Page 1 administration guide hp StorageWorks NAS 1000s First Edition (April 2003) Part Number: 338724-001 This guide provides information on performing the administrative tasks necessary to manage the HP StorageWorks NAS 1000s server. Overview information as well as procedural instructions are included in this guide.
Page 2 Hewlett-Packard. The information contained in this document is subject to change without notice. Compaq Computer Corporation is a wholly-owned subsidiary of Hewlett-Packard Company. Microsoft®, MS-DOS®, Windows®, and Windows NT® are trademarks of Microsoft Corporation in the U.S. and/or other countries.
Page 3: Table Of Contents
contents Contents About this Guide............. . 11 Overview.
Page 4 Contents Take a Tour ..............24 Rapid Startup Wizard .
Page 5 Contents Restore Defaults ..............48 Volume Settings .
Page 6 Contents Modifying a User Password ............68 Modifying User Properties .
Page 7 Contents UNIX File System Management ..........105 Network File System .
Page 8 Contents Creating and Managing NetWare Users ............138 Adding Local NetWare Users .
Page 9 Contents NAS data copy install wizard............31 Maintenance menu .
Page 10 Contents 53 Share Properties dialog box, NFS Sharing tab..........98 54 Share Properties dialog box, NetWare Sharing tab .
Page 11: About This Guide
about this guide About this Guide This administration guide provides information to help you: Plan your storage configuration About this Guide Set up physical storage Set up virtual storage Manage users and groups Manage folders and shares Manage a UNIX® file system Manage a NetWare file system Remotely access the HP StorageWorks NAS 1000s server About this Guide topics include:...
Page 12: Overview
About this Guide Overview This section covers the following topics: Intended Audience Prerequisites Conventions Intended Audience This book is intended for use by system administrators who are experienced with setting up and managing a network server. Prerequisites Before beginning, make sure you consider the following: Knowledge of Microsoft®...
Page 13: Conventions
About this Guide Conventions Conventions consist of the following: Document Conventions Text Symbols Equipment Symbols Document Conventions The document conventions included in Table 1 apply in most cases. Table 1: Document Conventions Element Convention Cross-reference links Figure 1 Key and field names, menu items, buttons, and Bold dialog box titles File names, application names, and text...
Page 14 About this Guide Any enclosed surface or area of the equipment marked with these symbols indicates the presence of electrical shock hazards. Enclosed area contains no operator serviceable parts. WARNING: To reduce the risk of personal injury from electrical shock hazards, do not open this enclosure.
Page 15: Rack Stability
About this Guide Rack Stability Rack stability protects personal and equipment. WARNING: To reduce the risk of personal injury or damage to the equipment, be sure that: The leveling jacks are extended to the floor. The full weight of the rack rests on the leveling jacks. In single rack installations, the stabilizing feet are attached to the rack.
Page 16: Hp Storage Website
About this Guide HP Storage Website The HP website has the latest information on this product, as well as the latest drivers. Access storage at: http://www.hp.com.. From this website, select the appropriate product or solution. HP Authorized Reseller For the name of your nearest HP authorized reseller: In the United States, call 1-800-345-1518 In Canada, call 1-800-263-5868 Elsewhere, see the HP website for locations and telephone numbers: http://www.hp.com.
Page 17: System Overview
System Overview The HP StorageWorks NAS 1000s server can be used in many types of computing environments, from basic Microsoft Windows workgroups to complicated multiprotocol domains using CIFS, NFS, NCP, AppleTalk, FTP, and HTTP. The corresponding varieties of clients that can be serviced include any Windows, UNIX, Linux, Novell, or Macintosh variant. This chapter provides an overview of these environments and deployments and includes brief descriptions of system user interfaces, applications, and options.
Page 18: Product Definition And Information
System Overview Product Definition and Information The NAS 1000s is a business class NAS solution that provides reliable performance, manageability, and fault tolerance. Server Hardware Features The following features are included in the NAS 1000s Model 1 server: Intel Pentium 4 2.4 GHz processor 512-MB 200 MHz PC2100 DDR SDRAM memory 64-bit PCI-X slot 64-bit PCI slot...
Page 19: Optional Features
System Overview Optional Features The following features are optional for the NAS 1000s server: Additional memory Network interface cards (NICs) Tape drive SAN Fibre Channel Adapter for tape backup Software Features Advanced features included and supported by the NAS 1000s include: Microsoft Services for Macintosh Microsoft Services for NetWare Microsoft Services for UNIX (SFU)
Page 20: Product Manageability
System Overview Product Manageability The NAS 1000s ships with the following utilities and features that ease the administration tasks associated with managing the system: The Rapid Startup Utility is a user friendly configuration utility that ensures easy configuration. The WebUI is a simple, graphical user interface (GUI) that helps with administration tasks.
Page 21: Deployment Scenarios
System Overview Deployment Scenarios The default shipping configuration contains two 10/100/1000 integrated network interface controller (NIC) ports for client data access. These data ports also allow access to the Web user interface (WebUI) that accompanies the product. It is from the WebUI that most management and administrative procedures can be accomplished.
Page 22: Environment Scenarios
System Overview Environment Scenarios The NAS 1000s is deployed into one of two modes: Workgroup Domain (Windows NT Domain or Active Directory Domain) The NAS 1000s uses standard Windows user and group administration methods in each of these environments. For procedural instructions on managing users and groups, see Chapter 4, User and Group Management, of this guide.
Page 23: User Interfaces
System Overview User Interfaces There are several user interfaces that administrators can use to access and manage the NAS 1000s. Two of these interfaces are: NAS 1000s WebUI NAS 1000s Console Each interface contains the same or similar capabilities, but presents them in a different manner.
Page 24: Network
System Overview Network The Network option contains system settings, including system identification, global settings, interfaces settings, administration settings, Telnet settings, and SNMP settings. Disks Use this option to manage disks, volumes, and disk quotas, and snapshots. Users When deployed, the administrator uses this option to manage local users and groups. Local users and groups are discussed in Chapter 4, User and Group Management.
Page 25: Nas 1000S Desktop
System Overview NAS 1000s Console The NAS 1000s Console can be accessed by: Directly connecting a keyboard and mouse Using the WebUI Maintenance tab and selecting Terminal Services Note: When using Terminal Services to connect to the NAS 1000s Console do not use the window close feature ( ).
