departmental file server with four hot swappable SATA disk drives and four USB ports Snap Server 520 The Snap Server 520 is a 1U departmental file server with four hot swappable SATA disk drives The Snap Server 520 supports multiple SANbloc S50 expansi...

Page 16: ...etwork File System NFS 2 0 3 0 AppleTalk Filing Protocol AFP v2 0 v3 1 Hypertext Transfer Protocol HTTP HTTPS File Transport Protocol FTP Network Client Types Microsoft Windows 95 98 ME NT 4 2000 XP 2003 2008 Vista Macintosh Systems OS 9 x X 10 x Sun Solaris 7 8 9 HP UX 11 AIX 4 3 3 5 3 Red Hat Linux 6 2 7 2 8 0 9 0 Red Hat Enterprise Linux RHEL 3 x 4 x Red Hat Fedora Core 4 x 5 x 6 x SuSE Pro 9 x...

Page 17: ...BakBone Netvault Workgroup Edition Network Backup with VERITAS NetBackup Backup Exec CA BrightStor ARCserve EMC Legato NetWorker BakBone NetVault or EMC Dantz Retrospect Macintosh Workstation backup to Snap Servers with StorAssure APC brand Uninterruptable Power Supply UPS with Network Management Cards or a USB interface are supported for graceful system shutdown System Management Browser based Ad...

Page 18: ...drive fault tolerance Note Available only on systems with four 4 or more drives RAID 6 drive striping with two parity drives Like a RAID 5 except that two drives are used for parity rather than one Provides moderate performance and reasonable space utilization with two drive fault tolerance Note Available only on systems with four 4 or more drives RAID 10 striped mirroring A combination of RAID 0 ...

Page 19: ... data protection RAID 10 stripes RAID 1 mirrors for high data protection and increased performance NFS v4 support Support for NFS v4 has been added providing a connection based protocol for NFS users with elimination of ancillary protocols single port accessibility new file system view and improved network management Note Kerberos based security and NFS v4 ACLs are not supported in this release of...

Page 20: ...s part of the Disaster Recovery Image Enhanced iSCSI support Increased support for iSCSI targets and support for spec compliant IQN names New OS and browser support Support has been added for Windows Vista Internet Explorer 7 and FireFox 1 5 and 2 0 USB tape drive support Attach backup tape devices using USB 2 0 as well as SCSI connections Improved share name support Share names can now be 27 char...

Page 21: ...NFS client code page option for UTF 8 in Unicode mode supporting the default client character set of many Linux Unix distributions Upgrade of NetVault Bakbone NetVault Bakbone has been upgraded from v7 1 1 to v7 4 Improved Snap EDR support Snap EDR is now pre installed at the factory Improved UPS support Additional support for UPS devices includes Support for APC branded USB UPS devices New option...

Page 22: ...disks into degraded RAIDs When this feature is enabled raw disks or unconfigured GuardianOS partitioned disks will be automatically incorporated into degraded RAID 5 or RAID 1 sets upon hot insertion System Monitoring The System Monitoring page now contains RAID status information for each of the RAID sets Feature pre 4 0 New 4 0 Functionality Add on Features Add on and 3rd party features are now ...

Page 23: ...ervers is also available on a server by server basis View all disks formerly from Storage Devices page The new Storage Disks Units page displays a graphical view of all disks for the head unit as well as for any attached expansion units allowing you to move your mouse over a disk to highlight all of the disks in a particular RAID set Share Management Share creation modification and access privileg...

Page 24: ...ings differ among servers For example comparing protocol access configuration for a group of servers may reveal that settings are consistent for Windows NFS and AFP but that differences exist among servers in HTTP HTTPS and FTP settings Copying settings from one server to one or more different servers SSM can copy selected settings TCP IP SNMP SMB etc from any GuardianOS server to one or more diff...

Page 25: ...rative password s The License Required dialog box opens 3 Generate the license keys using the Registration Server In the License Required dialog box select Click here to obtain SSM multi use license keys This will launch a browser to the Registration Server page If you have already registered your servers the fields for the server and serial numbers you need to generate the keys will automatically...

Page 26: ...t Time Snap Servers are preset to acquire an IP address from a DHCP server If no DHCP server is found on the network the Snap Server defaults to an IP address of 10 10 10 10 and you may not be able to see the server on your network You can discover a Snap Server using either the default server name or the SSM utility Use the server name method if you are installing one Snap Server on the network U...

Page 27: ...M see page 9 on a machine residing on the same network segment as your Snap Server s Upon startup SSM displays the IP address of each Snap Server on its local network segment 2 If using a DHCP server skip to the next step Otherwise In the SSM console right click a server name and select Set IP Address At a minimum enter an IP address for the Snap Server and a subnet mask and then click OK 3 Launch...

Page 28: ...s The Snap Server time stamp applies when recording server activity in the event log Monitor Menu setting the create modify time on a file and when scheduling snapshot antivirus Snap EDR or Server to Server Synchronization pre GuardianOS v4 2 licenses only operations Edit the settings according to local conditions Note GuardianOS automatically adjusts for Daylight Saving Time based on the selected...

Page 29: ...can always delete or reduce it from the Storage Snapshots page in the Administration Tool Or for servers with no Snapshots license you can simply increase your default volume size in the Storage Volumes page Determining Capacity The factory default configuration reduces potential capacity in order to provide a high degree of data protection and backup capability By default Snap Servers with four 4...

Page 30: ... based Administration Tool to schedule snapshots or modify the space available for storing snapshots Snapshots should be taken when the system is idle or under low data traffic Set up antivirus protection by clicking the SnapExtensions icon and then clicking CA Antivirus Click the checkbox to enable antivirus and then click OK The browser will take you back to the SnapExtensions screen Click CA An...

Page 31: ...ents and utilities that extend the capabilities of a Snap Server Some SnapExtensions are fully functional out of the box others may require a download and or the purchase of a license for full operation For up to date information on feature availability contact Adaptec To access SnapExtensions click the SnapExtensions icon from any page in the administration web UI You may have a different set of ...

Page 32: ... license is required for multiserver administration For more information see Snap Server Manager s online help iSCSI On Snap Servers an iSCSI disk is located on a Snap Server volume but appears to a client machine as a local SCSI drive This storage virtualization frees the administrator from the physical limitations of direct attached storage media on network clients or servers allowing capacity t...

Page 33: ...Snap Server for load balancing and failover Network protocols control which network clients can access the server Topics in Network Access TCP IP Options Configuring TCP IP Settings Default Network Protocol Settings Windows Networking Configuration NFS Access Apple Networking Configuration FTP Access HTTP HTTPS Access Web View DHCP Server Print Server Note The default settings enable access to the...

Page 34: ...TCP IP networks subnets are all devices with IP addresses that have the same prefix Primary WINS Server The Windows Internet Naming Service server which locates network resources in a TCP IP based Windows network by automatically configuring and maintaining the name and IP address mapping tables Secondary WINS Servers Secondary Windows Internet Naming Service server s Ethernet Address The unique s...

Page 35: ...ng DHCP By default Snap Servers acquire an IP address from the DHCP server on the network Static Administrators may assign a fixed IP address or other IP settings as necessary Network bonding Note Not applicableto Snap Server 110 or 210 Standalone The default Standalone setting treats each port as a separate interface effectively disabling network bonding Network bonding treats two ports as a sing...

Page 36: ...vers Uses Link Aggregation Control Protocol LACP to autonegotiate trunk settings Enable Ethernet Checked By default both Ethernet ports are enabled whether they are used or not Unchecked If the Ethernet2 port is not being used it can be disabled by selecting the port and unchecking the Enable Ethernet checkbox However a bonded Ethernet port cannot be disabled nor can a disabled Ethernet port be pl...

Page 37: ...s connected to the switch In a multihomed configuration each port is cabled to a different switch and the network connections lead to separate subnets Caution Do not connect both Ethernet ports to the same network segment in Standalone mode This configuration is not supported and will lead to unexpected results For a Network Bonding Configuration Load Balancing Failover Switch Trunking or Link Agg...

Page 38: ...sical port connection to a switch Thus the switch hub to which the Snap Server is cabled must be set to autonegotiate to initially connect to the server otherwise network throughput or connectivity to the server may be seriously impacted Configure the Switch for Load Balancing If you select either the Switch Trunking or Link Aggregation network bonding configuration be sure the switch is configure...

Page 39: ...ed Allows universal access to all computers running NFS without client address restrictions Apple AFP Enabled Allows access over an AppleTalk or TCP IP network using the default zone FTP Enabled Allows access using the anonymous user account which is mapped to the Snap Server s local guest user account HTTP HTTPS Internet Intranet Enabled Allows users to access files via HTTP or HTTPS using a Web ...

