<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">I’ve verified the upgrade has fixed this issue so thanks again.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">However I’ve noticed that stopping SMB doesn’t trigger an IP address failover. I think it should. mmces node suspend (or rebooting,
or mmces address move, or etc..) seems to trigger the failover.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Richard<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> gpfsug-discuss-bounces@spectrumscale.org [mailto:gpfsug-discuss-bounces@spectrumscale.org]
<b>On Behalf Of </b>Danny Alexander Calderon Rodriguez<br>
<b>Sent:</b> 27 August 2016 13:53<br>
<b>To:</b> gpfsug-discuss@spectrumscale.org<br>
<b>Subject:</b> Re: [gpfsug-discuss] Cannot stop SMB... stop NFS first?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi Richard<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This is fixed in release 4.2.1, if you cant upgrade now, you can fix this manuallly <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Just do this.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">edit file /usr/lpp/mmfs/lib/mmcesmon/SMBService.py<br>
<br>
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Change <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"> if authType == 'ad' and not nodeState.nfsStopped:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
to<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
nfsEnabled = utils.isProtocolEnabled("NFS", self.logger)<br>
if authType == 'ad' and not nodeState.nfsStopped and nfsEnabled:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
You need to stop the gpfs service in each node where you apply the change <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">" after change the lines please use tap key"<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Enviado desde mi iPhone<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
El 27/08/2016, a las 6:00 a.m., <a href="mailto:gpfsug-discuss-request@spectrumscale.org">
gpfsug-discuss-request@spectrumscale.org</a> escribió:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Send gpfsug-discuss mailing list submissions to<br>
<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:gpfsug-discuss-request@spectrumscale.org">gpfsug-discuss-request@spectrumscale.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:gpfsug-discuss-owner@spectrumscale.org">gpfsug-discuss-owner@spectrumscale.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of gpfsug-discuss digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. <span style="color:black">Re: Cannot stop SMB... stop NFS first?</span>(Christof Schmitt)<o:p></o:p></p>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"> 2. Re: CES and mmuserauth command (Christof Schmitt)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 26 Aug 2016 12:29:31 -0400<br>
From: "Christof Schmitt" <<a href="mailto:christof.schmitt@us.ibm.com">christof.schmitt@us.ibm.com</a>><br>
To: gpfsug main discussion list <<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>><br>
Subject: Re: [gpfsug-discuss] Cannot stop SMB... stop NFS first?<br>
Message-ID:<br>
<<a href="mailto:OF5D32DCFD.74622168-ON8525801B.0057526F-8525801B.005A97BD@notes.na.collabserv.com">OF5D32DCFD.74622168-ON8525801B.0057526F-8525801B.005A97BD@notes.na.collabserv.com</a>><br>
<br>
Content-Type: text/plain; charset="UTF-8"<br>
<br>
That would be the case when Active Directory is configured for <br>
authentication. In that case the SMB service includes two aspects: One is <br>
the actual SMB file server, and the second one is the service for the <br>
Active Directory integration. Since NFS depends on authentication and id <br>
mapping services, it requires SMB to be running.<br>
<br>
Regards,<br>
<br>
Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ<br>
<a href="mailto:christof.schmitt@us.ibm.com">christof.schmitt@us.ibm.com</a> || +1-520-799-2469 (T/L: 321-2469)<br>
<br>
<br>
<br>
From: "Sobey, Richard A" <<a href="mailto:r.sobey@imperial.ac.uk">r.sobey@imperial.ac.uk</a>><br>
To: "'<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>'"
<br>
<<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>><br>
Date: 08/26/2016 04:48 AM<br>
Subject: [gpfsug-discuss] Cannot stop SMB... stop NFS first?<br>
Sent by: <a href="mailto:gpfsug-discuss-bounces@spectrumscale.org">gpfsug-discuss-bounces@spectrumscale.org</a><br>
<br>
<br>
<br>
Sorry all, prepare for a deluge of emails like this, hopefully it?ll help <br>