Page 26: Nas Management Console
System Overview NAS Management Console Click this icon to access the following folders: Core Operating System is used to manage local users and groups, access performance logs and alerts, and manage the event viewer. Disk System contains access to local disk management, including a volume list and a graphical view of the disks.
Page 27: Setup Completion And Basic Administrative Procedures
Setup Completion and Basic Administrative Procedures This chapter continues the process of setting up the system that was started using the HP StorageWorks NAS 1000s Quick Start Guide by discussing additional setup procedures and options. Basic system administration functions are also included in this chapter. Unless otherwise instructed, all procedures are performed using the NAS Web Based User Interface (WebUI).
Page 28: Setup Completion
Setup Completion and Basic Administrative Procedures Setup Completion After the NAS device is physically set up and the basic configuration is established, additional setup steps must be completed. Depending on the deployment scenario of the NAS device, these steps may vary. Additional setup steps may include: Managing system storage Creating and managing users and groups...
Page 29: Creating And Managing File Shares
Setup Completion and Basic Administrative Procedures Creating and Managing File Shares Files shares must be set up, granting and controlling file access to users and groups. See Chapter 5, Folder and Share Management for complete information on managing file shares. The following information is included: Folder Management —...
Page 30: Installing And Configuring Data Replication Software
Setup Completion and Basic Administrative Procedures Installing and Configuring Data Replication Software Data replication is the process of making a copy of system data. StorageWorks NAS Data Copy is a real time data replication and failover software product that augments existing data protection and tape backup strategies.
Page 31: Nas Data Copy Install Wizard
Setup Completion and Basic Administrative Procedures To download and install a free 30-day trial version of Data Copy: www.hp.com go to 1. select storage 2. select network attached storage from the networked storage options. 3. select the NAS 1000s 4. select software and drivers 5.
Page 32: Basic Administrative Procedures
Setup Completion and Basic Administrative Procedures Basic Administrative Procedures Basic administrative procedures include: Setting the system date and time Shutting down or restarting the server Viewing and maintaining audit logs Using Terminal Services Setting up email alerts Updating the software Changing system network settings These functions are performed in the Maintenance menu of the WebUI.
Page 33: Setting The System Date And Time
Setup Completion and Basic Administrative Procedures Setting the System Date and Time To change the system date or time: 1. From the WebUI, select Maintenance and Date/Time. The Date and Time Settings dialog box is displayed. 2. Enter the new values and then click OK. The Maintenance menu is displayed. Figure 5: Date and Time dialog box NAS 1000s Administration Guide...
Page 34: Shutting Down Or Restarting The Server
Setup Completion and Basic Administrative Procedures Shutting Down or Restarting the Server Caution: Notify users before powering down the system. Both UNIX and Windows NT users can be drastically affected if they are not prepared for a system power-down. 1. From the NAS 1000s WebUI, select Maintenance, Shutdown. Several options are displayed: Restart, Shut Down, and Scheduled Shutdown.
Page 35: Viewing And Maintaining Audit Logs
Setup Completion and Basic Administrative Procedures Viewing and Maintaining Audit Logs A variety of audit logs are provided on the NAS 1000s. System events are grouped into similar categories, representing the seven different logs. To access the logs from the WebUI, select Maintenance, Logs. The Logs menu is displayed. Figure 7: Logs menu A variety of logs are available and are listed in Figure...
Page 36: Using Terminal Services
Setup Completion and Basic Administrative Procedures Using Terminal Services Terminal Services is provided in the WebUI to allow for additional remote system administration and the use of approved third-party applications. Backup software and antivirus programs are examples of approved applications. In addition, Terminal Services is used to access the NAS Management Console of the NAS device.
Page 37: Updating The Software
Setup Completion and Basic Administrative Procedures Updating the Software To update the software, click on Software Update from the Maintenance menu. The Software Update Wizard will guide you through selecting, verifying, and updating the desired software. Changing System Network Settings Network properties are entered and managed from the Network menu.
Page 38 Setup Completion and Basic Administrative Procedures NAS 1000s Administration Guide...
Page 39: Persistent Storage Manager
Persistent Storage Manager Persistent Storage Manager lets the administrator make replicas, called snapshots, of disks in a matter of seconds. Snapshots enable the creation of multipurpose virtual replicas of production data without having to physically copy the data. They can be used to immediately recover a lost file or directory, to test a new application with realistic data without affecting the "real"...
Page 40: Reading Snapshots
Persistent Storage Manager Reading Snapshots Users who have been granted access by the NAS Administrator see snapshots as network shares. A snapshot is a representation of the NAS volume at the time it was created. During the copy-on-write operation, the data to be overwritten is preserved in the PSM Diff Directory. When reading a snapshot, PSM determines if the data has changed, meaning it is located in the Diff Directory, or if it is on the live volume.
Page 41: Always Keep
Persistent Storage Manager Other applications for READ/WRITE snapshots: CFOs and auditors can run trial balances to accounting systems without affecting the actual systems. Prototyping, a new version of a program, can be installed in a READ/WRITE snapshot and its compatibility within the system tested with no adverse effects to the primary system.
Page 42: Psm And Backup
Persistent Storage Manager Note: Defragmentation can not be performed if snapshots exist. To defragment a disk, first delete the snapshots. Drive defragmentation only operates on volumes formatted with a 4 KB or smaller allocation size. HP recommends larger allocation cluster sizes to improve performance. PSM and Backup Because snapshots are quick to create, it is possible to capture a coherent view of the volume data with little or no application downtime.
Page 43: Snapshots Performance Impact
Persistent Storage Manager For restore: Delete all active snapshots as the restore will cause the cache file to grow. Select only the files representing the data of the volume and not the *.psm files. Be sure to restore to the root of the target volume. Restoration of operating system partitions does not restore the registry hive.
Page 44: Granule Size Update Utility
Persistent Storage Manager Granule Size Update Utility PSM ships with a utility for adjusting the Granule size of the snapshots. Granules determine the largest cache size that can be managed by PSM. The default setting in the PSM product that ships on the NAS 1000s is 64 K. This setting will allow for up to 1 TB of data to be written to the cache file.
Page 45: Clearing The Cache File From The System
Persistent Storage Manager When changing to a larger granule for systems, thus allowing for larger cache file sizes and accommodating larger amounts of storage, users should lower their percentage of volume space for the cache file. For example, if the percent is 30 and the supported amount of space in the system is 20 TB, then the cache file limit of 4 TB would get exceeded.