Page 40: ... in every case Some are still sent via a single byte character set The Language Support option selected for Windows networking clients is used only to enable the server to accept file and folder names in a single byte character set Caution When Unicode is disabled do not name files and folders in character sets not included in this list e g Cyrillic Such files and folders may be impossible to open...

Page 41: ... request for a service in a network Kerberos lets a user request an encrypted ticket from an authentication process that can then be used to request a service from a server The user credentials are always encrypted before they are transmitted over the network The Snap Server supports the Microsoft Windows implementation of Kerberos In Windows Active Directory ADS the domain controller is also the ...

Page 42: ...Snap Server using the guest account Restrict_Anonymous and PDC Access If you have implemented the restrict_anonymous mechanism on your domain you may need to enter a valid domain not local user name and password that the Snap Server can use to communicate with the PDC For ease of administration Adaptec recommends that you create a unique user account on the domain using the following guidelines Ch...

Page 43: ...t logon box Click Finish 4 You will be asked for your Snap Server userid and password if it is different than your Windows logon The drive will then be visible as a network drive Connecting a MacOS Client Using SMB MacOS X clients can connect using SMB as well as AFP 1 Choose Go from the Finder menu bar In the Connect to Server dialog box enter one of the following smb servername smb ipaddress Cli...

Page 44: ...es can be specified by navigating to the Security Shares screen and clicking the name of a share then clicking the NFS Access button If you are in Unicode mode you must configure the Snap Server s protocol for the code page being used See NFS on page 126 for more information Support for NFS Consider the following technical information when configuring access for your NFS clients Supported Protocol...

Page 45: ...Snap Server or as Windows NT or Active Directory domain users if the server belongs to a domain For more granular control over client access for MacOS users who do not belong to a recognized Windows domain create local user accounts Note MacOS X users can also connect to the Snap Server using Windows networking SMB See Connecting a MacOS Client Using SMB on page 29 AFP Configuration Guidelines Con...

Page 46: ...e share name and the server name the Add Server Name To check box on the Network Apple screen of the Administration Tool is enabled by default This option allows Macintosh applications to differentiate between shared folders with the same share name on multiple servers For example SHARE1 on SNAP61009 refers to the share named SHARE1 on the Snap Server named SNAP61009 Macintosh Access via a Browser...

Page 47: ...list of all shares to which the user has access Users can navigate the share structure to locate and view or download files but they cannot modify or upload files Web View requires the use of Microsoft Internet Explorer 5 5 or later Safari 2 0 or later or FireFox 1 5 or later HTTP and HTTPS are the default protocols used for browser based access to the server HTTPS enhances security by encrypting ...

Page 48: ...t to the Snap Server over the network and use the printer similarly to using a printer shared by a Windows or CUPS server You can pause or resume the printer and monitor or cancel print jobs using the Administration Tool Configuring your Snap Server as a print server is a two part process Configure the printer on the Snap Server Configure the client to print via the Snap Server Configuring the Pri...

Page 49: ...follows in the URL field http servername 631 printers sharename where servername is the name or IP address of your Snap Server and sharename is the name of the printer Note 631 is the IPP port number If you experience difficulty adding the printer try the following 1 Navigate to Start Run and enter the server name as follows servername 2 After a delay you may be prompted for a user name and passwo...

Page 50: ...d the button will become a Resume Printer button which you can click to resume printing To Cancel or Check the Status of Print Jobs 1 Navigate to Server Printing and click the Status link next to your printer to open the Job Status window and see your print job queue 2 To cancel a print job click to put a check in the box next to the job you want to remove and click Cancel Selected Jobs You can se...

Page 51: ...may choose to join the Snap Server to a traditional Windows NT or Active Directory domain and Windows clients can then authenticate to the server using their domain credentials To accommodate NFS clients the Snap Server can also join an NIS domain and the Snap Server can look up user and group IDs maintained by the domain For authentication control beyond the guest account Macintosh and FTP client...

Page 52: ...n a first come first served basis with preference given first to local users then Windows users then NIS users Consider the following when creating users and groups UIDs and GIDs from 0 100 are unavailable for use If you try to assign a UID or GID that is in use by NIS or the Windows domain or is less than 101 you will get an error message Default Local Users and Groups admin The admin user accoun...

Page 53: ...p Macintosh and FTP clients initially access the server using the guest account If you require a higher degree of control over individual access to the file system for these clients you must create local accounts or in the case of Windows use Windows NT domain or Active Directory security Guidelines for Local Authentication Duplicating Client Login Credentials for Local Users and Groups To simplif...

Page 54: ...igured on the Network NIS screen of the Administration Tool The Snap Server can join an NIS domain and function as an NIS client It can then read the users and groups maintained by the NIS domain Thus you must use the NIS server to make modifications Changes you make on the NIS server do not immediately appear on the Snap Server it may take up to 10 minutes for changes to be replicated Guidelines ...

Page 55: ...e default storage configuration reserves 20 percent of the data space for snapshots including servers that require a license to activate snapshots If the default configuration is appropriate for your needs you need only create the directory structure set share access permissions and optionally schedule snapshots You may have requirements that demand a different configuration For example if the inf...

Page 56: ...rs may change the default configuration to increase capacity by modifying the configuration of the Snap Server or attaching one or more expansion arrays When a backup scheme does not require backing up from a snapshot or when a backup window can be used while files are not active the snapshot space can be reclaimed for storage on the data volume In cases when backup is ongoing or very frequent a R...

Page 57: ...onfiguration guidelines Factors in Choosing a RAID Type The type of RAID configuration you choose depends on a number of factors The importance of the data Performance requirements Drive utilization The number of available drives For example in configuring the four disk drives of the 520 the decision whether to include a hot spare in the RAID depends on the value you place on capacity vs high avai...

Page 58: ...oration of an unassigned drive go to the Storage RAID Sets screen and click the RAID Settings button Item Description Definitions Local hot spare A local or dedicated hot spare is associated with and is available only to a single RAID Administrators typically create a local hot spare for RAIDs containing mission critical data that must always be available Global hot spare A hot spare that may be u...

Page 59: ... if problems are detected on one of the RAID drives The background scan will not run on RAIDs that are degraded syncing or rebuilding RAID Management Tools Snap Servers use the following tools for configuring and monitoring RAIDs You can view the status of your RAID sets on the Storage RAID Sets and Monitor System Status screens RAID Groups Two RAIDs can be grouped together to neatly resolve a num...

Page 60: ...larger group For example A 1 TB Snap Server 520 is running out of capacity Two 1 TB SANbloc S50s are attached to the Snap Server to provide increased capacity You can configure a RAID 5 on each of the SANbloc S50s then group them together The resulting RAID group of SANbloc S50s can then be grouped with the RAID on the Snap Server allowing network users to take advantage of the full capacity of th...

Page 61: ... and RAID capacity is divided between the file system 80 percent and the space left available for future snapshot use 20 percent You may need to adjust this figure depending on your snapshot strategy or expand the volume to all available space if you plan never to use or license snapshots Keep in mind that you can increase or decrease snapshot pool size at any time but volume space can only be inc...

Page 62: ...S Replication Mode link and clicking the Start button Note If the volume on which the NVDB directory antivirus software Snap EDR or S2Sv2 resides is deleted the system attempts to move the items to another volume with the most available space If no other volumes are available the items are automatically disabled Note If you delete a volume you will also delete any iSCSI disks that reside on that v...

Page 63: ...n view volume status from the Storage Volumes screen Quotas Quotas are configured in the Storage Quotas screen of the Administration Tool Assigning quotas ensures that no one user or group consumes a disproportionate amount of volume capacity Quotas also keep tabs on how much space each user or NIS group is currently consuming on the volume allowing for precise tracking of usage patterns You can s...

Page 64: ...al user Windows domain user or NIS user or group known to the Snap Server Note Specific individual user quotas always override the default quota Data Migration Use the Data Migration feature to migrate data from a legacy Snap Server or other computer that supports CIFS or NFS to a new Snap Server The Data Migration DM feature can be used to copy or move files and folders from a server on the netwo...

Page 65: ... security model to a Windows SnapTree on a Snap Server permissions will be retained exactly as they exist on the source However as is the case when moving files with permissions between Windows servers permissions for users that are unknown on the target server will be retained but not enforced This includes permissions for Local users on the source machine Domain users for domains unknown to the ...

Page 66: ...will be retained verbatim but may have different meaning due to the differences between the pre 5 0 POSIX ACL security model and the Windows security model introduced in 5 0 If your source server uses a UNIX SnapTree and has permissions assigned to local or NIS users use an NFS connection for migration Note Local users that have UNIX permissions on the source will not be created on the target with...