other people implementing CES in the future.<br>
<br>
I?m trying to stop SMB on a node, but getting the following output:<br>
<br>
[root@cesnode ~]# mmces service stop smb<br>
smb: Request denied. Please stop NFS first<br>
<br>
[root@cesnode ~]# mmces service list<br>
Enabled services: SMB<br>
SMB is running<br>
<br>
As you can see there is no way to stop NFS when it?s not running but it <br>
seems to be blocking me. It?s happening on all the nodes in the cluster.<br>
<br>
SS version is 4.2.0 running on a fully up to date RHEL 7.1 server.<br>
<br>
Richard_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at <a href="http://spectrumscale.org">spectrumscale.org</a><br>
<a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a><br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 26 Aug 2016 12:29:31 -0400<br>
From: "Christof Schmitt" <<a href="mailto:christof.schmitt@us.ibm.com">christof.schmitt@us.ibm.com</a>><br>
To: gpfsug main discussion list <<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>><br>
Subject: Re: [gpfsug-discuss] CES and mmuserauth command<br>
Message-ID:<br>
<<a href="mailto:OF96C5E3D5.D7802E36-ON8525801B.0057FD62-8525801B.005A980C@notes.na.collabserv.com">OF96C5E3D5.D7802E36-ON8525801B.0057FD62-8525801B.005A980C@notes.na.collabserv.com</a>><br>
<br>
Content-Type: text/plain; charset="ISO-2022-JP"<br>
<br>
The --user-name option applies to both, AD and LDAP authentication. In the <br>
LDAP case, this information is correct. I will try to get some <br>
clarification added for the AD case.<br>
<br>
The same applies to the information shown in "service list". There is a <br>
common field that holds the information and the parameter from the initial <br>
"service create" is stored there. The meaning is different for AD and <br>
LDAP: For LDAP it is the username being used to access the LDAP server, <br>
while in the AD case it was only the user initially used until the machine <br>
account was created.<br>
<br>
Regards,<br>
<br>
Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ<br>
<a href="mailto:christof.schmitt@us.ibm.com">christof.schmitt@us.ibm.com</a> || +1-520-799-2469 (T/L: 321-2469)<br>
<br>
<br>
<br>
From: Jan-Frode Myklebust <<a href="mailto:janfrode@tanso.net">janfrode@tanso.net</a>><br>
To: gpfsug main discussion list <<a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a>><br>
Date: 08/26/2016 05:59 AM<br>
Subject: Re: [gpfsug-discuss] CES and mmuserauth command<br>
Sent by: <a href="mailto:gpfsug-discuss-bounces@spectrumscale.org">gpfsug-discuss-bounces@spectrumscale.org</a><br>
<br>
<br>
<br>
<br>
On Fri, Aug 26, 2016 at 1:49 AM, Christof Schmitt <<br>
<a href="mailto:christof.schmitt@us.ibm.com">christof.schmitt@us.ibm.com</a>> wrote:<br>
<br>
When joinging the AD domain, --user-name, --password and --server are only<br>
used to initially identify and logon to the AD and to create the machine<br>
account for the cluster. Once that is done, that information is no longer<br>
used, and e.g. the account from --user-name could be deleted, the password<br>
changed or the specified DC could be removed from the domain (as long as<br>
other DCs are remaining).<br>
<br>
<br>
That was my initial understanding of the --user-name, but when reading the <br>
man-page I get the impression that it's also used to do connect to AD to <br>
do user and group lookups:<br>
<br>
------------------------------------------------------------------------------------------------------<br>
??user?name userName<br>
Specifies the user name to be used to perform operations<br>
against the authentication server. The specified user<br>
name must have sufficient permissions to read user and<br>
group attributes from the authentication server. <br>
-------------------------------------------------------------------------------------------------------<br>
<br>
Also it's strange that "mmuserauth service list" would list the USER_NAME <br>
if it was only somthing that was used at configuration time..?<br>
<br>
<br>
<br>
-jf_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at <a href="http://spectrumscale.org">spectrumscale.org</a><br>
<a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a><br>
<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at <a href="http://spectrumscale.org">spectrumscale.org</a><br>
<a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a><br>
<br>
<br>
End of gpfsug-discuss Digest, Vol 55, Issue 44<br>
**********************************************<o:p></o:p></p>
</div>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>