Page 46: Persistent Storage Manager Storage Limitations
Persistent Storage Manager Persistent Storage Manager Storage Limitations The version of PSM included in the NAS 1000s is currently designed to work with 10 TB of storage with the ability to take 250 snapshots The NAS 1000s is capable of addressing 1TB using the fully populated system and 250 GB Drives.
Page 47: Global Settings
Persistent Storage Manager Global Settings From the Global Settings screen you can control the overall environmental settings for Persistent Storage Manager. Some options will be disabled if there are already active snapshots. Figure 11: Global settings Maximum Persistent Images This option determines the maximum number of active Persistent Images (snapshots). PSM will support a maximum of 250 snapshots per server.
Page 48: Inactive Time-Out
Persistent Storage Manager Inactive time-out This option specifies how long the server should try to create a snapshot. A snapshot will not begin until a period of relative inactivity set by the Inactive period has passed. If an interval passes that is longer than the Inactive time-out period, the snapshot will not be created and a notice generated to the system event log.
Page 49: Size
Persistent Storage Manager Size This column displays the size of the volume. Free Space This column displays the available storage size of the volume. Cache Size This column specifies the amount of space allocated to the cache file. Increasing this value will allow more and larger snapshots to be maintained.
Page 50: Warning Threshold Reached When
Persistent Storage Manager Note: Changing the values for the cache size can result in cache files that exceed the maximum cache file based on the current granule size. If the limit is exceeded "out of memory" notices appear in the event log and the WebUI status page when the first snapshot utilizing that cache file is taken. The snapshot will fail to create but the cache file is built regardless.
Page 51: Create A New Schedule
Persistent Storage Manager Each scheduled snapshot contains information such as its scheduled time, day, frequency, starting date, and group name. Schedules screen allows you to create new schedules, delete existing schedules, and edit schedule properties. Create a New Schedule Figure 15: Create Persistent Image Schedule To create a new schedule, you must supply a starting time, repeat period, starting day, volume, and the number of snapshots to make available to users.
Page 52: Editing Persistent Image Schedule Properties
Persistent Storage Manager Editing Persistent Image Schedule Properties Figure 16: Edit schedule properties To edit persistent image schedule properties: 1. Select Schedules from the PSM Main screen. 2. In the Tasks list, select Properties. 3. Select the changes you want to make to the schedule. 4.
Page 53: Deleting A Persistent Image Schedule
Persistent Storage Manager Deleting a Persistent Image Schedule Figure 17: Delete scheduled images To delete a persistent image schedule: 1. Select Schedules from the PSM Main screen. 2. Select the schedule you want to delete. 3. In the Tasks list, select Delete. 4.
Page 54: Persistent Image And Group Information
Persistent Storage Manager Persistent Image and Group Information Figure 18: Persistent Image and Group Information After a snapshot is created from the schedule you specify, it becomes a member of an image group. The Persistent Image and Group Information page can be accessed by selecting the desired snapshot and clicking Details on the Persistent Images to Restore screen.
Page 55: Retention Weight
Persistent Storage Manager Retention weight This field displays the relative retention weight of the image. Most recent image in group This field displays the date and time of the image most recently added to the group. Oldest image in group This field displays the chronologically oldest image in the group.
Page 56: Creating A New Persistent Image
Persistent Storage Manager 3. Choose one of the following tasks: a. Choose New to create a new snapshot. b. Choose Properties to view or change the image read/write attribute or retention weight. c. Choose Delete to delete the image from the system. d.
Page 57: Deleting A Persistent Image
Persistent Storage Manager Deleting a Persistent Image Figure 21: Delete Verification To delete a persistent image: 1. From the PSM Main screen select Persistent Images. 2. Select the snapshot you want to delete. 3. In the Tasks list, choose Delete. 4.
Page 58: Editing Persistent Image Properties
Persistent Storage Manager Editing Persistent Image Properties Figure 22: Edit Persistent Image Properties You can change properties such as the read-only attribute or preservation weight of an image. To edit persistent image properties: 1. From the PSM Main screen select Persistent Images. 2.
Page 59: Undo Persistent Image Changes
Persistent Storage Manager Undo Persistent Image Changes Figure 23: Undo Image Changes After you create a read/write snapshot, you can make changes to the image, for example, you can modify files in the image, add new files, or delete existing files. If you make a change to an existing image and later want to revert to the original file contents, you can use the following procedure to restore the original snapshot.
Page 60: Restoring An Image
Persistent Storage Manager Restoring an Image Figure 24: Images available to restore The Persistent Images to Restore page displays a list of all snapshots. You can choose to view an image or restore your server appliance to an image you have previously created. To restore a snapshot: 1.
Page 61: Restore Confirmation Screen
Persistent Storage Manager Figure 25: Restore confirmation screen 4. After selecting Restore the Are you sure screen will appear. 5. Choose OK. Note: PSM will not allow the restoration of the system partition from a snapshot. No error is issued, it simply will not revert the volume.
Page 62: Known Issues
Persistent Storage Manager Known Issues These were the known issues at time of publication. Please refer to the release notes for the NAS 1000s for updated information regarding known issues. Event log error at cache full The eventlog error a driver below this one has failed in some way may occur when the cached file is full.
Page 63: User And Group Management
User and Group Management The HP StorageWorks NAS 1000s supports a variety of file sharing protocols for file access over a network, including: Common Internet File System (CIFS) Network File System (NFS) Novell Core Protocol (NCP) AppleTalk (AFP) Access to shares requires a network logon (username and password). It follows that a fundamental part of managing shares involves managing the users and groups that have access.
Page 64: Domain Compared To Workgroup Environments
User and Group Management Domain Compared to Workgroup Environments NAS 1000s devices can be deployed in workgroup or domain environments. When in a domain environment, the server is a member of the domain. The domain controller is a repository of accounts and account access for the NAS 1000s. Client machines are also members of the domain, and users log on to the domain through their Windows clients.
Page 65: Managing User Names
User and Group Management Managing User Names Usernames should reflect a logical relationship between the username and the person who uses the account. It is important that rules are established to ensure that usernames are: Systematic Easy to follow and implement Easy to remember Using a combination of the user's first name, middle initial, and last name results in systematic usernames for every member of a particular organization.
