<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta content="text/html; charset=utf-8">
</head>
<body>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Gosh.. Seriously? I need downtime to enable NFS? Can that change in future releases? I have major issues configuring Ad file auth and I would not be confident getting my SMB working again in a timely manner.
<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Thanks for letting me know anyway. <br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Get <a href="https://aka.ms/ghei36">Outlook for Android</a></div>
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> gpfsug-discuss-bounces@spectrumscale.org <gpfsug-discuss-bounces@spectrumscale.org> on behalf of Chetan R Kulkarni <chetkulk@in.ibm.com><br>
<b>Sent:</b> Wednesday, January 24, 2018 9:37:01 AM<br>
<b>To:</b> gpfsug main discussion list<br>
<b>Subject:</b> Re: [gpfsug-discuss] Kerberos NFS</font>
<div> </div>
</div>
<div>
<p><font size="2">Hi,</font><br>
<br>
<font size="2">One can't enable/disable smb/nfs service if file authentication is already configured.</font><br>
<font size="2">Hence, with your already existing config; you can't enable NFS service directly.</font><br>
<font size="2">You need to re-configure file authentication (i.e. remove file auth, enable nfs service; configure file auth).
</font><br>
<br>
<font size="2">May be following sequence of commands will help you.</font><br>
</p>
<ul>
<font size="1" face="Courier">mmuserauth service remove --data-access-method file</font><br>
<font size="1" face="Courier">mmces service enable nfs</font><br>
<font size="1" face="Courier">mmces service list -a # check nfs is enabled and running</font><br>
<font size="1" face="Courier">mmuserauth service create --data-access-method file --type ad ..... # please complete this command as per your set up details (the way you already configured)</font></ul>
<br>
<font size="2">FYI, Enabling NFS service won't affect other services.</font><br>
<br>
<font size="2">Thanks,</font><br>
<font size="2">Chetan.</font><br>
<br>
<img width="16" height="16" src="cid:1__=EABB088CDFA0FACD8f9e8a93df938690918cEAB@" border="0" alt="Inactive hide details for "Sobey, Richard A" ---01/23/2018 04:42:33 PM---Many thanks Chetan. Next question, does enabling the N"><font size="2" color="#424282">"Sobey,
Richard A" ---01/23/2018 04:42:33 PM---Many thanks Chetan. Next question, does enabling the NFS service on CES cause any existing services</font><br>
<br>
<font size="2" color="#5F5F5F">From: </font><font size="2">"Sobey, Richard A" <r.sobey@imperial.ac.uk></font><br>
<font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org></font><br>
<font size="2" color="#5F5F5F">Date: </font><font size="2">01/23/2018 04:42 PM</font><br>
<font size="2" color="#5F5F5F">Subject: </font><font size="2">Re: [gpfsug-discuss] Kerberos NFS</font><br>
<font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br>
<hr width="100%" size="2" align="left" noshade="" style="color:#8091A5">
<br>
<br>
<br>
<font face="Calibri">Many thanks Chetan. Next question, does enabling the NFS service on CES cause any existing services to halt/timeout/fail/stop/go slow/cause an earthquake or is it completely transparent? My existing config is:</font><br>
<font face="Calibri"></font><br>
<font face="Courier New">FILE access configuration : AD</font><br>
<font face="Courier New">PARAMETERS VALUES</font><br>
<font face="Courier New">-------------------------------------------------</font><br>
<font face="Courier New">ENABLE_NFS_KERBEROS true</font><br>
<font face="Courier New">SERVERS server.domain</font><br>
<font face="Courier New">USER_NAME username</font><br>
<font face="Courier New">NETBIOS_NAME store</font><br>
<font face="Courier New">IDMAP_ROLE master</font><br>
<font face="Courier New">IDMAP_RANGE 10000000-299999999</font><br>
<font face="Courier New">IDMAP_RANGE_SIZE 1000000</font><br>
<font face="Courier New">UNIXMAP_DOMAINS DOMAIN(500 - 2000000)</font><br>
<font face="Courier New">LDAPMAP_DOMAINS none</font><br>
<font face="Courier New"></font><br>
<font face="Courier New">OBJECT access not configured</font><br>
<font face="Courier New">PARAMETERS VALUES</font><br>
<font face="Courier New"></font><br>
