Mounting a shared zfs onto a remote system : how to restrict permissions

I'm trying to setup some basic nfs shares out of a zpool and failing miserably as it is.
Here's what I have; all my machines are in 10.154.22.0/24 .. it's basically a test (pre-prod) network
- oslo, the nfs server, 10.154.22.1, SunOS 5.10-x86
- helsinki, the remote machine, 10.154.22.4, linux 2.6.22
On oslo I've created a zpool named pool2 with a zfs filesytem called tools. pool2/tools is mounted in /tools. I've further restricted access to /tools with : chown 0:nfsusers /tools && chmod 770 /tools . I want to ensure that only users from the group nfsusers will be able to read/write/execute into /tools.
I have a user, dbusr who is part of the nfsusers group. He can access the FS as he wants. All usernames / uids / gids are identical across the whole network .
Ok now, on helsinki, I have a directory /export/helsinki/tools . This directory is also chowned 0:nfsusers and chmoded 770.
Now, on helsinki everytime I try : mount -t nfs oslo:/tools /export/helsinki/tools I get :
mount.nfs: oslo:/tools failed, reason given by server: Permission denied
Server-side I've modified /etc/default/nfs so that both client and server run at NFSv3 (I've read somewhere that NFSv4 is not that well supported on Linux). The zfs share is set up like this:
zfs set sharenfs=rw=10.154.22.0/255.255.255.0 pool2/tools .
I'd like all my users in the group nfsusers to be able to write on the remote nfs FS, and optionally, root to be able, too.
What am I missing, here ?
Regards,
Jeff

It was not a problem. The raw partition with the soft partition or ZFS filesystem works fine in the local zone.
Thank you for your help.
-Yong

Similar Messages

Receiving zfs snapshots from remote system

Hi guys,
if you create zfs snapshots on systemA and then send them to systemB, how do you recover the snapshots from systemB back to systemA?
Thanks guys .

The same way, just do a send/receive from B to A. But that would create a new filesystem, not get you the snapshot within the original zfs back.
cheers
bjoern

How to create a jar file which is in the remote system?

Hi,
I have a set of files that resides in a remote system,which have to be "jar"red. I have a firewall in between. I want to create a jar file out of the files situated in the remote system.How do i go about this process.?

Hi,
You can't do that in a simple way. You need to have a port open in the firewall, and you need to have a server process on the remote machine.
Kaj

Change remote system in sydnicator map

I have imported a syndication map from a remote system and want to duplicate the same map out to another remote system, how can i change the remote system value in the map properties?
Adam Sellers.

Hi Adam,
When you are opening the MDM syndicator. Go to .. File>Connect to source
Here you can mention the Type and Remote system.The Remote system you select here gets reflected in your Map properties.
Now import The Exported Map.
Hope it helped
Thanks & Regards
Simona Pinto

Mount options for ZFS filesystem on Solaris 10

Do you know some recomendation
about mount options for SAP on Oracle
with data on ZFS filesystem?
Also recomended block size required.
We assume that file system with datafiles has 8kb block size
and offline redologs has default (128kB).
But what about ONLINE REDOLOGS?
Best regards
Andy

SUN Czech installed new production HW for one Czech customer with ZFS filesystem on data-, redo- and archivelog files.
Now we have performance problem and currently there is no SAP recomendation
for ZFS file system.
The HW which are by benchmark about tvice power has worst responses than
old hardware.
a) There is bug in Solaris 10 - ZFS buffers once allocated are not released
(generally we do not want to use buffering due to prevence of double
buffering)
b) ZFS buffers takes about 20GB (32GB total) of memory on DB server
and we are not able to define huge shared pool and db cache. (it may be possible
to set special parameter in /etc/system to reduce maximum size of ZFS buffers to e.g. 4GB )
c) We are looking for proven mount option for ZFS to enable asynchronious/concurent io for database filesystems
d) There is no proven clear answer for support of ZFS/SOLARIS/Oracle/SAP.
SAP says It is Oracle problem, Oracle does not certify filesystems from Jan2007
any more and says ask your OS provider and SUN looks happy, but performance
goes down and it is not so funny for system with 1TG DB with over 30GB grow
per month.
Andy

Remote system disconnected after installing MAX 4.7.3

Hello!
This topic is related to the topic you can find here.
In order to repair the Regional Settings issue in Windows (XP in my case) I used the System Configuration 1.1.3 update and it seems to work. I changed the Regional Settings to my local and installed the update. Silverlight does not crash anymore, so that is fixed. However, this created a new issue:
Now my remote devices (NI-1742 and NI-1746) status is always "disconnected". The devices are connected to a different subnet than the development computer. Pinging their IPs showed that they are there. I can connect to the cameras using the Real-time Project. However, in MAX the remote system status remains "disconnected". I tried to delete and re-create the devices in MAX but that did not work either.
I also tried the latter with Windows firewall on and off and updated the software with NI Update Service. On an another computer, which has not had the update yet, I can connect to and modify the devices.
In addition, I completely reinstalled the development system, but the issue persists.
Kind regards,
Mart
Solved!
Go to Solution.