Page 67: ...art guide for details the array s disk drives appear as unassigned drives allowing the administrator to configure RAIDs as necessary Preparing the Snap Server The Snap Server 550 and 650 ship with a SAS HBA installed for connectivity to SANbloc S50 expansion arrays If your server already has a SAS HBA no further preparation other than preparing rack space is necessary To connect a SANbloc S50 to a...

Page 68: ...ple will render the entire RAID inaccessible This configuration also increases the potential for multiple drive failures in a single RAID See RAID Groups on page 45 for information on how to avoid this Cautions 1 Host server disk drives and expansion array disk drives are logically interchangeable but they are not physically interchangeable That is you cannot physically take a disk drive from an e...

Page 69: ...s Replacing Disk Drives on a RAID This section describes how to safely remove and add drives to a degraded RAID After a fresh drive is inserted into the drive bay you must use the Administration Tool to add it to a RAID How RAIDs React to Disk Drive Removal RAID 0 nonredundant Removing a disk drive from a RAID 0 causes the RAID to fail This action renders any data residing on its drives inaccessib...

Page 70: ...lity to remove and add components to a system without the need to turn off the server or interrupt client access to files When to Hot Swap Disk Drives When available storage space is not at a premium most administrators prefer to configure a RAID with a hot spare that automatically takes the place of a failed drive This solution assures that client access to file systems is not interrupted In envi...

Page 71: ... Remove the front bezel by pressing in the latches on each side of the bezel and pulling the bezel away from the chassis 2 On the closed handle of the failed disk drive insert your finger into the handle slot and pull out to open the handle 3 Pull to remove the drive from the chassis 4 Open the handle of the new drive If the handle is closed you cannot insert the disk drive completely into the bay...

Page 72: ...ive from the chassis 4 Release the latch on the new drive and open its handle If the handle is closed you cannot insert the disk drive completely into the bay 5 Insert the new disk drive making sure you push it forward until it is firmly seated and the handle begins to swing closed Then close the handle until it clicks into place to completely seat the drive to its connection Note Be sure to push ...

Page 73: ...press the latch to the right 3 To remove the failed disk drive pull its handle 4 Release the latch on the new disk drive and open its handle If the handle is closed you cannot insert the disk drive completely into the bay 5 Insert the new disk drive Make sure you push it forward completely before you press the handle into place 6 Replace the front bezel Replacing a Disk Drive on the Snap Server 18...

Page 74: ...a Snap Disk 30SA the disk drive status light below the failed drive turns amber 1 Using the Torx driver T 10 provided unlock the disk drive by turning the lock screw counterclockwise until the red padlock icon in the lock indicator is no longer visible 2 To release the handle press the latch The handle springs forward 3 Grasp the handle and remove the failed disk drive by pulling it towards you La...

Page 75: ...e the carrier handle by pressing the latch and insert the carrier all the way into the enclosure 5 Once the carrier is in the enclosure close the handle until you hear a click 6 Using the Torx driver lock the carrier into place by turning the lock screw clockwise until the red padlock icon is visible ...

Page 76: ...Disks and Units 62 Snap Server Administrator Guide ...

Page 77: ...talled on a client machine The initiator sees the Snap Server as a target portal and an iSCSI disk as a target To use the Snap Server as an iSCSI target you need to configure iSCSI on both the client initiating the iSCSI connection and on the Snap Server Use the information presented here in conjunction with the documentation supplied with your initiator to install configure and connect the iSCSI ...

Page 78: ...SuSE 10 RedHat 4 5 and CentOS 5 the readme files and help menus provide information on installing and configuring iSCSI Specifications Briefs and White Papers The Snap Server and Adaptec websites offer a wide array of informational guides regarding iSCSI and its uses from product overviews and problem solving for iSCSI to product specifications and knowledgebase articles For more information about...

Page 79: ...ions that otherwise require local disk storage such as MS SQL Server 2000 and Exchange Server 2003 If you use the Microsoft initiator on Windows XP Windows 2003 Vista or Windows 2008 server services installed on iSCSI disks will start up automatically by default once you have configured them to persistently reconnect On the Windows 2000 server however you must edit the Windows registry to make the...

Page 80: ... the iSCSI Inititator service Editing the Windows Registry for MS Exchange Server or MS SQL Server Windows 2000 only 1 Install Exchange Server 2003 and configure it to use the iSCSI disk as the location to store database files 2 On a Windows workstation running Windows 2000 enter the following on the command line regedt32 3 Navigate to the Key a For Exchange Server HKey_Local_Machine System Curren...

Page 81: ...ting NTFS volume on a local disk within the Windows server initiating the connection 1 Right click My Computer and select Manage 2 The new formatted volume will appear in the Disk Management window 3 Right click the New Volume and select Change Drive Letter and Paths 4 Click Remove in the Change Drive Letter and Paths for New Volume dialog and click Yes to confirm drive letter removal 5 Right clic...

Page 82: ...line utility called Diskpart that allows you to expand basic disks This utility ships with Windows 2003 Server and is available for download for Windows 2000 Server and XP Additional details on the Diskpart utility can be found in Microsoft Knowledge Base article Q300415 http support microsoft com kb 300415 Preparing to Expand a Microsoft Basic iSCSI Disk The following steps must be taken to prepa...

Page 83: ... the Microsoft initiator tool 2 Under Available Targets highlight the specific iSCSI disk s you expanded in the previous procedure 3 Click LogOn This will connect the initiator to the selected iSCSI target 4 Close the Microsoft initiator tool 5 Open the Disk Management tool by right clicking My Computer and selecting Manage In the Computer Management GUI select Disk Management Note The disk will a...

Page 84: ...he necessary application services Configuring the QLogic QLA4010 and QLA4050 iSCSI Initiators for Microsoft Windows QLogic s QLA4010 and QLA4050 are iSCSI adapters that appear as a SCSI adapter instead of a network adapter in Windows Device Manager Before the QLA4010 or QLA4050 can successfully connect to iSCSI targets you must Set initiator parameters for example initiator name alias IP address E...

Page 85: ... website Information about the in box iSCSI intitiators is available from the RedHat Novell SuSE Linux and Sun Microsystems web sites Using CHAP Authentication to Enable Multiple Linux Systems to Share iSCSI Disks Securely on a Snap Server You can use CHAP authetication to enable multiple Linux systems with in box initiators to share different iSCSI disks on a Snap server or Snap servers To do thi...

Page 86: ...iSCSI implementation requires configuration using the NetWare Remote Manager or the command line in the Server Console For more information regarding installation and configuration of required NetWare components refer to the documentation included with the Novell initiator distribution iSCSI Configuration for VMware Note GuardianOS 4 2 4 3 SP2 or higher is required to configure iSCSI disks with th...

Page 87: ...isks on your Snap Server carefully review the following information Isolate iSCSI Disks from Other Resources for Backup Purposes It is important to isolate iSCSI disks from other resources on the Snap Server for two reasons The file system of an iSCSI disk differs fundamentally from the Snap Server s native file system iSCSI disks are managed from client software rather than the Snap Server s Admi...

Page 88: ...upport if your environment or application supports it occurs when the checkbox for Support Multi Initiator is selected It functions as a reminder that data corruption is possible if this option is used when creating an iSCSI disk Write Cache Options with iSCSI Disks To ensure the fastest possible write performance Snap Servers can buffer up to 1GB of data to efficiently handle data being transmitt...

Page 89: ...ected before shutting down the server Ignore the Volume is Full Message When an iSCSI disk is created the volume allocates the specified capacity to the disk If all volume capacity is allocated to the iSCSI disk and email notification is enabled the Snap Server may generate a Volume is Full message This message indicates only that the volume capacity is fully allocated to the iSCSI disk and is not...

Page 90: ... network login protocol that uses a challenge response mechanism to control iSCSI initiator access to an iSCSI target GuardianOS supports target authentication in which the initiator must provide the same CHAP user name and password or target secret that was configured on the target Snap Server iSCSI disk Other forms of CHAP authentication are not currently supported To View iSCSI Disk Status Info...

Page 91: ...or is connected The hostname and IQN name of all connected initiators will be displayed To Delete an iSCSI Disk The system will not allow the deletion of an iSCSI disk when clients are connected the hostname and IQN name of all connected initiators will be displayed After disconnecting all client initiators click Delete and then follow the onscreen instructions to delete one or more iSCSI disks ...

Page 92: ...Creating iSCSI Disks 78 Snap Server Administrator Guide ...

