Tuesday, March 22, 2011

Celerra datamover group file doc bug

We're testing NFSv4 which requires a user/group database (either local files or LDAP/NIS) on the datamover.

Username/UID mapping was working properly, but group/GID mapping was not.

The Celerra Naming Services (6.0) doc on page 21 lists the format of the group file as:

groupname:gid:user_list

But the proper format includes a field for the group password:

groupname:password:gid:user_list

The password field is often blank (x).

Hope this helps someone else avoid the hassle we ran into.

Monday, March 7, 2011

Celerra top talkers & suspicious ops defined

The EMC Celerra datamovers have the ability to log statistics about top talkers, which can be useful for tracking down problems. We run server_stats with these options to get top talker stats:

/nas/bin/server_stats server_2 -top nfs -i 5 -c 60

One thing worth noting is there's a column labeled "NFS Suspicious Ops". There's no documentation on this column, and it took EMC some time to dig up the answer. Here it is:

SUSPICIOUS EVENTS:
One of the TopTalker output columns lists Suspicious Ops/second.
"Suspicious" events are any of the following, which are typical of the patterns seen when viruses or other badly behaved software/users are attacking a system:

CIFS events:
  • ACCESS_DENIED returned for FindFirst
  • ACCESS_DENIED returned for Open/CreateFile
  • ACCESS_DENIED returned for DeleteFile
  • SUCCESS returned for DeleteFile
  • SUCCESS returned for TruncateFile (size=0)

NFSv2/v3/v4 events:
  • NFSERR_ACCES returned for NFS OPEN/LOOKUP/CREATE/DELETE
  • NFSERR_ACCES returned for READDIR/READDIRPLUS
  • NFS_OK for NFS REMOVE
  • NFS_OK for NFS SETATTR (size=0)