Hey Mart,
It looks like this may be related to a possible bug introduced in MAX 4.7.3. I've uploaded Juurma.zip to our FTP site. Please obtain this .zip file by navigating to ftp://ftp.ni.com/outgoing.
This .zip file contains a patched version of mxRmCfg.dll. First, close all NI software and stop the NI System Web Server service and all its dependencies (you can get to your services by going to Start->Run and typing in services.msc). Then, navigate to this directory: C:\Program Files\National Instruments\Shared\MAX\Bin
You will need to rename the existing mxRmCfg.dll to mxRmCfg.bak, and copy the new version to that location. Restart your system, open MAX, and see if you can connect to and view your targets.
If this resolves your issue, PLEASE post back in this thread indicating as much. If not, let us know and we'll continue to investigate. Note that items on our FTP server will be removed after 48 hours, so let me know if you're unable to get that file in time
Justin E
National Instruments R&D

Remote system shutdown

Hi,
I'll try to be as short as possible. I need a bacth or command file to shut a system down located in my network. The batch file needs to be opened by another program called PowerChute Business Edition use by APC for UPS systems.
I have the following. I can make a batch and command file that will log me onto the remote device and then shut down the device.
net use \\computername /user:administrator password
shutdown.exe -s -m \\computername -t 60When I just double click on the batchfile, it runs and the remote device opens a window saying that it will be shut down in 60 seconds.
Only when my program opens the file, the action doesn't happen.
I tried several other things
NET SEND
opening a program with CALL and START
time /t >> c:\timelog.logAll these work, only the shutdown command doesn't work. I tried several other versions like
shutdown -s -m \\computername -t 60
shutdown /s /m \\computername /t 60
shutdown.exe -s -m \\computername -t 60
shutdown.exe /s /m \\computername /t 60...
Now I contacted APC and in their last mail they said:
The command files must conform to a certain syntax because of java. This also causes problems sometimes.
Now I thought I'd might be using the wrong code because of Java,so I thought of asking it in a Java forum.
Best regards
Peter

The program itself is a program for my UPS. When power is cut off, the UPS will switch to batteries. Now the software can execute a command file or batch file before shutting the connected computer down.
So I want this cmd-file or bat-file to shut a remote computer down. This can be done by NET USE (to log on) and the by SHUTDOWN (to shut it down)
If I want to see what happens when the program opens the batch files I go to work like this:
I write 2 files:
CallShutdown.bat
@START "" "C:\Program Files\APC\PowerChute Business Edition\agent\cmdfiles\shutdown.bat
shutdown.bat
NET USE \\computername /user:username password
SHUTDOWN.EXE -s -m \\computername -t 60
NET SEND computername TESTNow I can see on my own computer a DOS window and that gives me the following information:
c:\PROGRA~1\APC\POWERC~1\agent\>net use \\computername /user:Administrator password
The task is completed
c:\PROGRA~1\APC\POWERC~1\agent\>shutdown.exe -s -m \\computername -t 60
Access denied
c:\PROGRA~1\APC\POWERC~1\agent\>net send computername TEST
The message was send to COMPUTERNAMEAnd on the remote computer I can see a Messenger-Service window with the message TEST in it coming from my computer.
First of all the NET USE command works, but the shutdown command fails because the access was denied.
HOWEVER, when I double click on CallShutdown.bat in Windows Explorer everything works just fine. Logon, shutdown and Net Send.
So I don't know why that shutdown command gets an access denied when I let the program execute it, but when I just use the double click action :o) everything works.
Because I got a message from the helpdesk saying something about syntax for JAVA, I thought I'd give it a go on this forum.
Hope I've been clear in my explanation. Two files, one calling the other. Second one logs on and shuts down the remote computer.

Remote System Explorer on a Wireless LAN

On a wireless LAN when I use Remote System Explorer, it knocks our Fieldpoint network modules off-line. We are unable to ping them. Once we restart the units, they work fine until someone uses the Remote System Explorer again. Any ideas?

