Del, Thanks for your clarifications which are perfectly making sense. The way we operate our shop (users are always using the machine's node name as user ID) just made me forget that any admin might be granted authority on some other node, in our case the datamover ...
Cheers. Arnaud -----Original Message----- From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Del Hoobler Sent: Tuesday, September 18, 2018 10:16 PM To: ADSM-L@VM.MARIST.EDU Subject: Re: Netapp snapdiff issues having TSM client on a Linux machine, making use of NFS mounts Hi Arnaud, >> ... there's still the limitation that this GUI will be usable only once logged on the machine hosting the Spectrum Protect client What do you mean by "that machine"? The Backup-Archive client is not in the data path for an NDMP backup or restore. The data path is between the NetApp filer and the server's tape library (or more generally speaking the storage pools). The Backup-Archive client is reading metadata from the server to present information to the end user. This means that the user can log in to any machine (Windows/AIX/Solaris x86) that has a Backup-Archive client. When the user logs into the Spectrum Protect server (at launch of the Backup-Archive client) they are providing an admin id that is not tied to a specific machine. Del ---------------------------------------------------- "ADSM: Dist Stor Manager" <ADSM-L@VM.MARIST.EDU> wrote on 09/18/2018 07:57:56 AM: > From: PAC Brion Arnaud <arnaud.br...@panalpina.com> > To: ADSM-L@VM.MARIST.EDU > Date: 09/18/2018 07:58 AM > Subject: Re: Netapp snapdiff issues having TSM client on a Linux > machine, making use of NFS mounts > Sent by: "ADSM: Dist Stor Manager" <ADSM-L@VM.MARIST.EDU> > > Hi Del, > > Thanks for the information, which I got as well thru other channels > (IBM support), but there's still the limitation that this GUI will > be usable only once logged on the machine hosting the Spectrum Protect client. > This means that I will be forced to grant some of my colleagues > (which were previously doing the restores on their own) specific > logging rights on that machine. Was not the case before ... > > Cheers. > > Arnaud > > -----Original Message----- > From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On > Behalf Of Del Hoobler > Sent: Tuesday, September 18, 2018 12:57 PM > To: ADSM-L@VM.MARIST.EDU > Subject: Re: Netapp snapdiff issues having TSM client on a Linux > machine, making use of NFS mounts > > Hi Arnaud, > > Not related to SnapDiff ... but just some info on NDMP and B/A Client... > > In Spectrum Protect BA client 8.1.6 that GAs this coming Friday (21 > September) you will be able to use the native Java GUI to handle NDMP > backups/restores. > > > Del > > ---------------------------------------------------- > > > > > "ADSM: Dist Stor Manager" <ADSM-L@VM.MARIST.EDU> wrote on 09/18/2018 > 06:20:52 AM: > > > From: PAC Brion Arnaud <arnaud.br...@panalpina.com> > > To: ADSM-L@VM.MARIST.EDU > > Date: 09/18/2018 06:21 AM > > Subject: Netapp snapdiff issues having TSM client on a Linux > > machine, making use of NFS mounts > > Sent by: "ADSM: Dist Stor Manager" <ADSM-L@VM.MARIST.EDU> > > > > Hi All, > > > > Following to IBM's decision to withdraw the web GUI in the latest > > versions of their clients (thus making NDMP hardly usable), as well > > as to the renewal of our NAS infrastructure (now using Netapp), I'm > > trying to implement netapp snapdiffs in our shop. > > > > So far we succeeded in defining necessary user and roles on the > > Netapp, as well as to setup the TSM client in order to interact with > > our filer, but I'm now facing an issue where some files cannot be > > backed up, apparently due to access rights. > > > > Here an extract of our backup log : > > > > IBM Spectrum Protect > > Command Line Backup-Archive Client Interface > > Client Version 8, Release 1, Level 4.0 > > Client date/time: 09/18/2018 10:26:28 > > (c) Copyright by IBM Corporation and other(s) 1990, 2017. All > RightsReserved. > > > > Node Name: NETAPP_CH1_NFS > > Session established with server XXXXXXX: Linux/ppc64le > > Server Version 8, Release 1, Level 4.000 > > Server date/time: 09/18/2018 10:26:28 Last access: 09/18/2018 > 10:00:37 > > > > > > Incremental by snapshot difference of volume '/Airwarder' > > > > Connected to NetApp Storage Virtual Machine > > Management Filer Host/IP Address : XXXXXXXX > > Filer Version Information : NetApp Release 9.3P3: Wed Apr > > 04 13:07:06 UTC 2018 > > Storage VM Name : xxxxxxx > > Storage VM Host/IP Address : XXXXXX > > Storage VM Volume Style : Flex > > Login User : tsm-backup-user > > Transport : HTTPS > > > > Performing a Full Incremental Backup of volume '/Airwarder' > > Using Base Snapshot 'vserverdr.0.7b5a59c4-656c-11e8- > > bb80-00a098d614c2.2018-09-18_102500' with timestamp 09/18/2018 10:25:02 > > ANS4007E Error processing '/Airwarder/.snapshot/vserverdr.0. > > 7b5a59c4-656c-11e8-bb80-00a098d614c2.2018-09-18_102500/ > > acrimport_ref/ch': access to the object is denied > > ANS4007E Error processing '/Airwarder/.snapshot/vserverdr.0. > > 7b5a59c4-656c-11e8-bb80-00a098d614c2.2018-09-18_102500/ > > acrimport_test/ch': access to the object is denied > > ANS1898I ***** Processed 500 files ***** > > Directory--> 4,096 /Airwarder/ [Sent] > > Directory--> 4,096 /Airwarder/.etc [Sent] > > > > (skipped some lines) > > > > ANS1228E Sending of object '/Airwarder/acrimport_ref/config/ > > log4j.conf' failed. > > ANS4007E Error processing '/Airwarder/acrimport_ref/config/ > > log4j.conf': access to the object is denied > > Normal File--> 309 /Airwarder/acrimport_ref/config/ > > sapConnector.cfg ** Unsuccessful ** > > ANS1228E Sending of object '/Airwarder/acrimport_ref/config/ > > sapConnector.cfg' failed. > > ANS4007E Error processing '/Airwarder/acrimport_ref/config/ > > sapConnector.cfg': access to the object is denied > > Normal File--> 330 /Airwarder/acrimport_ref/config/ > > sapConnector.cfg.bak ** Unsuccessful ** > > ANS1228E Sending of object '/Airwarder/acrimport_ref/config/ > > sapConnector.cfg.bak' failed. > > ANS4007E Error processing '/Airwarder/acrimport_ref/config/ > > sapConnector.cfg.bak': access to the object is denied > > > > (skipped some lines) > > > > ANS1802E Incremental backup of '/Airwarder' finished with 90 failure(s) > > > > > > Total number of objects inspected: 5,881 > > Total number of objects backed up: 5,791 > > Total number of objects updated: 0 > > Total number of objects rebound: 0 > > Total number of objects deleted: 0 > > Total number of objects expired: 0 > > Total number of objects failed: 90 > > Total number of objects encrypted: 0 > > Total number of objects grew: 0 > > Total number of retries: 15 > > Total number of bytes inspected: 1.27 GB > > Total number of bytes transferred: 1.37 GB > > Data transfer time: 18.61 sec > > Network data transfer rate: 77,367.92 KB/sec > > Aggregate data transfer rate: 36,807.03 KB/sec > > Objects compressed by: 0% > > Total data reduction ratio: 0.00% > > Elapsed processing time: 00:00:39 > > > > > > Here, a closer look at some of the files making problems : > > > > root@xxxxxx:~ # ls -al > /Airwarder/acrimport_ref/config/sapConnector.cfg.bak > > -rw-r----- 1 root root 330 May 6 2009 /Airwarder/acrimport_ref/ > > config/sapConnector.cfg.bak > > > > > > root@xxxxxx:~ # ls -la /Airwarder/.snapshot/vserverdr.0. > > 7b5a59c4-656c-11e8-bb80-00a098d614c2.2018-09-18_121000/acrimport_ref/ch > > ls: cannot open directory /Airwarder/.snapshot/vserverdr.0. > > 7b5a59c4-656c-11e8-bb80-00a098d614c2.2018-09-18_121000/ > > acrimport_ref/ch: Permission denied > > > > And who I am: > > > > root@xxxxxx:~ # id > > uid=0(root) gid=0(root) groups=0(root) > > > > Any idea on how to solve such issues ? > > > > Cheers. > > > > Arnaud > > > > > ******************************************************************************************************************************** > > Backup and Recovery Systems Administrator > > Panalpina Management Ltd., Basle, Switzerland, > > CIT Department Viadukstrasse 42, P.O. Box 4002 Basel/CH > > Phone: +41 (61) 226 11 11, FAX: +41 (61) 226 17 01 > > Direct: +41 (61) 226 19 78 > > e-mail: arnaud.br...@panalpina.com<mailto:arnaud.br...@panalpina.com> > > This electronic message transmission contains information from > > Panalpina and is confidential or privileged. > > This information is intended only for the person (s) named above. If > > you are not the intended recipient, any disclosure, copying, > > distribution or use or any other action based on the contents of this > > information is strictly prohibited. > > > > If you receive this electronic transmission in error, please notify > > the sender by e-mail, telephone or fax at the numbers listed above. > Thank you. > > > ******************************************************************************************************************************** > > >