Page 66: Workgroup User And Group Management
User and Group Management Workgroup User and Group Management In a workgroup environment, users and groups are managed through the WebUI of the NAS 1000s. Within the Users option, there are two choices: Managing local users Managing local groups User and group administrative tasks include adding, deleting, and modifying user and group information.
Page 67: Adding A New User
User and Group Management Existing user records can be retrieved in one of two ways: By entering the user's User Name or Full Name in the Search fields to retrieve a specific user record. To redisplay the complete user list, space out the Search field. By selecting the user from the list of displayed users in the dialog box.
Page 68: Modifying A User Password
User and Group Management Modifying a User Password Follow these steps to modify a user password: 1. In the Local Users dialog box, select the user whose password needs to be changed. Then, click Set a Password. The Set Password dialog box is displayed. 2.
Page 69: Managing Local Groups
User and Group Management Managing Local Groups Managing groups includes the following tasks: Adding a new group Deleting a group Modifying group properties, including user memberships Local groups in a workgroup environment are managed through the Users option in the WebUI.
Page 70: Adding A New Group
User and Group Management Adding a New Group To add a group: 1. In the Local Groups dialog box, click New. The Create New Group dialog box is displayed. Figure 30: Create New Group dialog box, General tab 2. Enter the group name and description. 3.
Page 71: Modifying Group Properties
User and Group Management Modifying Group Properties To modify other group properties: 1. From the Local Groups dialog box, select the desired group and then click Properties. The Properties dialog box is displayed. Figure 31: Group Properties dialog box, General tab Within the Properties dialog box are two tabs: General tab Members tab...
Page 72: Drive Quotas
User and Group Management To remove an existing local user from a group, select the desired user from the Members box, and then click the Remove button. To add user or group from a domain to this group, the scroll bar at the right of the screen may need to be used to scroll up the screen display.
Page 73: Disk Quota Dialog Box
User and Group Management Quota management tasks are performed from the Disks, Disk Quota selection from the WebUI menu. Figure 33 is an illustration of the disk quota dialog box. Note: If the volume is not formatted with the NTFS file system, or if you are not a member of the administrators group, the Disk Quota option is not displayed (not accessible).
Page 74: Enabling And Disabling Quota Management
User and Group Management Enabling and Disabling Quota Management To enable drive quotas: 1. From the WebUI, select Disks, Disk Quota. From the Volumes and Quotas dialog box, select a volume, and then click Quota. The Default Quota dialog box for the specified volume is displayed.
Page 75: Creating New Quota Entries For A User Or Group
User and Group Management Creating New Quota Entries for a User or Group To create new quotas for a user or group: 1. From the WebUI, select Disks, Disk Quotas. In the Volumes and Quotas dialog box, select a volume and then click Quota Entries. The Quota Entries dialog box is displayed.
Page 76: Deleting Quota Entries For A User Or Group
User and Group Management Figure 36: New Quota Entry dialog box 3. Indicate the user that the quota is for. For local users and groups, select the desired user from the Select a local user box. For users on the domain, enter the user's domain account name in the indicated box.
Page 77: Quota Entry Dialog Box For A User
User and Group Management Figure 37: Quota Entry dialog box for a user 3. Enter the new disk limit information, and then click OK. The Quota Entries dialog box is displayed again. NAS 1000s Administration Guide...
Page 78 User and Group Management NAS 1000s Administration Guide...
Page 79: Folder And Share Management
Folder and Share Management The HP StorageWorks NAS 1000s supports several file sharing protocols, including CIFS, NFS, FTP, HTTP, NCP, and AFP (AppleTalk). This chapter discusses overview information as well as procedural instructions for the setup and management of the file shares for the supported protocols.
Page 80: Folder Management
Folder and Share Management — Managing Shares > Creating a new share > Deleting a share > Modifying share properties > CIFS sharing > NFS sharing > FTP sharing > Web sharing (HTTP) > Netware sharing (NCP) > AFP (AppleTalk) sharing >...
Page 81: Navigating To A Specific Volume Or Folder
Folder and Share Management Navigating to a Specific Volume or Folder When you work with volumes and folders, the first task is to gain access to the desired volume or folder. The steps are the same, whether navigating to a volume or a folder: 1.
Page 82: Creating A New Folder
Folder and Share Management Figure 39: Folders dialog box After accessing the desired folder, the following actions can be performed: Creating a new folder Deleting a folder Modifying folder properties Creating a new share for the volume or folder Managing shares for the volume or folder Creating a New Folder To create a new folder: 1.
Page 83: Deleting A Folder
Folder and Share Management Figure 40: Create a New Folder dialog box, General tab 3. In the Compress tab, indicate whether and how this folder and its contents are to be compressed. 4. After all information for the new folder is entered, click OK. Deleting a Folder To delete a folder: 1.
Page 84: Creating A New Share For A Volume Or Folder
Folder and Share Management Figure 41: Folder Properties dialog box, General tab 2. In the General tab, enter the new information for the folder, which may include: Folder Name Folder Attributes 3. In the Compress tab, indicate whether and how this folder and its contents are to be compressed.
Page 85: Managing Shares For A Volume Or Folder
Folder and Share Management Figure 42: Create New Share dialog box, General tab 2. Enter the information for the share, including the name of the share, the allowed protocols, and corresponding permissions. Note: The Share path is the path of the previously selected volume or folder. This field is automatically completed by the system.
Page 86: Managing File Level Permissions
Folder and Share Management To create, delete, and manage shares for a particular volume or folder while in the Folders menu: 1. From the Folders directory, navigate to the target volume or folder and click Manage Shares. The Shared Folders dialog box is displayed. All associated shares for that folder or volume are listed.
Page 87: Security Properties Dialog Box For Folder Name Ntsf Test
Folder and Share Management Figure 43: Security Properties dialog box for folder name NTSF Test Several options are available in the Security tab dialog box: To add users and groups to the permissions list, click Add. Then follow the dialog box instructions.
Page 88: Access Control Settings Dialog Box For Folder Name Ntsf Test, Permissions Tab
Folder and Share Management Figure 44: Access Control Settings dialog box for folder name NTSF Test, Permissions tab To modify specific permissions assigned to a particular user or group for a selected file or folder in the Advanced screen: 1. Select the desired user or group. 2.
Page 89: Access Control Settings, Auditing Tab Dialog Box For Folder Name Ntsf Test
Folder and Share Management Other functionality available in the Advanced Access Control Permissions tab is illustrated Figure 45 and includes: Add a new user or group. Click Add, and then follow the dialog box instructions. Remove a user or group. Click Remove. Inherit permissions from the parent folder.