Page 93: ...tors can choose to apply Windows or UNIX style file level permissions to entire volumes or to directories at the root of a volume aka SnapTree directories These security based directory structures are referred to as SnapTrees File and directories in a Windows SnapTree can have either a Windows or UNIX security personality depending on the network protocol used to create the file or change permissi...

Page 94: ...irst step to securing a Snap Server is to specify access at the individual share level Administrators can assign Read Write or Read Only share access to individual Windows and local users and groups Hidden Shares There are three ways a share can be hidden in GuardianOS Name the share with a dollar sign at the end This is the traditional Windows method of hiding shares however it does not truly hid...

Page 95: ...urity personality Share Level Permissions Share level permissions on GuardianOS are applied cumulatively For example if the user j_doe has Read Only share access and belongs to the group sales which has Read Write share access the result is that the user j_doe will have Read Write share access Note Share level permissions only apply to non NFS protocols NFS access is configured independently by na...

Page 96: ...his screen affect the NFS exports file within GuardianOS Caution If there are multiple shares to the same directory on the disk and those shares permit access via NFS they must all have the same NFS export configuration This is enforced when configuring NFS access to the overlapping shares Components and Options Shares are created and share access is granted using the Administration Tool File leve...

Page 97: ...HTTP AFP and FTP but not NFS protocols Protocol Access Client access to the share can be restricted to specific protocols As a security precaution disable any protocols not needed by users of the share Snapshot Share The snapshot share allows access using identical security to snapshots of the data that the new share references Note The Snapshot share option only appears when Snapshots have been l...

Page 98: ...curity SnapTrees screen in the Administration Tool or from a client from any of the network protocols SnapTrees created either by clients or in the Web UI will default to the security model of the parent volume Note The security model of a SnapTree directory may differ from the personality of the directory a Windows Mixed SnapTree may have the UNIX personality and vice versa Toggling Security Mode...

Page 99: ...s security personality Permissions will either be inherited according to the ACL of the parent directory if Windows or will receive a default ACL that grants the user full access only if the parent is UNIX or has no inheritable permissions Files and directories created by non SMB clients will have the UNIX personality UNIX permissions will be as set by the client per the user s local umask on the ...

Page 100: ... volume root directory has the Windows security model or Full Access to the owning user only Permissions for directories created by all other protocols will be set by the client per the client s umask From the Administration Tool If created in a UNIX volume permissions will be 777 rwx wx wx If created in a Windows Mixed volume permissions will allow all users to create delete and change permission...

Page 101: ...ERY file and subdirectory on that volume unless there is a specific ACL in place precluding that access In general access to a share at the root of a volume should only be granted to a system administrator or backup operator Hidden Shares A hidden share is hidden from clients connecting from the SMB HTTP AFP and FTP but not NFS protocols For example assume SHARE1 is set as hidden Windows users wil...

Page 102: ...ll local and Windows domain users and groups Share Access Behaviors Administrators tasked with devising security policies for the Snap Server will find the following share access behaviors of interest Share access defaults to full control The default permission granted to users and groups when they are granted access to the share is full control You may restrict selected users and groups to read o...

Page 103: ...hen they are granted access to the share is full access You may restrict selected users and groups to read only access Note Multiple shares pointing to the same target directory must have the same NFS access settings The Administration Tool will permit editing NFS access of only one of the overlapping shares Share Level File Level Result Full control Read only to FileA Full control over all direct...

Page 104: ...y is exported When a user mounts the home directory root all home directories will be visible inside the root but the user s home directory will be accessible only by the user and the administrator Note If desired UNIX clients can be configured to use a Snap Home Directory as the local user s system home directory Configure the client to mount the home directory root for all users and then configu...

Page 105: ...the Administrators group mapped to the local admingrp and the ACL will be inherited per the inheritance ACEs on the parent directory s ACL The owner of a file or directory always implicitly has the ability to change permissions regardless of the permissions established in the ACL In addition members of the Snap Server s local admin group as well as members of Domain Admins if the server is configu...

Page 106: ...n security for Microsoft Networking Once configured the Snap Server will accept Microsoft networking users and groups that are part of the domain These users and groups can be granted or restricted access rights for Snap Server network shares files or directories The Snap Server will need the name of your Windows domain and the name and password of an administrative user within your Windows domain...

Page 107: ...evel Access to an Entire Volume This security guide provides steps for allowing users share level access to a whole volume on the Snap Server You will need to know which user to grant access to and which volume they are to access Share level Access to a Folder on a Volume This security guide provides steps for allowing users share level access to a folder on a volume on the Snap Server You will ne...

Page 108: ...Security Guides 94 Snap Server Administrator Guide ...

Page 109: ...f your backup strategy to ensure that all data in every backup operation is internally consistent and that no data is overlooked or skipped Note Some Snap Servers require a license before Snapshots can be enabled The Snapshot options will be hidden if the server is not licensed for them To license Snapshots go to the SnapExtensions screen and click the License Required link next to Snapshots Topic...

Page 110: ...ts to restore selected directories or files have failed 2 Performing a rollback on a volume may invalidate the NetVault for GuardianOS NVDB directory for the volume and may also disable the antivirus software If you are using these features take the necessary precautions as described in Volumes on page 47 Scheduling Snapshots Snapshots should ideally be taken when your system is idle It is recomme...

Page 111: ...pace exists or down according to your needs If you find that your snapshot strategy does not require all of the space allocated to the snapshot pool by default consider decreasing snapshot pool capacity and reallocating the capacity to the file system To adjust the size of the snapshot pool navigate to the Storage Snapshots screen and click the Adjust Snapshot Space link in the introductory text T...

Page 112: ...ded together For example if RAID A with a snapshot pool of 50 GB is grouped with RAID B with a snapshot pool of 25 GB the resulting RAID group will have a snapshot pool of 75 GB Depending on the purpose you had in mind when grouping the RAIDs the result of combining the two snapshot pools may or may not be desirable and you will need to readjust the size as described previously Accessing Snapshots...

Page 113: ...individual file as it existed at a previous point in time or even roll back to a previous version of the file by creating a file copy to the current live volume Note The latest subdirectory is very useful for setting up backup jobs as the name of the directory is always the same and always points to the latest available snapshot Coordinating Snapshot and Backup Operations Like backups snapshots ca...

Page 114: ...hare enabled In the Administration Tool navigate to the Security Shares screen and click New Select the volume you want the share to point to if you want to create a share to the root of the volume simply accept the default path Click Advanced then select Create Snapshot Share 3 Set the backup software to archive the latest version of the snapshot The Snap Server makes it easy to configure your ba...

Page 115: ...a intact These files are then used to restore any Snap Server to its original state Topics in Disaster Recovery Management Backing Up Server and Volume Settings Backing Up the NetVault Database Directory Recovering the NetVault Database Disaster Recovery Procedural Overview Backing Up Server and Volume Settings In addition to backing up the data stored on the Snap Server you may also back up its s...

Page 116: ... the volume specific files when the snapshot is taken If you do not use snapshots to back up a volume to tape you must manually regenerate these files whenever you change ACL or quota information to ensure that you are backing up the most current volume settings Creating the SnapDRImage and Volume Files Creating a SnapDRImage that covers the scope of your server s configuration is essential to a s...

Page 117: ...e location on another server or backup medium See The SnapDRImage File and the Volume Files for file names and paths This strategy ensures that if the file system on the Snap Server is corrupted the image file will be available to restore server settings The DRImage is also automatically placed in the root of the first user volume These files will be copied to tape as part of your regular backup p...

Page 118: ...d the specific piece of media targeted can be easily located to perform the recovery To Back up the NVDB Directory 1 From the NetVault Server either locally or remotely open the NetVault Backup window by clicking the Backup button on the command toolbar The NetVault Backup window displays the list of available clients in the Selections tab 2 Right click the NetVault Server acting as a client to it...

Page 119: ...saveset needed for the recovery of the NVDB 4 Add all devices previously added to the NetVault Server through the use of the Device Management window 5 From the Device Management window the media containing the backup saveset will be recognized as FOREIGN in its designated drive or library slot Scan the media before proceeding with the restore operation Restore Recommendations The following recomm...

Page 120: ... boxes can be double clicked to browse their individual contents 6 For a full database restore select each item in the tree Additionally open up root items to display their contents by double clicking them and then select all of their contents e g Events Notification and Reports Database items 7 Select the Restore Options tab and make sure that the Blank Reports Database Table option is selected 8...

Page 121: ...sed through Adaptec will be lost If you have installed data replication or management utilities such as Snap EDR you will need to re install and or relicense them for use with the new server Note If you are restoring EDR Management Console settings you must recreate the RAID and volume configuration that matches the DRI settings then install and enable the EDR Management Console As an alternative ...