We have FP1600s and FP2015s. It only affects certain FP1600s. Firmware revision is 3.0 on the 1600s. Some older ones are not affected and some newer ones are. We configure them in the shop on a LAN, then move them to a field environment. The only firewall is point of entry onto the post.
When using Remote System Explorer (the latest and greatest version), one at a time is "knocked off line". Every time Remote System Explorer refreshes another 1600 is knocked off line. I see no relevance to a crossover cable. This occurs over a WLAN. If we don't use Remote System Explorer then they just chug along fine.
I have used the FP1600 Diagnostic Utility which was a mistake. Now the status LEDs blinks red 7 times.

Utilizing NI DAQ hardware on a remote system.

I noticed that the new version of Measurement & Automation Explorer for LabVIEW 8 now has a "Remote Systems" tab. Would this enable me to have say Computer A setup with some DAQ hardware and then utilize that hardware at Computer B over a 100 or 1000mbps ethernet network within LabVIEW?
If not, what would I need to be able to do that? I've played around with the web publishing tool, and would rather have the actual LabVIEW program running on Computer B rather then on Computer A.
Thank you for your input!
-nickerbocker

Thank you for your reply GDE [DE]!
That’s too bad. I assumed too much and thought we
were able to do something fancy.
I work at a test facility where the tests that we run are hazardous.
We have a lot of concrete walls between us and the tests that are run. We
have a test console setup where we have our entire test monitoring tools in a
central location. The problem is, whenever we make a new test chamber all
the transducer lines have to be drawn to our test console. These lines
consist of analog outputs from Omega DP units that power and read pressure
transducers and K-type thermocouple channels.
This makes it difficult, if not impossible when time is
constraining, to setup for a new test. Some of our newer test chambers
and rooms that we have added to our facility are further and further away from
our test console. Long analog lines are not good for noise reasons.
Long thermocouple channels are even worse since the signal is so small and varying
temperature gradients across the line can affect measurement readings.
The solution that seems apparent to me is: why don't we
read our transducer values closest to the test cells and network that
information back to the test console through a high speed gigabit network?
I was hoping that a remote data acquisition computer would
just consist of an operating system, the hardware and hardware drivers for DAQ,
and then MAX. The computers at the test console would be in charge of
actually administrating the test procedures (Digital I/O) and DAQ through the
network.
I have looked at the web features available in our license
of LabVIEW 8 Professional Developer and I'm pretty impressed with its
capabilities. The problem is I don't want to have to obtain a LabVIEW 8
license for each remote computer. It is just too expensive. I can
build executables with my developer’s license of LabVIEW 8, but I don't think
that the web server features can be built into an executable LabVIEW program
(or can they?).
Can I use this shared variables solution that you speak of
in a LabVIEW built executable?
I hope that I have provided enough information about my
problem to help stimulate some possible solutions and more discussion. I
really appreciate the help that these forums provide and hope that I am able to
give back to this community.
-Nic

Unable to add remote system into cluster using osx 10.5.2

About a month ago, I had a quartermaster managed compressor cluster setup with three (3) systems. I was running FCP 6.0. on one system with quartermaster on that system managing the cluster. Compressor, quatermaster, and quicktime were installed on the other systems. All systems were running osx 10.5. FCP 6.0 suite tools was installed on one system. One of the systems was an intel and I had a two (2) instances setup as well as a virtual cluster on the intel. All worked perfectly.
All machines were upgraded, to the latest quartermaster, compressor, quicktime, and osx 10.5.2 with the leopard graphics updates.
Now I can no longer join the remote systems into the cluster. On these systems I have share and managed set, for both rendering and compressor. Yet in quartermaster they only show up as rendering nodes. If I remove the shared option, then the nodes appear as a unmanaged compressor service. But they are greyed and cannot be added to a cluster.
Before the update, they would display in quartermaster as both rendering and compressor services and could be added to a managed compressor cluster.
Did the updates break something or is there a new requirement that I am missing?
thanks

I'm having exactly the same problem on multiple machines, both Intel octocore and G5 quadcore. I'm running 10.5.4 with all the latest updates on all machines. Everything was working, now we can't drag any of the machines into a cluster to make a new one. Like you say, they only appear if Managed is unchecked (on the machine providing the QMaster service), and then are still greyed out, and not draggable. And you can't save a cluster without specifying the cluster controller, which you can't because nothing can be dragged in. The nodes appear to be unlocked (although the icon isn't very obvious), but even if they're locked, there is no password entry that pops up when clicked, and none have a password set in their QMaster System Preferences.
To test, I did a totally 100% fresh pristine Leopard install and a dual G5, ran all OS upgrades, then did a fresh FCP Studio 2 install, and ran upgrades again and repaired permissions just for good measure. No dice. Exactly the same problem as on the other machines. This is a brand new install and it doesn't work!
Very frustrating problem and I can't believe more people aren't seeing it. Totally fresh install, what else can be done? Well, time to call AppleCare, I guess.

