<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:9pt" ><div dir="ltr" ><div>> We were wondering what the group's experiences have been with upgrading<br>> export nodes from 3.5, especially those upgrades that involved a<br>> transition from home-grown ADS domain integration to the new CES<br>> integration piece.<br>><br>> Specifcially, we're interested in:<br>><br>> 1) What changes were necessary to make in your domain to get it to<br>> interoperate with CES?</div>
<div> </div>
<div>I assume that this question relates to authentication with Active<br>Directory domains. Could you share details about the current setup?<br>That would be helpful in determining the options going forward.</div>
<div> </div>
<div>> 2) Any good tips for CES workarounds in the case of domain<br>> configuration that cannot be changed?</div>
<div> </div>
<div>Can you explain in more details what you mean with "cannot be<br>changed"?</div>
<div> </div>
<div>> 3) Experience with CES user-defined auth mode in particular? Has<br>> anyone got this mode to work successfullly?</div>
<div> </div>
<div>"userdefined" authentication means that the CES stack does not manage<br>the authentication related configuration options in the protocol<br>services. It is then up to the administrator to manually manage the<br>configurations. The downside is that this is also stepping outside of<br>the normal support, as we cannot test and validate all possible<br>configuration settings. We recommend to use one of the available CES<br>configuration methods, as those are fully tested and supported.</div>
<div> </div>
<div>My recommendation would be first to understand the existing setup,<br>then try to map that to a supported CES configuration method. If a<br>piece is missing, then it would still make sense to make use of the<br>existing CES methods as much as possible, to stay as close as possible<br>with a supported configuration.</div></div>
<div dir="ltr" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial;font-size:10.5pt" ><div dir="ltr" > </div>
<div dir="ltr" >Regards,</div>
<div dir="ltr" ><br><font size="2" face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" ><font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" >Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ<br>christof.schmitt@us.ibm.com || +1-520-799-2469 (T/L: 321-2469)</font></font></div></div></div>
<div dir="ltr" > </div>
<div dir="ltr" > </div>
<blockquote data-history-content-modified="1" dir="ltr" style="border-left:solid #aaaaaa 2px; margin-left:5px; padding-left:5px; direction:ltr; margin-right:0px" >----- Original message -----<br>From: "Howard, Stewart Jameson" <sjhoward@iu.edu><br>Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>To: "gpfsug-discuss@spectrumscale.org" <gpfsug-discuss@spectrumscale.org><br>Cc:<br>Subject: [gpfsug-discuss] Experiences with Export Node Transition from 3.5 -> 4.x<br>Date: Fri, Apr 6, 2018 8:21 AM<br>
<div><font size="2" face="Default Monospace,Courier New,Courier,monospace" >Hi All,<br><br><br><br>We were wondering what the group's experiences have been with upgrading<br><br>export nodes from 3.5, especially those upgrades that involved a<br><br>transition from home-grown ADS domain integration to the new CES<br><br>integration piece.<br><br><br><br>Specifcially, we're interested in:<br><br><br><br>1) What changes were necessary to make in your domain to get it to<br><br>interoperate with CES?<br><br><br><br>2) Any good tips for CES workarounds in the case of domain<br><br>configuration that cannot be changed?<br><br><br><br>3) Experience with CES user-defined auth mode in particular? Has<br><br>anyone got this mode to work successfullly?<br><br><br><br>Let us know. Thanks!<br><br><br><br>Stewart Howard<br><br>Indiana University<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwIGaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=gK8gMShOTfCp6HLaAO-JwzR5kl9xGbuaSzIIvJgDARA&s=8MoJ8aFltv_Quyv-cbZXWVpHeDE7OOJcWqjz-ufARY8&e=" target="_blank" >https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwIGaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=gK8gMShOTfCp6HLaAO-JwzR5kl9xGbuaSzIIvJgDARA&s=8MoJ8aFltv_Quyv-cbZXWVpHeDE7OOJcWqjz-ufARY8&e=</a></font><br> </div></blockquote>
<div dir="ltr" > </div></div><BR>