Page 122: ...data from tape backup If the backup doesn t retain permission and ownership settings you can restore these by selecting Recover Volume Security Settings on the Maintenance Disaster Recovery screen Note If you are restoring from any backup other than NetVault you will need to recover the volume settings ...

Page 123: ...ng the CA eTrust Antivirus GUI accessed from the SnapExtensions CA Antivirus screen of the Administration Tool This section outlines the major steps in configuring the antivirus software See the GUI online help for detailed descriptions of all options Note Some Snap Servers require a license before CA eTrust Antivirus can be enabled Topics in Antivirus Configuration Antivirus Dependencies Launchin...

Page 124: ...Trust Antivirus link Resetting the Server Date and Time If the current server date and time are changed to an earlier date and time Server Date Time the change does not automatically propagate to any scheduled antivirus operations To synchronize scheduled antivirus operations with the new date and time settings you must reschedule each operation New jobs may be affected by the time change Be sure ...

Page 125: ...t Antivirus Browser Interface The first time you connect to the GUI it may take from 30 seconds to several minutes for the application to load depending on the speed of your connection 1 If you need to enable the antivirus software go to SnapExtensions CA Antivirus click the check box next to Enable and click OK 2 Click the CA Antivirus link again then click the Configure eTrust Antivirus link The...

Page 126: ...Server As in Windows Explorer click folder icons to navigate the structure and display subfolders and files in the right hand pane Move Folder May contain infected files The administrator can instruct the software to automatically move infected files to this directory For more information see Scan Job Configuration and Scheduling on page 113 Scheduled Scan Jobs Scan Jobs you schedule appear in thi...

Page 127: ...or removed before the snapshot is scheduled to fire Defining Scan Jobs This section provides an overview of the major choices available in configuring scan jobs Access these options by selecting Local Scanner Options from the Scanner Menu Choosing an Infection Treatment Scan Tab You can instruct the software to perform one of the following file actions when an infected file is found File Actions D...

Page 128: ...les option to put information in the log about files that have been excluded from the scan Running a Manual Scan Job Before running a local scan job confirm that the scanner options are correctly configured as described in the previous section 1 In Local Scanner View select the folders you want to scan The left hand pane displays the directory structure of the Snap Server A red check mark on a fol...

Page 129: ...e updates are made available on a regular basis by Computer Associates These updates are cumulative so they contain everything from all previous file updates plus the newest information on the latest infections If you have missed a recent update you only need to collect the latest signature file to have the most up to date protection Snap Servers are preconfigured to download signature updates fro...

Page 130: ...tions and click the Incoming tab 2 Select FTP in the list box then click Edit 3 In the Proxy Name field enter the IP address of the proxy server then click OK UNC Use UNC to distribute signature updates from one Snap Server to another or from any arbitrary SMB or Windows server Note that for UNC to work you must have the Enable Guest Account option enabled Network Windows on the Snap Server on whi...

Page 131: ... or any FTP or Windows SMB server Note If using a Snap Server copy the files to the root of a share You can configure other Snap Servers to automatically get their signature updates from a single Snap Server see following procedure To do so the update files must reside on the root of a share not a subdirectory within a share 3 Navigate to Scanner Signature Update Options and click the Incoming tab...

Page 132: ...er running CA Antivirus 1 Navigate to Scanner Signature Update Options and click the Incoming tab 2 Click the Add button and select UNC in the Method list box 3 Enter the path to the Snap Server or Windows SMB server to which the update files have been downloaded see previous procedure using the following format server_name share_name where server_name is the name of the server and share_name is t...

Page 133: ...path would be similar to the following shares SHARE1 sigfiles where SHARE1 sigfiles is the share path to the directory containing the signature update files 4 Click OK The path you entered appears in the Download Sources list box 5 Click Download Now Verifying Download Events Use the following procedure to verify download and distribution events 1 Select View Log Viewer 2 In the left hand pane sel...

Page 134: ...are reported Note The Local Alert Manager option is not supported on Snap Servers Alert Filter Use the Alert Filter options to manage notification severity levels and to determine what types of messages should be passed to the Alert Manager Note In the Custom Notification Module the Realtime Server and Admin server settings have no effect on Snap Servers Option Description Restore This option remo...

Page 135: ...s you to restore the selected item back to the original folder it was in and cure it This option is useful if you update the signature files after items have been put in the Move folder If a cure is provided that you did not have available you can get the latest signature update and use this option to restore and cure an infected item Delete This option deletes the infected file no warning or conf...

Page 136: ...nner Not Supported Scheduled Scanner Displays summary information on scheduled scans that have run General Events Displays the Event log for a given day Click a date to view all events that occurred that day Distribution Events Displays distribution events by date Click a date to view detailed information on the distribution event in the lower pane ...

Page 137: ...names More information is available at http www unicode org Caution Once Unicode has been enabled on a GuardianOS Snap Server it is not possible to disable Unicode Enabling Unicode will alter the functionality of some third party applications and SnapExtensions that do not fully support Unicode Converting to Unicode To convert your GuardianOS Snap Server to Unicode complete the following steps Ste...

Page 138: ... note the following The server reboots after Unicode has been enabled After rebooting the server will convert all file systems to Unicode file names which can take some time File systems are accessible during conversion During this time file names with extended characters in them before Unicode was enabled will appear with garbled characters before being converted to Unicode File system conversion...

Page 139: ...he majority of Unicode characters Therefore in general all characters written by Windows and MacOS X clients will be properly retained and visible to other Windows and MacOS X clients and Unicode compliant protocols However if there are characters on the file system that are invalid UTF8 or are otherwise not mappable to the Unicode encoding method UCS2 used by the SMB protocol an escape sequence w...

Page 140: ...options include ISO 8859 1 ISO 8859 15 EUC JP and UTF8 Any extended characters on the file system that cannot be translated to the configured NFS code page will be returned to the NFS client with an escape sequence Escape sequences begin with The following two characters are the hexidecimal value of the characters in the filename for example you might see AB in a file name FTP FTP only supports AS...

Page 141: ...napshots Interact with Unicode Snapshots taken before the Snap Server was converted to Unicode are not compatable with the Snap Server once it has become Unicode enabled It is not recommended that a pre Unicode snapshot be used to restore a post Unicode server Note It is recommended if you have snapshots on your server from pre Unicode conversion you delete all snapshots once the server has been c...

Page 142: ...US 8859 15 Europe or EUC JP Japan In each of these situations it is important to NetVault 7 4 over client 1 1 The UI displays garbage but the data is intact Symantec Backup Exec 10 0 over SMB only Symantec NetBackup 5 1 Computer Associates ARCServe 11 over SMB only 1 EMC Legato Networker over SMB only EMC Dantz Retrospect over AFP only Snap Server to Server Sync over SYNC Snap EDR over Sync only 2...

Page 143: ... When an expansion array is converted to Unicode it stays converted to Unicode This means that a Unicode enabled expansion array is only compatable with head units that have also been converted to Unicode The following is a usage scenario concerning expansion arrays and how they operate with Unicode enabled servers You have a Snap Server and an expansion array such as a SANbloc S50 You enable Unic...

Page 144: ...Unicode and Expansion Arrays 130 Snap Server Administrator Guide ...

Page 145: ... In this scenario the backup server copies files from one Snap Server and stores the image on another Snap Server 3 The tape drive library is attached to one of the Snap Servers not applicable to the Snap Servers 110 and 210 Snap Server Backup Backup and Replication Solutions BakBone NetVault for GuardianOS Snap EDR S2Sv2 CA BrightStor ARCserve 11 5 12 0 EMC Legato NetWorker v7 3 7 4 Symantec Back...

Page 146: ...up to four tape drives Most Snap Servers ship with BakBone s NetVault server software preinstalled with a Workgroup Server license This license supports backup and recovery of data to the Snap Server from up to 5 heterogeneous clients Additional clients can be added with optional licenses Note Snap Servers 110 and 210 require an additional license to support NetVault For additional information on ...

Page 147: ...th a 45 day free trial or it can be downloaded from the Snap Server website Snap EDR consists of a Management Console and a collection of Agents The Management Console is installed on a central system It coordinates and logs the following data transfer activities carried out by the distributed Agents Replicates files between any two systems including Windows Linux and Mac Agents Transfers files fr...

Page 148: ...here jobs can be scheduled Stop Service Stops all services Restart Service Restarts all services Caution Use only if you have encountered a problem and customer support advises you to restart the service Any jobs currently running will stop and will not resume when you restart the service Disable Service on System Boot By default when a user reboots the Snap Server services automatically restart S...