SAP PRD(Production): update prd remote system?

Hello All
is here is anyone who can explain me how to update the mobile prd if the error message says?
Remote system contain different prd that you are providing.
and the popup message will show the prd it should be
i am really hoping that someone will help me.
Many thanks in advance.
Edited by: HarjinderS on May 12, 2011 5:48 PM

Hi Chandhra,
Please follow below approach
Node 1: ASCS + CI
Node 2: DB + ERS + APP
ASCS also holds enqueue process hence ERS is not needed on Node 1.
Following file systems should be shared across both the nodes
/usr/sap/trans
/sapmnt/<SID>
Following instance should be installed with virtual host
DB instance
ASCS instance
Following instance should be installed with physical host
CI instance
APP server
ERS
When node1 fails
ASCS will move to node 2. Node 2 will have DB+ ASCS + APP . Rest other instance should be down
When Node 2 fails
DB will move to Node1. Node 1 will have DB+ASCS+ CI. Rest other instances should be down.
Refer SAP installation guide and relevant notes for planning the installation.
Hope this helps.
Regards,
Deepak Kori

Error 1256 The remote system is not avilable - REPL summary

Hi all
For the past 3 days I am getting the below error while checking the AD replication. our present setup is
RDC and ADC was available in the same site. and DR ADC was configured in remote site. we have P2P link connectivity for OUR AD and Exchange 2010 DAG Replication. Kindly help me to solve this issue.
C:\>repadmin /replsummary
Replication Summary Start Time: 2015-01-05 18:39:15
Beginning data collection for replication summary, this may take awhile:
Source DSA          largest delta    fails/total %%   error
DRADC             02m:39s    0 /   5    0
RDC      02d.02h:03m:27s    5 / 10   50 (1256) The remote system is
not available. For information about network troubleshooting, see Windows Help.
ADC            17m:39s    0 / 10    0
Destination DSA     largest delta    fails/total %%   error
DRADC     02d.02h:03m:18s    5 / 10   50 (1256) The remote system is
not available. For information about network troubleshooting, see Windows Help.
RDC             17m:31s    0 / 10    0
ADC             04m:49s    0 /   5    0
C:\>repadmin /showrepl
Repadmin: running command /showrepl against full DC localhost
Default-First-Site-Name\ADC
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 5ddb9663-7c5b-4f2e-97b9-82a29e2c5955
DSA invocationID: 8d939f8e-fe0a-4bce-b260-e546e41e86d4
==== INBOUND NEIGHBORS ======================================
DC=ifmr,DC=co,DC=in
    Default-First-Site-Name\RDC via RPC
        DSA object GUID: 4988b352-e60b-4425-aac2-dd903d85eb2a
        Last attempt @ 2015-01-05 18:34:30 was successful.
CN=Configuration,DC=ifmr,DC=co,DC=in
    Default-First-Site-Name\RDC via RPC
        DSA object GUID: 4988b352-e60b-4425-aac2-dd903d85eb2a
        Last attempt @ 2015-01-05 18:39:22 was successful.
CN=Schema,CN=Configuration,DC=ifmr,DC=co,DC=in
    Default-First-Site-Name\RDC via RPC
        DSA object GUID: 4988b352-e60b-4425-aac2-dd903d85eb2a
        Last attempt @ 2015-01-05 18:34:26 was successful.
DC=DomainDnsZones,DC=ifmr,DC=co,DC=in
    Default-First-Site-Name\RDC via RPC
        DSA object GUID: 4988b352-e60b-4425-aac2-dd903d85eb2a
        Last attempt @ 2015-01-05 18:54:39 was successful.
DC=ForestDnsZones,DC=ifmr,DC=co,DC=in
    Default-First-Site-Name\RDC via RPC
        DSA object GUID: 4988b352-e60b-4425-aac2-dd903d85eb2a
        Last attempt @ 2015-01-05 18:40:04 was successful.
DsReplicaGetInfo() failed with status 8453 (0x2105):
    Replication access was denied.
DsReplicaGetInfo() failed with status 8453 (0x2105):
    Replication access was denied.
Jags

As an addition to what Frank shared, I would recommend that you read that too:
Active Directory Replication Issues – Basic Troubleshooting Steps (Single AD Domain in a Single AD Forest): http://social.technet.microsoft.com/wiki/contents/articles/18513.active-directory-replication-issues-basic-troubleshooting-steps-single-ad-domain-in-a-single-ad-forest.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Remote System and Remote Key Mapping at a glance

