[prev in list] [next in list] [prev in thread] [next in thread]
List: toasters
Subject: RE: Trend AV with Filers
From: "James Brigman" <jbrigman () nc ! rr ! com>
Date: 2004-07-23 2:56:03
Message-ID: 002101c47060$9ac96e00$667ba8c0 () emalf
[Download RAW message or body]
Jason;
You have to put the AV server account in the "Backup Operators" group. I
ran into exactly this same problem a couple days ago and wrote a
procedure paper that I submitted to NetApp on how to do it.
There's training material that hints how to do it, but it's not quite
right. The docs that ship with the filers imply it can be done from the
filer command line, but this is not correct. Virus scanning is a
CIFS-only procedure, so you need to add the CIFS account on the AV
server to the captive "Backup Operators" group on the filer. You must
have an administrative account in your domain to do the process. Here's
the overall summary:
- be admin
- add the domain-based AV account to the backup group on the
filer
- add the domain-based AV account to the backup group on the AV
server
- restart the AV service on the AV server
- the AV server should automatically "register" with the server
and start running
I'll send you the HOWTO if you want to see it. It goes through
step-by-step and shows how to do it with screen prints.
JKB
-----Original Message-----
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com]
On Behalf Of Palmer, Jason (EMEA)
Sent: Thursday, July 22, 2004 12:59 PM
To: 'toasters@mathworks.com'
Subject: Trend AV with Filers
Hi -
We are currently having problems with ou virus scan servers de
registering with the filers...
Extract from Syslogs...
Tue Jul 20 03:00:00 GMT [<filer>: kern.uptime.filer:info]: 3:00am up
19:03 0 NFS ops, 4955185 CIFS ops, 46 HTTP ops, 0 DAFS ops, 0 FCP ops, 0
iSCSI ops
Tue Jul 20 03:01:33 GMT [<filer>: Auth08:warning]: Cannot connect to
server. Session setup error: Called name not present (0x82)
Tue Jul 20 03:02:37 GMT [<filer>: Auth01:warning]: Cannot connect to
server. Socket connect error: Resource temporarily unavailable
Tue Jul 20 03:03:37 GMT [<filer>: Auth05:warning]: Cannot connect to
server. Socket connect error: Resource temporarily unavailable
Tue Jul 20 03:04:37 GMT [<filer>: Auth00:warning]: Cannot connect to
server. Socket connect error: Resource temporarily unavailable
Tue Jul 20 03:05:37 GMT [<filer>: Auth02:warning]: Cannot connect to
server. Socket connect error: Resource temporarily unavailable
Tue Jul 20 03:06:37 GMT [<filer>: Auth03:warning]: Cannot connect to
server. Socket connect error: Resource temporarily unavailable
Tue Jul 20 03:07:37 GMT [<filer>: Auth09:warning]: Cannot connect to
server. Socket connect error: Resource temporarily unavailable
Tue Jul 20 03:12:57 GMT [<filer>:
vscan.server.connecting.disconnect:info]: CIFS: Vscan server <Scanner>
deregistered and will be removed from the list of available vscan
servers.
Tue Jul 20 03:12:57 GMT [<filer>: OffloadWorker06:info]: Connection with
<Scanner> terminated
Tue Jul 20 03:12:57 GMT [<filer>: vscan.dropped.connection:warning]:
CIFS: Virus scan server <Scanner> (123.456.789.123) has disconnected
from the filer.
Tue Jul 20 03:12:57 GMT [<filer>: vscan.server.connectedNone:warning]:
CIFS: Virus scanning is enabled but no vscan (anti-virus) servers are
connected to the filer.
Tue Jul 20 03:13:27 GMT [<filer>: vscan.server.connectedNone:warning]:
CIFS: Virus scanning is enabled but no vscan (anti-virus) servers are
connected to the filer.
Tue Jul 20 04:00:00 GMT [<filer>: kern.uptime.filer:info]: 4:00am up
20:03 0 NFS ops, 5024835 CIFS ops, 46 HTTP ops, 0 DAFS ops, 0 FCP ops, 0
iSCSI ops
There is a bug note (Bug ID: 81237) on the NOW site which states 'This
is believed to be a problem with a vendor's anti-virus software.'
Has anyone else had these issues ? If so, is there a work around or a
fix ?