Page 149: ...of the backup and media servers you plan to use with the Snap Server Use the Maintenance Host File Editor screen in the Snap Server s Administration Tool to supply a host name to ip address mapping that persists across system reboots Backup software sees the Snap Server as a UNIX Linux client When you configure a backup server to see the agent or client running on the Snap Server assume the server...

Page 150: ...p software Host name long form Enter the fully qualified address for the backup server using the myserver mydomain com format Host name short form Enter an abbreviated address for the backup server using the myserver format Click OK The entry appears on the Host Editor screen Repeat this procedure for each backup and media server you plan to use 2 Make sure SSH is Enabled on the Snap Server Naviga...

Page 151: ...uestions about the agent configuration refer to your CA ARCserve documentation Prepare the Snap Server 1 Connect to the Snap Server via SSH Note SSH v2 is required If you fail to connect to the server ensure that your SSH client is configured to connect via SSH v2 2 At the prompt log in as admin using the password you created for this account during the initial setup of the server 3 You are placed...

Page 152: ...ctory ln s hd volumename arcserve opt CA Install CA ARCserve Agent 1 To install the agent files enter the following command at the prompt and press Enter rpm nodeps Uvh babagtux rpm lic rpm 2 Once the license is installed run the Install script by entering the following command at the prompt and pressing Enter install Answer the prompts using the defaults Note You are installing the Linux Client A...

Page 153: ...y the success of the installation use your backup management software to configure and run a test backup Uninstall CA ARCserve Agent 1 If you still have the tar or install directory that you copied to the Snap Server when you installed the ARCserve Agent then you have the uninstall script If you do not have the directory or tar copy the files again from the ARCserve CD or get them from Computer As...

Page 154: ...s admin using the password for the admin account 3 You are placed into the CLI shell However a standard Linux shell must be used to install the agent To launch a shell type the following command and press Enter osshell 4 Change to root by entering the following command su Give the root password same as admin password 5 Select a volume on which to put a directory called ralus Note If you later dele...

Page 155: ...editor Maintenance Host File Editor screen to add all the Backup Exec servers to etc hosts on the Snap Server and verify that the agent server can ping the main Backup Exec server Note Do not edit the etc hosts file directly with a text editor Install Backup Exec RALUS Agent 1 From a network client copy the Backup Exec RALUS agent tar file or directory from the CD to a share e g Share1 or Agent on...

Page 156: ...nit d VRTSralus init start 7 Verify that using Backup Exec you can create a job using the UNIX agent a Create a Guardian Root login account on the Backup Exec server b Connect as root the password will be the same as the admin account password c Create a job and choose the Unix agent representing the Snap Server d Verify that you can connect to the agent configure a job and run the job Uninstall t...

Page 157: ...ng the password for the admin account 3 You are placed into the CLI shell However a standard Linux shell must be used to install the agent To launch a shell type the following command and press Enter osshell 4 Change to root by entering the following command su Give the root password same as admin password 5 Select a volume on which to put a directory called openv Note If you later delete the volu...

Page 158: ...s cd shares SHARE1 NBClients catalog anb client inst Follow the instructions choosing RedHat Linux choose 2 6 kernel version if available as the type 3 Once the NetBackup Client is installed reboot the server using the Administration Tool Maintenance Restart to start the client service 4 Verify that you can configure the UNIX client a Create a policy and add the Snap Server as a client b Look at t...

Page 159: ...ient files on the default share SHARE1 such that the path to the directory is shares SHARE1 agent This section describes how to install the EMC Legato NetWorker UNIX Linux client as well as special procedures EMC Legato NetWorker users must follow in order to perform backup and restore operations on the Snap Server Prepare the Snap Server 1 Connect to the server over SSH Note SSH v2 is required If...

Page 160: ...usr and opt usr cd networker mkdir opt usr opt usr ls to verify that the directories are there 9 If CA Antivirus has been installed you will have an opt directory If it has not been installed create an opt directory mkdir opt 10 Create links from the networker working volume to the root filesystem ln s hd vol_mnt X networker nsr ln s hd vol_mnt X networker opt nsr opt ln s hd vol_mnt X networker u...

Page 161: ...su 4 At the prompt enter the admin user password and press Enter 5 Use the cd command to change to the directory in the share for example cd shares SHARE1 agent 6 To unpackage the client files enter the following commands tar xvfz nw_linux86 tar gz 7 To install the NetWorker Agent rpm enter the following command rpm Uvh nodeps relocate usr hd vol_mnt X NetWorker usr lgtoclnt x x x i686 rpm where v...

Page 162: ...1 Open the NetWorker Administrator application 2 Click the Configuration tab 3 Click the User Groups menu item 4 Click on the Administrators group 5 In the Configuration box add one of the following user root hostname where hostname is the host name of the Snap Server for each Snap Server Or enter user root to add root for all Snap Servers 6 Click OK Recover and Retrieve Operations The EMC Legato ...

Page 163: ...ARE1 data a where shares SHARE1 data is the path of the data you are restoring To recover data to a different location recover s backupservername c snapservername f i a R d shares SHARE1 relocated_data shares SHARE1 Data where shares SHARE1 relocated_data is the path to the new target location for the restore operation and where shares SHARE1 Data is the path of the data you are restoring 6 To ret...

Page 164: ...Off the Shelf Backup Solutions for the Snap Server 150 Snap Server Administrator Guide ...

Page 165: ...ce SnapCLI Syntax Scripts in SnapCLI SnapCLI Syntax SnapCLI command syntax uses three parameters COMMANDS ARGUMENTS and OPTIONS To generate commands in SnapCLI use the following syntax COMMAND ARGUMENT OPTIONS where COMMAND is the name of one of the SnapCLI commands ARGUMENT is an action available for that command and OPTIONS are additional parameters for the command Once logged into the CLI there...

Page 166: ...7 Note If instead of typing the word date you had typed d tab the word would have been completed for you If you entered d tab tab the word would have been completed and the available options displayed Command Arguments and Options Descriptions date timezones list available time zones get get server date time set OPTIONS day 1 31 month 1 12 year 1900 hour 0 23 minute 0 59 second 0 59 timezone 1 set...

Page 167: ...SH see SSH Secure Shell on page 183 Note Free or low cost SSH applications are available over the Internet 2 Connect to the server using its name or IP address and log in as admin or any other member of admingp You will automatically be placed in the CLI shell Note SSH v2 is required If you fail to connect to the server ensure that your SSH client is configured to connect via SSH v2 Exiting SnapCL...

Page 168: ...s 3 Type osshell to get a bash prompt 4 At the prompt make sure the script is executable by typing the following and pressing Enter chmod x shares sharename scriptname where sharename is the name of the share where you put the script and scriptname is the name of the script 5 To run the script type the path again and press Enter shares sharename scriptname Sample Script Following is an example scr...

Page 169: ...roup name 1 dev null 2 1 if ne 0 then echo Creation of group 1 failed return 1 fi else echo Group 1 already exists fi return 0 usage adduser2group user_name group_name adduser2group Add the user to the group if both the user and the group exist add the user as a member of this group if CLI user get user name 1 dev null 2 1 then if CLI group get group name 2 dev null 2 1 then echo Adding user 1 to ...

Page 170: ...of user 1 failed return 1 fi else echo User 1 does not exist fi return 0 usage rmgroup group_name rmgroup Delete the group if the group exists then delete it if CLI group get group name 1 dev null 2 1 then echo Deleting group 1 CLI group delete group name 1 dev null 2 1 if ne 0 then echo Deletion of group 1 failed return 1 fi else echo Group 1P does not exist fi return 0 usage rmshare share_name r...

Page 171: ...n 0 Create a user group and share then add the user to the group Main create a user a group and a share and add the user to the group mkuser USER PASSWORD mkgroup GROUP adduser2group USER GROUP mkshare SHARE VOLUME remove the group the user and the share rmgroup GROUP rmuser USER rmshare SHARE ...

Page 172: ...Scripts in SnapCLI 158 Snap Server Administrator Guide ...

Page 173: ...ific issues by clicking the Knowledge Base link on the Snap Server support page http www snapserver com kb Hardware Components Purchase additional hardware components from authorized Snap Server resellers To locate a reseller in your area select the Where to Buy tab on the Snap Server home page http www snapserver com Field Service Documents Find a list of the hardware components available for you...

Page 174: ...p Server 18000 Status and Drive Light Behavior SANbloc S50 Enclosure Disk Drive APC Module and Controller Behavior Snap Disk 10 Disk Drive and Power Supply Module LEDs Snap Disk 30SA Disk Drive and Power Fan Module Behavior Snap Server 110 210 Status and Drive Light Behavior The server has two status lights one network light and one disk light as shown in the following illustration Power and Syste...