Page 90: Select User, Computer, Or Group Dialog Box
Folder and Share Management Figure 47: Select User, Computer, or Group dialog box 6. Click OK. Figure 48 illustrates the Auditing Entry screen that is displayed. Figure 48: Auditing Entry dialog box for folder name NTSF Test 7. Select the desired Successful and Failed audits for the user or group as shown in Figure 8.
Page 91: Access Control Settings, Owner Tab Dialog Box For Folder Name Ntsf Test
Folder and Share Management The final tab in the advanced Advanced Access Control Settings security configuration is the Owner tab. This tab allows for taking ownership of files. Typically, administrators use this area to take ownership of files when the file ACL is incomplete or corrupt. By taking ownership, you gain access to the files and then manually apply the appropriate security configurations.
Page 92: Share Management
Folder and Share Management Share Management There are several ways to set up and manage shares. The WebUI provides screens for setting up and managing shares. Additional methods include using a command line interface, Windows Explorer, or NAS Management Console. This guide demonstrates using the WebUI to set up and manage shares.
Page 93: Integrating Local File System Security Into Windows Domain Environments
Folder and Share Management Integrating Local File System Security into Windows Domain Environments ACLs include properties specific to users and groups from a particular workgroup server or domain environment. In a multidomain environment, user and group permissions from several domains can apply to files stored on the same device. Users and groups local to the NAS 1000s can be given access permissions to shares managed by the device.
Page 94: Managing Shares
Folder and Share Management NFS service does not support spaces in the names for NFS file shares. NFS translates any spaces in an export into an underscore character. Additional translations can be set up for files. See the "OEM Supplemental Help" chapter of the SFU help, found on the NAS 1000s.
Page 95: Deleting A Share
Folder and Share Management Figure 50: Create a New Share dialog box, General tab 2. Enter the following information: Share name Share path Client protocol types To create a folder for the new share, check the indicated box and the system will create the folder at the same time it creates the share.
Page 96: Modifying Share Properties
Folder and Share Management Modifying Share Properties To change share settings: 1. From the Shares menu, select the share to modify and then click Properties. The General tab of the Share Properties dialog box is displayed. Figure 51: Share Properties dialog box, General tab The name and path of the selected share is displayed.
Page 97: Share Properties Dialog Box, Cifs Sharing Tab
Folder and Share Management Select one of the following caching policies: Manual Caching for Documents—The default setting. Recommended for folders containing user documents. Users must manually specify any files that they want available when working offline. To ensure proper file sharing, the server version of the file is always open.
Page 98: Nfs Sharing
Folder and Share Management NFS Sharing From the NFS Sharing tab of the Create a New Share dialog box: 1. Indicate the machines that will have access to this share. Select the machine to include in the Select a client or client group box or manually enter the NFS client computer name or IP address.
Page 99: Netware Sharing (Ncp)
Folder and Share Management NetWare Sharing (NCP) Note: NCP shares can be set up only after Microsoft Services for NetWare (SFN) has been installed on the NAS 1000s. Procedures for installing SFN are included in Chapter 7, NetWare File System Management.
Page 100: Afp (Appletalk) Sharing
Folder and Share Management AFP (AppleTalk) Sharing AppleTalk shares can be set up only after Service for AppleTalk and Microsoft Windows NT Services for Macintosh have been installed on the NAS 1000s. Installing Services for AppleTalk To install Services for AppleTalk: 1.
Page 101: Protocol Parameter Settings
Folder and Share Management To set up AppleTalk shares, from the AppleTalk Sharing tab of the Create a New Share dialog box: 1. Enter a user limit. 2. Enter password information. 3. Indicate whether the share has read only permission or read write permission. 4.
Page 102: Cifs Protocol Settings
Folder and Share Management 2. Protocols and their statuses are listed. The following options are available: Enabling a protocol Disabling a protocol Modifying Protocol Settings Because enabling and disabling a protocol are self explanatory, only modifying protocol specific settings is described in this section. CIFS Protocol Settings There are no user configurable settings for CIFS.
Page 103: Afp (Appletalk) Protocol Settings
Folder and Share Management AFP (AppleTalk) Protocol Settings Several parameters can be set for AFP shares, including: Welcome message Security settings Limits on number of sessions NAS 1000s Administration Guide...
Page 104 Folder and Share Management NAS 1000s Administration Guide...
Page 105: Nas 1000S Administration Guide
UNIX File System Management Microsoft Services for UNIX (SFU) is a comprehensive software package designed to provide complete UNIX environment integration into a Windows NT, Windows 2000, or Active Directory domain file server. SFU manages tasks on both Windows and UNIX platforms. Tasks include creating NFS exports from Windows and administering user name mappings.
Page 106: Network File System
UNIX File System Management NFS File Sharing Tests Terminal Services, Telnet Service, and Remote Shell Service — Using Terminal Services — Using Telnet Service — Using Remote Shell Service Password Synchronization Network File System Network File System (NFS) is a networking protocol for exporting UNIX file systems across a network.
Page 107: Authenticating User Access
UNIX File System Management Authenticating User Access NFS export access is granted or denied to clients based on client name or IP address. The server determines whether a specific client machine has access to an NFS export. No user logon to the NFS server takes place when a file system is exported by the NFS server. Permission to read or write to the export is granted to specific client machines.
Page 108: Logging Events
UNIX File System Management Note: If a machine other than the localhost is to be used, make sure that the user name mapping service is installed and running on that machine. Figure 57: NAS Management Console Server for NFS screen, User Mapping tab Logging Events Various levels of auditing are available.
Page 109: Controllers
UNIX File System Management Installing NFS Authentication Software on the Domain Controllers and Active Directory Domain Controllers The NFS Authentication software must be installed on all Primary Domain Controllers (PDCs) and backup domain controllers (BDCs) that have Windows users mapped to UNIX users.
Page 110: Nfs File Shares
UNIX File System Management NFS File Shares NFS file shares are created in the same manner as other file shares, however there are some unique settings. Procedures for creating and managing NFS file shares are documented in the same sections as creating file shares for other protocols. See the "Folder and Share Management"...
Page 111: Deleting A Share
UNIX File System Management Note: Uncheck the Microsoft Windows (CIFS) option if you do not want to allow CIFS access to the share. Note: NFS service does not support the use of spaces in the names for NFS file shares. NFS translates any spaces in an export into an underscore character.