Hi,
I want to discuss the concept of Remote System and Remote Key Mapping.
Remote System is a logical system which is defined in MDM Console for a MDM Repository.
We can define key mapping enabled at each table level.
The key mapping is used to distinguish records at Data Manager after running the Data Import.
Now 1 record can have 1 remote system with two different keys but two different records cannot have same remote system with same remote key. So, Remote key is an unique identifier for record for any remote system for each individual records.
Now whenever we import data from a Remote System, the remote system and remote key are mapped for each individual records. Usually all records have different remote keys.
Now, when syndicating back the record with default remote key is updated in the remote system that is sent by xml file format.
If same record is updated two times from a same remote system, the remote key will be different and the record which is latest contains highest remote key.
Now, I have to look at Data Syndication and Remote key.
I have not done Data Syndication but my concept tell if there is duplicate record with same remote system but different remote keys both will be syndicated back. But if same record have two remote keys for same remote system then only the default remote key is syndicated back.
Regards
Kaushik Banerjee

You are right Kaushik,
I have not done Data Syndication but my concept tell if there is duplicate record with same remote system but different remote keys both will be syndicated back.
Yes, but if they are duplicate, they needs to be merged.
But if same record have two remote keys for same remote system then only the default remote key is syndicated back.
This is after merging. So whichever remote key has tick mark in key mapping option(default) , it will be syndicated back.
Pls refer to these links for better understanding.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/uuid/80eb6ea5-2a2f-2b10-f68e-bf735a45705f
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/uuid/7051c376-f939-2b10-7da1-c4f8f9eecc8c%0c
Hope this helps,
+ An

Syndicating based on Addition of a Remote System Key

Hi
We have a distributed system syndication scenario where we need to syndicate a record automatically when a remote system key is added to an existing harmonized record in MDM. By adding the Remote System Key, it essentially means the remote system is 'subscribing' to the new harmonized record.
Is there any way to fire off a syndication event when a new remote system key is added to a record? It seems that MDM currently only flags a record as ready to be syndicated when a value changes in one of the fields of that record - it doesn't seem to identify the addition of a new system key to the record as a change to the record.
Thanks for your assistance in advance.

Hi Ravi
Thanks for the reply. The current view is that we were going to add it manually as a remote system key mapping, as the material record would already exist and would have been harmonized in mdm - so no need to add it through an import map. The scenario is that the master record already exists and another system wishes to also receive this record. Any thoughts on what options do we have if we go this approach?
Also, is their anyway to indicate if a remote system key is added for a new system to an existing mdm material, to indicate when syndicating that the record being sent is a 'Create' record - and hence only to syndicate it to the new remote system added and not to the other systems which also have remote key's against that record?
Thanks
Costa

Search for [Remote Key] and [Remote System] in Data Manager

Hello all
I would like to be able to search on the remote key and the remote system in the MDM Data Manager is that not possible? I thought I remembered seeing that possibility under the Free-Form Search but now I can't find it.
I have, however, found this in the Data Manager reference guide:
REMOTE SYSTEM AND REMOTE KEY FIELDS
MDM uses the remote systems defined in the Remote Systems table
within the MDM Console to store and maintain key mapping information
for each record or text attribute. It does this using a virtual key
mapping field that you never see in the MDM Client.
This virtual key mapping field is very much like a qualified lookup field
into a virtual key mapping qualified lookup table.
Key Mapping information stored in virtual lookup field
The Remote System and Remote Key fields are normally not visible;
however, they do appear in several places in the MDM Client.
Specifically, both fields: (1) appear in the File > Export dialogs in Record
mode for exporting value pairs; (2) are recognized by the File > Import
dialog in Record mode for importing value pairs; and (3) appear in the
Edit Key Mappings dialogs in both Record mode and Taxonomy mode,
for viewing and editing value pairs.
Is there any way to search on the value in the remote key from the Data Manager?

Not sure search i think not possible.
But you can see keys as mentioned:
Enable Key mapping in Console.
MDM Client maens MDM Data Manager.
They do appear in several places in the MDM Client or Data Manager. Three different methods to see in DM are given already below:
Specifically, both fields: (1) appear in the File > Export dialogs in Record mode for exporting value pairs; (2) are recognized by the File > Import dialog in Record mode for importing value pairs; and (3) appear in the Edit Key Mappings dialogs in both Record mode and Taxonomy mode, for viewing and editing value pairs.
BR,
Alok

Mounting a shared zfs onto a remote system : how to restrict permissions

Similar Messages

Maybe you are looking for