Page 175: ...en The server is operating normally Blinking amber A thermal or other system problem was detected Blinking amber and green The server is in Maintenance Mode Network LED Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet cable is not connected or linked to an active switch Disk LED Blinking green Disk drive is active Solid amber Disk drive err...

Page 176: ...ower button Looking at the server from the front the lights appear in the following order from left to right power LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The Disk Drive LEDs run along the bottom of the bezel two LEDs for each disk drive The LEDs operate as described in the following tables System LED Power LED LAN LEDs Disk Drive LEDs Power LED Solid green The server is powered...

Page 177: ... you become familiar with the operation of these lights Power System and LAN LEDs These status lights are located to the right of the power button Looking at the server from the front the lights appear in the following order from left to right power LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network Off ...

Page 178: ...blink green The server is shutting down Solid or blinking amber at boot time A problem was detected The server will not boot Blinking amber during normal operation A thermal or other system problem was detected Blinking amber and green The server is in Maintenance Mode LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet ca...

Page 179: ...es power module is identified in the following illustration Status LED left Activity LED right Solid green Off SATA drive Solid green SAS drive Disk drive installed properly but is not active Solid green Blinking green Disk drive installed properly and is active Solid amber Off Disk drive installed but not working correctly Off Off No disk drive installed Power Description Solid green The module i...

Page 180: ...es as shown in the following illustration Adaptec recommends that you become familiar with the operation of these lights Power System and LAN LEDs These status lights are located to the right of the power button Looking at the server from the front the lights appear in the following order from left to right power LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED Power LED System LED LAN L...

Page 181: ...own Solid or blinking amber at boot time A problem was detected The server will not boot Blinking amber during normal operation A thermal or other system problem was detected Blinking amber and green The server is in Maintenance Mode LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network on the network port Off The port is disconnected or the Ethernet cable is not conne...

Page 182: ...D system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The LEDs operate as described in the following tables Power LED Solid green The server is powered on Off The server is powered off 1 2 3 4 5 6 7 8 Power LED System LED LAN LEDs Disk Drive LEDs System LED Double blink green The server is booting up Triple blink green The server is shutting down Solid or blinking amber at boot time A problem w...

Page 183: ...are identified in the following illustration LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet cable is not connected or linked to an active switch Status LED left Activity LED right Solid green Off Disk drive installed properly but is not active Solid green Blinking green Disk drive installed properly and is active Soli...

Page 184: ... indicates when a fan has failed When the cover of the chassis is removed the Fault LED on the failed module will be lit The Fault LED of a Snap Server 18000 fan module is identified in the following illustration To remove a failed fan module squeeze its handles together and lift the module out of the unit Off Solid red Solid green The module has failed Off Off Off The module is not connected Powe...

Page 185: ...llustration are four LEDs that indicate the status of the enclosure These LEDs operate as described in the following table 1 2 3 4 LED Condition Indication 1 On Enclosure power on 2 On Fault on enclosure When a failure occurs on a controller or APC unit the enclosure LEDs indicate an enclosure fault 3 Solid green Host Link A solid green LED indicates communication with the Snap Server 4 Rapidly fl...

Page 186: ... indicate status These LEDs operate as described in the following table 1 2 3 LED Condition Indication 1 N A Not used 2 Solid green Drive present and OK Solid amber Drive failed Off Drive not present 3 Solid green Drive present and idle Green random flash I O activity on disk drive Off Drive not present Power Fault LED Condition Indication Power Off Enclosure not powered on Green solid APC unit fu...

Page 187: ...that indicate status These LEDs operate as described in the following table Yellow flash APC unit failure predicted Yellow solid APC unit failed LED Condition Indication LED Condition Indication Master On Controller is current Master for enclosure Fault On 5 10 seconds only Enclosure is powering on On continuously Fault condition exists on controller FAULT SEP MASTER HOST EXP Fault LED yellow Mast...

Page 188: ...lowing table Power Module LED The Snap Disk 10 power module has a single LED The LED operates as described in the following table Status Power Drive Activity Drive Status Drive Status Drive Activity Condition of Disk Drive Green Amber flashing Disk drive installed and being accessed Green Not lit Disk drive installed properly but not being accessed Amber Not Lit Disk drive installed but not workin...

Page 189: ...LEDs The Snap Disk 30SA has two LEDs at the edge of each disk drive as shown in the following illustration The LEDs operate as described in the following table Status Fault Condition of Disk Drive Solid green Off Disk drive installed properly but is not active Solid green Off Disk drive installed properly but is not active Solid green Solid amber Disk drive installed but not working correctly Off ...

Page 190: ...together and then withdraw the module by pulling the handle towards you The LEDs operate as described in the following table Power AC Fan DC Condition of Power Fan Module Green Off Off Off Power and fan working properly Off Amber Off Amber AC power supply is disconnected Green Off Red Off Fan installed but not working correctly Off Off Off Off Module not seated properly or disconnected from operat...

Page 191: ... 5 6 LED Normal Status Fault Description 1 Invalid Address Off Flashing amber Invalid Enclosure ID has been selected or the selection has changed since Power On 2 Power On Solid green Off Enclosure powered on 3 System Fault Solid amber Off System SCM fault 4 PSU Fault Solid amber Off PSU cooling fault or enclosure over temperature 5 Hub Mode not used not used n a 6 2GB Link Speed not used not used...

Page 192: ...ves system settings Fresh install Reinstalls the GuardianOS overwriting any previous configurations and destroying all disk partitions Note To install the GuardianOS you must obtain the appropriate GuardianOSImage file This file is available from the user CD provided with your Snap Server or has been provided as a download if you have upgraded to this release version Resetting the Snap Server to F...

Page 193: ...reset to defaults if a Snaptree conversion is in progress Rebooting or shutting down the server in the middle of an ACL reset will halt the operation and it will not recommence on reboot Performing System Resets Without Network Access Should access to the server be lost the Reset or LCD panel buttons can be used to reset server settings and re establish connectivity To Perform a Limited Reset Usin...

Page 194: ...s must match To resolve the problem make sure the port settings on the hub or switch match the settings for the primary port as configured on the Network TCP IP screen of the Administrator Tool Use the autonegotiate setting on both the switch and the server port You Have No Access to the Snap Server via HTTP When trying to access the Snap Server via HTTP the Web browser times out The server can be...

Page 195: ... Servers on that network segment and to assign static IP addresses as necessary Apple Users Cannot Log into the Snap Server as Windows Users To allow Apple users to access a Snap Server replicate their user names and passwords locally on the Snap Server An Apple Mac Connection to the Snap Server Is Reset When a Share Is Updated A Mac client connected to a Snap Server share may receive a message st...

Page 196: ...ers should lose elections to Windows domain controllers NT 2K 2K3 but win against standalone Windows servers NT 2K 2K3 and workstations all versions however users often prefer to prevent this election entirely The master browser option is enabled by default on Snap Servers to allow them to appear more rapidly in a peer to peer Windows environment In some environments that include NT server systems...

Page 197: ...ot Appear on the Storage Disks Units Screen Verify that the Snap Disk 10 is connected properly to the Serial ATA connector at the rear of the Snap Server and that the expansion array is properly connected to the power supply Then to initialize the Snap Disk 10 power off and then power on the Snap Server Caution Make sure to use a screwdriver to firmly seat the connectors on the Snap Disk 10 and th...

Page 198: ...ve this issue simply disable and then re enable the NetVault for GuardianOS Server via the SnapExtensions BakBone NetVault screen BakBone NetVault Restore Limitations for UNIX SnapTrees File and directory permissions will be restored when using BakBone NetVault However when Windows file and directory permissions are restored to a UNIX SnapTree on a Snap Server the Windows style extended permission...

Page 199: ...sentative Problems with Cable Arm on the 18000 with a SCSI Cable Attached The size of the connector on an attached SCSI cable may prevent the 18000 from fully withdrawing into a rack when the cable management arm is attached To resolve this problem remove the cable management arm You Have Problems Seeing the Tape Library Tape Device Not the Robotic Arm When you have problems seeing the actual tape...

Page 200: ...support representative Notes Phone Home Support interacts with two fields on the Server Email Notification screen 1 To use Phone Home Support you must enter a valid SMTP server IP address on the Email Notification screen and 2 the first email address listed in the Recipient s field populates the Admin Email Address field on the Support screen Complete the following fields as appropriate then click...

Page 201: ...p Zone Information Protocol 21 TCP UDP Network FTP ftp File Transfer Protocol FTP port sometimes used by File Service Protocol FSP 22 TCP UDP Server SSH ssh Secure Shell SSH service 25 TCP UDP Server Email Notification smtp Simple Mail Transfer Protocol SMTP 67 TCP UDP Network TCP IP bootps Bootstrap Protocol BOOTP services also used by Dynamic Host Configuration Protocol DHCP services 68 TCP UDP ...