Page 112: Nfs Sharing Tab
UNIX File System Management Figure 60: Share Properties dialog box, General tab The name and path of the selected share is displayed. 2. To enter or change client protocol information, check the UNIX (NFS) client type box and then click the NFS Sharing tab. Figure 61: NFS Sharing tab NAS 1000s Administration Guide...
Page 113: Encoding Types
UNIX File System Management 3. From the NFS Sharing tab of the Share Properties dialog box, a. Indicate the allowed clients. Select the machine to include in the Select a client or client group box or manually enter the NFS client computer name or IP address. Then click Add. b.
Page 114: Nfs Protocol Properties Settings
UNIX File System Management Japanese: SHIFT-JIS Korean: KS C 5601-1987 Simplified Chinese: GB Traditional Chinese: BIG5 NFS Protocol Properties Settings Parameter settings for the NFS protocol are entered and maintained through the WebUI in the NFS Properties dialog box. To access the NFS Properties dialog box, select Shares, Sharing Protocols.
Page 115: Nfs Async/Sync Settings
UNIX File System Management NFS Async/Sync Settings As mentioned in a previous section, there are two versions of NFS: Version 2 and Version 3. Version 3 supports additional file operations that Version 2 did not have, such as asynchronous file operations. To indicate whether to use asynchronous or synchronous write settings: 1.
Page 116: Nfs Locks Dialog Box
UNIX File System Management To enter locking parameters: 1. From the WebUI, access the NFS Protocol Properties menu by selecting Shares, Sharing Protocols. Select NFS Protocol and then click Properties. The NFS Properties menu is displayed. 2. In the NFS Properties menu, select Locks. The NFS Locks dialog box is displayed. Figure 64 is an illustration of the NFS Locks dialog box.
Page 117: Nfs Client Groups
UNIX File System Management NFS Client Groups The Client Groups feature gives administrators a method of assigning access permissions to a set of clients. The administrator creates a client group, gives it a name, and then inserts clients into the group by client name or IP address. After the client group is created, the administrator adds or removes permissions for the entire group, instead of allowing or denying access for each individual client machine.
Page 118: Adding A New Client Group
UNIX File System Management Adding a New Client Group To add a new client group: 1. From the NFS Client Groups dialog box, click New. The New NFS Client Group dialog box is displayed. Figure 66: New NFS Client Group dialog box 2.
Page 119: Editing Client Group Information
UNIX File System Management Figure 67: Client Groups dialog box Editing Client Group Information To modify the members of an existing client group: 1. From the NFS Client Groups dialog box, select the group to modify, and click Edit. The Edit NFS Client Group dialog box is displayed. Current members of the group are listed in the Members box.
Page 120: Nfs User And Group Mappings
UNIX File System Management NFS User and Group Mappings When a fileserver exports files within a homogeneous environment, there are no problems with authentication. It is a simple matter of making a direct comparison to determine whether the user should be allowed access to the file, and what level of access to allow. However, when a fileserver works in a heterogeneous environment, some method of translating user access is required.
Page 121: Squashed Mappings
UNIX File System Management Squashed Mappings If the NFS server does not have a corresponding UID or GID or if the administrator has set other conditions to filter out the user, a process called squashing takes effect. Squashing is the conversion of an unmapped or filtered user to an anonymous user.
Page 122: Creating And Managing User And Group Mappings
UNIX File System Management Example using User1 and Group1: — Make sure that the Windows User1 is mapped to the corresponding UNIX User1. — Make sure that the Windows Group1 is mapped to the corresponding UNIX Group1. — Make sure that User1 is a member of Group1 on both Windows and UNIX. Map properly —...
Page 123: Simple Mapping
UNIX File System Management Figure 70: User and Group Mappings dialog box, General tab From the General tab of the User and Group Mappings dialog box: 1. If an NIS server is being used: a. Select Use NIS server. b. Enter the NIS domain name. c.
Page 124: Explicit User Mapping
UNIX File System Management Figure 71: User and Group Mappings dialog box, Simple Mapping tab Explicit User Mapping Explicit mappings allow the administrator to map any user or group manually to any other user and group. Advanced mappings override simple mappings, giving administrators the capability of using simple mapping for most users and then using advanced mappings for the users with unique names on the different systems.
Page 125: Explicit Group Mapping
UNIX File System Management Figure 72: User and Group Mappings dialog box, Explicit User Mapping tab To create explicit user mappings: 1. Click the List UNIX Users button to populate the UNIX users box. 2. To map a local Windows user to a UNIX user, highlight the Windows user in the Windows local users box and highlight the UNIX user that you want to map, and then click Add.
Page 126: Backing Up And Restoring Mappings
UNIX File System Management Figure 73: User and Group Mappings dialog box, Explicit Group Mapping tab To create explicit group mappings: 1. Click the List UNIX Groups button to populate the UNIX Groups box. 2. To map a local Windows group to a UNIX group, highlight the Windows group in the Windows local groups box and highlight the UNIX group to map, and then click Add.
Page 127: Backing Up User Mappings
UNIX File System Management To access the NAS Management Console, use Terminal Services. To open a Terminal Services session, from the WebUI, select Maintenance, Terminal Services. Figure 74: NAS Management Console User Name Mapping screen, Map Maintenance tab Backing up User Mappings 1.
Page 128: Nfs File Sharing Tests
UNIX File System Management NFS File Sharing Tests HP recommends performing the following tests to verify that the setup of the shares, user mappings, and permissions grant the desired access to the NFS shares. 1. Create an NFS share. See "NFS File Shares" earlier in this chapter for information on creating shares. 2.
Page 129: Terminal Services, Telnet Service, And Remote Shell Service
UNIX File System Management Terminal Services, Telnet Service, and Remote Shell Service In addition to the WebUI, three services are available for remote administration of Services for UNIX. These services let users connect to machines, log on, and obtain command prompts remotely.
Page 130: Password Synchronization
UNIX File System Management Password Synchronization Password synchronization is an optional service that automatically synchronizes Windows passwords with UNIX passwords across multiple machines or environments. This service is included on the NAS 1000s, but it is not activated. Figure 75: Password Synchronization screen Password synchronization ensures that the machines contain identical and most current user password database.