<font face="Courier New"></font><br>
<font face="Courier New">Enabled services: SMB</font><br>
<font face="Courier New">SMB is running</font><br>
<font face="Calibri"></font><br>
<font face="Calibri">Thanks</font><br>
<font face="Calibri">Richard</font><br>
<font face="Calibri"></font><br>
<b><font face="Calibri">From:</font></b><font face="Calibri"> gpfsug-discuss-bounces@spectrumscale.org [</font><font face="Calibri"><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org">mailto:gpfsug-discuss-bounces@spectrumscale.org</a></font><font face="Calibri">]
</font><b><font face="Calibri">On Behalf Of </font></b><font face="Calibri">Chetan R Kulkarni</font><b><font face="Calibri"><br>
Sent:</font></b><font face="Calibri"> 23 January 2018 09:30</font><b><font face="Calibri"><br>
To:</font></b><font face="Calibri"> gpfsug main discussion list <gpfsug-discuss@spectrumscale.org></font><b><font face="Calibri"><br>
Subject:</font></b><font face="Calibri"> Re: [gpfsug-discuss] Kerberos NFS</font><br>
<font face="Calibri"></font>
<p><font size="2">Hi,</font><br>
<u><font color="#0000FF"><br>
</font></u><a href="https://www.ibm.com/support/knowledgecenter/en/STXKQY/gpfsclustersfaq.html#protoreqs"><u><font size="2" color="#0000FF">https://www.ibm.com/support/knowledgecenter/en/STXKQY/gpfsclustersfaq.html#protoreqs</font></u></a><br>
<font size="2"><br>
Typically it should work on CentOS since we know it works on RHEL.</font><br>
<font size="2"><br>
Thanks,<br>
Chetan.</font><br>
<br>
<img src="cid:1__=EABB088CDFA0FACD8f9e8a93df938690918cEAB@" width="16" height="16" alt="Inactive hide details for "Sobey, Richard A" ---01/18/2018 08:41:06 PM---Quick starter for 10: *should* I be able to create a f"><font size="2" color="#424282">"Sobey, Richard
A" ---01/18/2018 08:41:06 PM---Quick starter for 10: *should* I be able to create a file authentication definition using -enable-nf</font><br>
<font size="2" color="#5F5F5F"><br>
From: </font><font size="2">"Sobey, Richard A" <</font><a href="mailto:r.sobey@imperial.ac.uk"><u><font size="2" color="#0000FF">r.sobey@imperial.ac.uk</font></u></a><font size="2">></font><font size="2" color="#5F5F5F"><br>
To: </font><font size="2">"'gpfsug-discuss@spectrumscale.org'" <</font><a href="mailto:gpfsug-discuss@spectrumscale.org"><u><font size="2" color="#0000FF">gpfsug-discuss@spectrumscale.org</font></u></a><font size="2">></font><font size="2" color="#5F5F5F"><br>
Date: </font><font size="2">01/18/2018 08:41 PM</font><font size="2" color="#5F5F5F"><br>
Subject: </font><font size="2">[gpfsug-discuss] Kerberos NFS</font><font size="2" color="#5F5F5F"><br>
Sent by: </font><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><u><font size="2" color="#0000FF">gpfsug-discuss-bounces@spectrumscale.org</font></u></a><br>
</p>
<hr width="100%" size="2" align="left" noshade="">
<br>
<font face="Calibri"><br>
<br>
<br>
Quick starter for 10: *</font><b><font face="Calibri">should</font></b><font face="Calibri">* I be able to create a file authentication definition using –enable-nfs-kerberos on CentOS 7.4? Or is this strictly for use with real RHEL nodes?<br>
<br>
Using SS 4.2.3 and 5.<br>
<br>
Thanks<br>
Richard</font><font size="2" face="Courier New">_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org</font><u><font size="2" color="#0000FF" face="Courier New"><br>
</font></u><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=srqIkj3LKkatqQqyFKDDC2PliL3RusFC6lXPDz2iT3s&s=dwpAnqcDbbmQd8IY2XJJv0CwNAOurVJqyEyq-8q6akY&e="><u><font size="2" color="#0000FF" face="Courier New">https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=srqIkj3LKkatqQqyFKDDC2PliL3RusFC6lXPDz2iT3s&s=dwpAnqcDbbmQd8IY2XJJv0CwNAOurVJqyEyq-8q6akY&e=</font></u></a><font face="Calibri"><br>
<br>
</font><tt><font size="2">_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org<br>
</font></tt><tt><font size="2"><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=mn6WfAqcjuBRZT4DaqmRBJ7KKacO2ma_baqc0GPm0PU&s=7ItSqugWx9SDxGAB2Odvj6oWUoFCiCzOH7cHdvRszY4&e=">https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=mn6WfAqcjuBRZT4DaqmRBJ7KKacO2ma_baqc0GPm0PU&s=7ItSqugWx9SDxGAB2Odvj6oWUoFCiCzOH7cHdvRszY4&e=</a></font></tt><tt><font size="2"><br>
</font></tt><br>
<br>
<br>
</div>
</body>
</html>