Page 202: ...39 TCP UDP Network Windows netbios ssn NETBIOS Session Services used in Red Hat Enterprise Linux by Samba 161 TCP UDP Network SNMP snmp Simple Network Management Protocol SNMP 162 TCP UDP Network SNMP snmptrap Traps for SNMP 201 TCP UDP Network Apple at rtmp AppleTalk routing 202 TCP UDP Network Apple at nbp AppleTalk name binding 204 TCP UDP Network Apple at echo AppleTalk echo 206 TCP UDP Networ...

Page 203: ...Network NFS Used by rpc statd 939 TCP Network NFS Used by rpc statd 957 UDP Assist Used by assistrecv 959 TCP Assist Used by assistrecv 2005 TCP SnapExtensions SnapExtensio ns Bridge from Servlet to Snap Extension framework 2049 TCP UDP Network NFS nfs nfsd Network File System NFS 2050 UDP Network NFS mountd 2599 UDP Snap Finder Snap Server Manager Sysbroker Multicast Discovery 3052 TCP Server UPS...

Page 204: ...de SnapExtension S2S Manager S2Sv2 Management Console Web Server Port 9110 UDP SnapExtension S2S Replication Node SnapExtension S2S Manager S2Sv2 Discover Multicast over 230 0 0 1 9200 SnapExtension S2S Replication Node SnapExtension S2S Manager S2Sv2 Replication Configurable per Server 9311 TCP SnapExtension S2S Replication Node SnapExtension S2S Manager S2Sv2 10000 TCP SnapExtension BakBone NetV...

Page 205: ...n BakBone NetVault NetVault Listening Port 24066 TCP poolmgr Used by bin poolmgr 32780 TCP WebUI tomcat Random Port 32781 TCP WebUI tomcat Random Port 49221 TCP SnapExtension SnapEDR SnapEDR External Communications Port Port Layer GOS Feature Name Comment ...

Page 206: ...192 Snap Server Administrator Guide ...

Page 207: ...authentication allows Active Directory users to connect to shares on the Snap Server The Snap Server supports the Microsoft Windows 2000 family of servers that run in native ADS mode or in mixed NT ADS mode AFP AppleTalk Filing Protocol A Local Area Network LAN architecture built into all Apple Macintosh computers agent A program that performs some information gathering or processing task in the b...

Page 208: ...ity of the peer using a three way handshake checksum The result of adding a group of data items that are used for checking the group The data items can be either numerals or other character strings treated as numerals during the checksum calculation The checksum value verifies that communication between two devices is successful CIFS Common Internet File System The default Windows protocol for com...

Page 209: ... and groups of users A domain may also include multiple servers on the network To gain access to these network resources the user logs into the domain domain name The ASCII name that identifies the domain for a group of computers within a network Ethernet The most widely installed LAN technology 100Base T Ethernet provides transmission speeds of up to 100 Mbps Fast Ethernet or 1000Base T provides ...

Page 210: ... GuardianOSImage gsu An image file used to upgrade the GuardianOS half duplex A type of transmission that transfers data in one way at a time hidden share A share that restricts the display of the share via the Windows SMB Web View HTTP HTTPS FTP and AFP protocols host name The unique name by which a computer is known on a network It is used to identify the computer in electronic information inter...

Page 211: ...d host address It displays as four addresses ranging from 1 to 255 separated by periods iSCSI Internet SCSI iSCSI is a standard that defines the encapsulation of SCSI packets in TCP and then routing it using IP It allows block level storage data to be transported over widely used IP networks Jukebox A robotic tape backup device that stores numerous tape drives and uses a mechanical arm to bring th...

Page 212: ...d NIS users are not considered local MAC Media Access Control In the Open Systems Interconnection OSI model one of two sublayers of the Data Link Control layer Concerned with sharing the physical connection to the network among several computers Each Ethernet port has a unique MAC address Snap Servers with dual Ethernet ports can respond to a request with either port and have two unique MAC addres...

Page 213: ...server by default NIS Network Information Service A network naming and administration system for smaller networks that was developed by Sun Microsystems NIS is a later version that provides additional security and other facilities The Snap Server accepts NIS users and groups node Any device including servers workstations or tape devices that are connected to a network also the point where devices ...

Page 214: ...offers no redundancy and does not accept hot spares If a single disk drive fails every file in the RAID is rendered unavailable RAID 1 Mirrored Stores data on one disk drive and copies it to another drive in the RAID A RAID 1 must contain at least two disk drives one for the data space and one for redundancy Although the data space in a RAID 1 can never be larger than a single drive some administr...

Page 215: ...store a volume to a previous state as archived in a snapshot without resorting to tape SCSI Small Computer System Interface A parallel interface standard used to attach peripheral devices such as robotic libraries to computers serial number The ten character alphanumeric number assigned by the manufacturer at the factory server number A numeric derived from the MAC address of your Snap Server s pr...

Page 216: ...ent of the RAID capacity is allocated to the snapshot pool snapshot share A virtual folder that allows access to all current snapshots at the same directory level as the original share on which it is based SnapTree Directory A directory residing in the root of a volume that is assigned a Windows or UNIX style security model The security model determines the file level security scheme that will app...

Page 217: ...anagement program that an event has occurred U A standard unit of measure for designating the height in computer enclosures and rack cabinets One U equals 1 75 inches For example a 3U server chassis is 5 25 inches high UI User Interface The User Interface is the graphical and textual presentation of the GuardianOS in your web browser UID User IDs A unique ID assigned to each user on a Snap Server ...

Page 218: ...s The domain controller can validate all authentication requests on behalf of other systems in the domain The domain controller can also generate encrypted challenges to test the validity of user credentials Other systems use encrypted challenges to respond to CIFS SMB clients that request access to a share WINS Windows Internet Naming Service The server that locates network resources in a TCP IP ...

Page 219: ...lume deletion 47 dependencies on other software components 110 distributing updates 117 enabling 17 excluding snapshots from 113 HTTP requirement 110 launching configuration GUI 111 scan job configuration 113 using logs 121 APC Brand UPS see UPS Authentication default settings 38 HTTPS HTTP 33 Kerberos 27 local 39 NIS domain 40 UID and GID assignments 38 B Backing up Uncode servers 127 Backup coor...

Page 220: ...cedures 107 Disk drives adding 56 automatic incorporation 44 hot swapping 56 replacing 55 Documents e mail feedback on xiii related to Snap Servers xv E Ethernet see Gigabit Ethernet Expand Volume button 48 Exports file NFS 79 F Factory defaults resetting to 178 Failover see Network bonding Features changes from v3 2 and earlier releases 5 Field Service Documents 159 Files setting permissions for ...

Page 221: ...g configuring server for 23 restrictions on 21 Local hot spares 44 Login to Admin Tool 13 to antivirus GUI 111 M MacintoshOS configuring client access 31 error messages for 181 launching Snap Server Manager on 10 required to run Snap Server Manager 10 supported clients 32 MacOS 129 MacOs 129 MacOSX 125 Multihomed configurations 23 N NetVault backing up nvdb directory 104 restoring nvdb directory 1...

Page 222: ... Monitoring Print Jobs 36 Pausing the Printer 36 Q Quotas assigning and managing 49 backing up configuration 102 R RAID types defined 200 choosing 43 creating monitoring 45 effect of deleting on antivirus software 110 grouping 45 scrubber 45 rejoining servers to a Windows Domain 103 Reset factory defaults 178 Reset Options 178 Restrict_anonymous mechanism 28 S Security local authentication 39 rese...

Page 223: ...ting 159 Typographical Conventions xiv U Unicode 123 127 128 129 AFP protocols 125 Expansion Arrays 129 SMB protocols 125 UNIX 128 UPS 17 Users file level access for 90 quotas for 49 setting share level acess for 89 V Volumes and antivirus software 47 and NetVault database directory 47 as distinct from Macintosh volume 31 assessing status of 76 backing up configuration 101 effect of deleting on an...

Page 224: ...210 Snap Server Administrator Guide ...

Search results

Summary of Contents for 5325301656 - Snap Server 14000 NAS

Reviews:

Related manuals for 5325301656 - Snap Server 14000 NAS

Brands by name

Popular brands

Adaptec 5325301656 - Snap Server 14000 NAS, Administrator'S Manual

Search results

Summary of Contents for 5325301656 - Snap Server 14000 NAS

Reviews:

Related manuals for 5325301656 - Snap Server 14000 NAS

Brands by name

Popular brands