Page 131: Password Synchronization Requirements
UNIX File System Management Password Synchronization Requirements For the password synchronization service to function, the work environment must meet the following criteria. The password policies must be the same on Windows NT and UNIX. User and group names must match exactly in spelling. No advanced mapping component exists to correct for any mistakes or differences.
Page 132: Password Synchronization Screen, Advanced Settings Dialog Box
UNIX File System Management Figure 76: Password Synchronization screen, Advanced Settings dialog box Installing Password Synchronization on Domain Controllers and Active Directory Domain Controllers The password synchronization service must be installed on all primary domain controllers (PDCs) and backup domain controllers (BDCs) in a domain that will implement the password synchronization service.
Page 133: Customizing Password Synchronization
UNIX File System Management OemSetup.msi ADDLOCAL=PasswdSync SFUDIR=C:\SFU OEMINSTALL=TRUE SOURCELIST=Z:\ /l*v %temp%\sfusetup.log /q 5. Restart the domain controller. The domain controller must be restarted manually after installing the password synchronization. If the domain controller is not restarted, password synchronization will not run correctly. 6.
Page 134 UNIX File System Management NAS 1000s Administration Guide...
Page 135: Netware File System Management
NetWare File System Management File and Print Services for NetWare (FPNW) is one part of the Microsoft software package called Services for NetWare. The most common use of the NetWare network operating system is as a file and print server. Customers using NetWare as the platform to host their file and print services have become accustomed to its interface from both a user and an administrator point of view and have built up an investment in NetWare file and print services.
Page 136: Installing Services For Netware
NetWare File System Management Installing Services for NetWare The installation of FPNW on the NAS 1000s allows for a smooth integration with existing Novell servers. FPNW allows a Windows 2000-based server to emulate a NetWare file and print server to users, clients, and administrators. This emulation allows authentication from Novell clients, the use of Novel logon scripts, the creation of Novell volumes (shares), the use of Novell file attributes, and many other Novell features.
Page 137: Managing File And Print Services For Netware
NetWare File System Management Figure 78: Installing File and Print Services for NetWare Managing File and Print Services for NetWare To access FPNW: 1. From the desktop of the NAS 1000s, click Start, Settings, Control Panel, and then double-click FPNW. Figure 79: File and Print Services for NetWare screen 2.
Page 138: Creating And Managing Netware Users
NetWare File System Management 3. Indicate a Home directory root path. This path is relative to where the Sysvol volume has been installed. This will be the root location for the individual home directories. If the directory specified does not already exist, it must first be created.
Page 139: Enabling Local Netware User Accounts
NetWare File System Management Enabling Local NetWare User Accounts 1. In the Users folder (NMC, Core Operating System, Local Users and Groups), right-click an NCP client listed in the right pane of the screen and then click Properties. 2. Select the NetWare Services tab. Figure 81: NetWare Services tab 3.
Page 140: Managing Ncp Volumes (Shares)
NetWare File System Management Managing NCP Volumes (Shares) NCP file shares are created in the same manner as other file shares; however, there are some unique settings. NCP shares can be created and managed through two user interfaces: WebUI NAS Management Console Procedural instructions for using each of these interfaces are included in the following sections.
Page 141: Deleting An Ncp Share
NetWare File System Management Figure 82: Create a New Share dialog box, General tab 2. In the General tab, enter the share name and path. Check the Novell NetWare client protocol checkbox. To create a folder for the share, check the indicated box and the system will create the folder when it creates the share.
Page 142: Modifying Ncp Share Properties
NetWare File System Management Modifying NCP Share Properties To change share settings: 1. From the Shares menu, select the share to modify and then click Properties. The General tab of the Share Properties dialog box is displayed. The name and path of the selected share are displayed. Figure 83: Share Properties dialog box, General tab 2.
Page 143: Creating And Managing Ncp Shares Using The Nas Management Console
NetWare File System Management Figure 84: Share Properties dialog box, NetWare Sharing tab 3. From the NetWare Sharing tab of the Share Properties dialog box: a. Enter a user limit. b. Enter Permissions information. The Permissions box lists the currently approved users for this share. •...
Page 144: Creating A New Ncp Share Using The Nas Management Console
NetWare File System Management Creating a New NCP Share using the NAS Management Console To create a new file share: 1. From the NAS 1000s Console, click the NAS Management Console icon, click File Sharing, Shared Folders, and then Shares. 2.
Page 145: Netware Basic Share Permissions Dialog Box
NetWare File System Management 6. Select the Novell NetWare checkbox and then click Next. The dialog box illustrated in Figure 86 is displayed. Figure 86: NetWare Basic Share Permissions dialog box 7. Select the appropriate permissions level. If a custom permissions level is desired, select the Customize share and folder permissions radio button and then click Custom.
Page 146: Customize Permissions Dialog Box, Share Permissions Tab
NetWare File System Management Figure 87: Customize Permissions dialog box, Share Permissions tab 8. In the Share Permissions tab, enter choose the appropriate permissions level for each user or group that is configured to have access to that share. 9. To enter file system permissions, select the Security tab. The following dialog box is displayed.
Page 147: Modifying Ncp Share Properties Using The Nas Management Console
NetWare File System Management Figure 88: Customize Permissions dialog box, Security tab 10. In the Security tab of the Permissions dialog box, enter the file system security properties that apply to the share folder on the server. 11. After the permissions have been entered, click OK to return to the Create Shared Folder screens.
Page 148: Notes
NetWare File System Management NOTES: 1. Permissions can be set on a shared volume regardless of its type of file system. 2. Share permissions are effective only when the share is accessed over the network. 3. The group of permissions you set for the share applies equally to all files and subdirectories in the volume.
Page 149: Remote Access Methods And Monitoring
Remote Access Methods and Monitoring The HP StorageWorks NAS 1000s comes from the factory with full remote manageability. Several methods of remote access are provided: Web based user interface Terminal services Telnet Server — Enabling Telnet Server — Configuring Telnet Server Remote Shell Daemon These options let administrators use interfaces with which they are already familiar.
Page 150: Web Based User Interface
Remote Access Methods and Monitoring Web Based User Interface The NAS 1000s includes a Web based user interface (WebUI) for the administrator to remotely manage the machine. Of all of the remote access methods, the WebUI is the most intuitive and easiest to learn and use.
Page 151: Telnet Server
Remote Access Methods and Monitoring Telnet Server Telnet Server is a utility that lets users connect to machines, log on, and obtain a command prompt remotely. Telnet Server is preinstalled on the NAS 1000s, but must be activated before use. Caution: For security reasons, the Telnet Server must be restarted each time the server is restarted.
Page 152: Auditing Information
Remote Access Methods and Monitoring Auditing Information Telnet Server can log various events. The Logging tab allows the administrator to enable logging and select the events that should be logged. Note that errors and significant events are always logged to the Windows event list as well. Server Settings Use the Server Settings tab to change Telnet Server parameters.
Page 153: A Backup Management
Backup Management This appendix is a backup guide for HP StorageWorks NAS devices. This appendix guides the reader through the process of determining which backup and restore solution is best suited to the NAS device and their business environment. As a source and a destination for departmental, workgroup, and enterprise data, the NAS 1000s becomes an integral part of company computing environments.
Page 154: Hardware Options
Backup Management Hardware Options Selecting the correct type of device and connection ensures a reliable backup of data that is well suited to the particular computing environment. HP recommends several tape solutions for use with the NAS 1000s. For a full list of qualified tape solutions, refer to the HP website: www.hp.com Additional backup recommendations and information is available in the Backup whitepapers, also available at the HP website.
Page 155: Best Practices
Backup Management Best Practices After deciding on a backup solution, establish procedures that will enhance the reliability and effectiveness of the backups. The following sections describe general recommendations for performing a backup. Keep company specific needs and environment in mind when implementing these suggestions.
Page 156: Backup Schedules
Backup Management Backup Schedules An automatic, periodic backup is much more reliable than occasional backups that occur only when someone remembers to execute them. The specific needs of the organization will determine what type of schedule to implement. A weekly or biweekly full backup is the basis of any good backup schedule. Add to that baseline daily incremental or differential backups to capture any daily changes that occur between full backups.
Page 157: Snapshots And Quick Online Restores
Backup Management Server name IP addresses Gateways DNS servers NIS servers User mapping database Storage setup — Member storage units (LUNs) — Share names, paths, and access permission settings This information greatly increases the ability to quickly and accurately recover from catastrophic failures such as fires, weather disasters, theft, and complete hardware failure.
Page 158: Readiness Testing
Backup Management Readiness Testing Completing regular backups is important, but it is only the first step in the backup process. To verify the integrity of those backups, the administrator must conduct periodic testing to confirm the ability to recover files and directories. Regularly testing the recoverability of random files or directories ensures that the backup solution is working as planned.
Page 159: Psm Error Codes
PSM Error Codes If you experience a problem using Persistent Storage Manager, the following list of event log messages can be used to troubleshoot. Error codes are logged to the system event log by the file system driver for Persistent Storage Manager, PSMAN5 driver; each entry appears with "psman5"...
Page 160 PSM Error Codes Table 5: PSM Error Codes Error Code Description 0x00000057 An invalid parameter was passed to a function. Action: Programmatically, verify the parameters being passed to PSM are correct. 0x00000079 I/O timed out while reading from the cache file. Action: Verify the hard drive is operational.
Page 161 PSM Error Codes Table 5: PSM Error Codes Error Code Description 0xC0000005 An Access Exception occurred. Action: Save the system eventlog and contact your vendor's technical support. 0xC0000008 User performing PSM function without opening PSM. Action: Save the system eventlog and contact technical support. 0xC000000D An invalid parameter was passed to a function.
Page 162 PSM Error Codes Table 5: PSM Error Codes Error Code Description 0xC000010A PSM was told to shut down. Action: Save the system eventlog and contact technical support. 0xC0000184 Something has gone wrong with PSM. Action: Save the system eventlog and contact technical support. 0xC0000185 An error occurred on the device.
Page 163 PSM Error Codes Table 5: PSM Error Codes Error Code Description 0xE000100F Invalid parameter. Action: Save the system eventlog and contact technical support. 0xE0001010 Invalid handle. Action: Save the system eventlog and contact technical support. 0xE0001011 Not implemented yet. Action: Save the system eventlog and contact technical support. 0xE0001012 Object type is not expected object.
Page 164 PSM Error Codes Table 5: PSM Error Codes Error Code Description 0xE0001021 The server was shutdown. Action: Do not shut down the machine while snapshots are in progress. 0xE0001022 Unable to create cache file. Action: Save the sysktem eventlog and contact support. 0xE0001023 PSM recovery could not find a snapshot entry.
Page 165 PSM Error Codes Table 5: PSM Error Codes Error Code Description 0xE0001030 Could not dismount volume before starting snapshot restore. The restore operation was canceled. Action: Save the system eventlog and contact technical support. 0xE0001033 An attempt was made to differentiate volumes of unequal length. Action: Save the system eventlog and contact technical support.
Page 166 PSM Error Codes NAS 1000s Administration Guide...
Page 167: Index
index caching automatic for documents access control list. See ACL automatic for programs manual for documents defined CIFS translating add a new user or group modify access installing services for AppleTalk protocol settings installing services for Macintosh remove access protocol settings share support shares, setting up sharing...
Page 168 Index domain environment group names drive defragmentation examples drive quotas managing defined groups managing adding from a domain adding local users adding to permissions list local, adding e-mail alerts, setting up local, deleting encoding types local, managing environments local, modifying properties domain compared to workgroup properties, general tab overview...
Page 169 Index modifying share properties simple network protocols squashed protocol properties settings media protocol settings offsite storage sharing rotation user mapping server memory user mappings Microsoft Services for UNIX. See SFU NIC teams. See Ethernet NIC teams mount points offsite storage, media NAS B2000 defined desktop...
Page 170 Index editing schedule properties e-mail alerts editing snapshot properties error codes commands global settings event logging image directory SFU, described image groups shares inactive period administrative inactive time-out managing snapshots CIFS tab overview creating new 84, restore defaults creating new NCP 140, restore snapshot deleting schedules...
Page 171 Index squashed mappings Telnet Server squashing user ID subfolder, navigating to volume mount points symbols in text user access, authenticating symbols on equipment user interfaces synchronization users system date, changing adding to permission list system storage local managing adding system time, changing deleting managing modifying properties...
Page 172 Index NAS 1000s Administration Guide...

This manual is also suitable for:

Storageworks nas 1000s

HP StorageWorks S1000 - NAS Administration Manual

Quick Links

Related Manuals for HP StorageWorks S1000 - NAS

Summary of Contents for HP StorageWorks S1000 - NAS