Thanks,
Jason
-----------------------------------
Jason Palmer <Team Leader>
Messaging & Storage Implementation
MCI [EMEA]
-----------------------------------
[e]: jason.palmer@uk.mci.com
[i]: http://www.mci.com/uk
-----------------------------------
[Attachment #3 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:st1="urn:schemas-microsoft-com:office:smarttags" \
xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 10">
<meta name=Originator content="Microsoft Word 10">
<link rel=File-List href="cid:filelist.xml@01C4703F.106AC5E0">
<title>Trend AV with Filers</title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;
mso-font-charset:2;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:0 268435456 0 0 -2147483648 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:1627421319 -2147483648 8 0 66047 0;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:536871559 0 0 0 415 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;
text-underline:single;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:navy;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:678580923;
mso-list-type:hybrid;
mso-list-template-ids:603482490 -2125199240 67698691 67698693 67698689 67698691 \
67698693 67698689 67698691 67698693;} @list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Arial;
mso-fareast-font-family:"Times New Roman";}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=blue style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Jason;<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>You have to put the AV server account in
the “Backup Operators” group. I ran into exactly this same problem
a couple </span></font><st1:PersonName><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy'>day</span></font></st1:PersonName><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'>s ago and wrote a procedure paper that I submitted to <span
class=SpellE>NetApp</span> on how to do it. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>There’s training material that hints
how to do it, but it’s not quite right. The docs that ship with the
filers imply it can be done from the filer command line, but this is not
correct. Virus scanning is a CIFS-only procedure, so you need to add the CIFS
account on the AV server to the captive “Backup Operators” group on
the filer. <span style='mso-spacerun:yes'> </span>You must have an
administrative account in your domain to do the process. Here’s the
overall summary:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 \
lfo1; tab-stops:list .5in'><![if !supportLists]><font size=2 color=navy \
face=Arial><span style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial;
color:navy'><span style='mso-list:Ignore'>-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New \
Roman"'> \
</span></font></span></span></font><![endif]><font size=2 color=navy face=Arial><span \
style='font-size:10.0pt;font-family:Arial;color:navy'>be \
admin<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 \
lfo1; tab-stops:list .5in'><![if !supportLists]><font size=2 color=navy \
face=Arial><span style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial;
color:navy'><span style='mso-list:Ignore'>-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New \
Roman"'> \
</span></font></span></span></font><![endif]><font size=2 color=navy face=Arial><span \
style='font-size:10.0pt;font-family:Arial;color:navy'>add the domain-based AV account \
to the backup group on the filer<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 \
lfo1; tab-stops:list .5in'><![if !supportLists]><font size=2 color=navy \
face=Arial><span style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial;
color:navy'><span style='mso-list:Ignore'>-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New \
Roman"'> \
</span></font></span></span></font><![endif]><font size=2 color=navy face=Arial><span \
style='font-size:10.0pt;font-family:Arial;color:navy'>add the domain-based AV account \
to the backup group on the AV server<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 \
lfo1; tab-stops:list .5in'><![if !supportLists]><font size=2 color=navy \
face=Arial><span style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial;
color:navy'><span style='mso-list:Ignore'>-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New \
Roman"'> \
</span></font></span></span></font><![endif]><font size=2 color=navy face=Arial><span \
style='font-size:10.0pt;font-family:Arial;color:navy'>restart the AV service on the \
AV server<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 \
lfo1; tab-stops:list .5in'><![if !supportLists]><font size=2 color=navy \
face=Arial><span style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial;
color:navy'><span style='mso-list:Ignore'>-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New \
Roman"'> \
</span></font></span></span></font><![endif]><font size=2 color=navy face=Arial><span \
style='font-size:10.0pt;font-family:Arial;color:navy'>the AV server should \
automatically “register” with the server and start \
running<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I’ll send you the HOWTO if you want
to see it. It goes through step-by-step and shows how to do it with screen
prints. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>JKB<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br>
<b><span style='font-weight:bold'>From:</span></b> owner-toasters@mathworks.com
[mailto:owner-toasters@mathworks.com] <b><span style='font-weight:bold'>On
Behalf Of </span></b>Palmer, Jason (EMEA)<br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, July 22, 2004
12:59 PM<br>
<b><span style='font-weight:bold'>To:</span></b> 'toasters@mathworks.com'<br>
<b><span style='font-weight:bold'>Subject:</span></b> Trend AV with \
Filers</span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Hi -</span></font> <o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>We are currently having problems with ou virus scan
servers de registering with the filers...</span></font> <o:p></o:p></p>
<p style='margin-left:.5in'><b><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial;font-weight:bold'>Extract from Syslogs...</span></font></b>
<o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:00:00 GMT [<filer>:
kern.uptime.filer:info]: 3:00am up 19:03 0 NFS ops, 4955185 CIFS
ops, 46 HTTP ops, 0 DAFS ops, 0 FCP ops, 0 iSCSI ops</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:01:33 GMT [<filer>:
Auth08:warning]: Cannot connect to server. Session setup error: Called name not
present (0x82)</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:02:37 GMT [<filer>: Auth01:warning]:
Cannot connect to server. Socket connect error: Resource temporarily
unavailable</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:03:37 GMT [<filer>:
Auth05:warning]: Cannot connect to server. Socket connect error: Resource
temporarily unavailable</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:04:37 GMT [<filer>:
Auth00:warning]: Cannot connect to server. Socket connect error: Resource
temporarily unavailable</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:05:37 GMT [<filer>:
Auth02:warning]: Cannot connect to server. Socket connect error: Resource
temporarily unavailable</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:06:37 GMT [<filer>:
Auth03:warning]: Cannot connect to server. Socket connect error: Resource
temporarily unavailable</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:07:37 GMT [<filer>:
Auth09:warning]: Cannot connect to server. Socket connect error: Resource
temporarily unavailable</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:12:57 GMT [<filer>:
vscan.server.connecting.disconnect:info]: CIFS: Vscan server <Scanner>
deregistered and will be removed from the list of available vscan \
servers.</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:12:57 GMT [<filer>:
OffloadWorker06:info]: Connection with <Scanner> terminated</span></font>
<br>
<font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Tue
Jul 20 03:12:57 GMT [<filer>: vscan.dropped.connection:warning]: CIFS:
Virus scan server <Scanner> (123.456.789.123) has disconnected from the
filer.</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:12:57 GMT [<filer>:
vscan.server.connectedNone:warning]: CIFS: Virus scanning is enabled but no
vscan (anti-virus) servers are connected to the filer.</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 03:13:27 GMT [<filer>:
vscan.server.connectedNone:warning]: CIFS: Virus scanning is enabled but no
vscan (anti-virus) servers are connected to the filer.</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Tue Jul 20 04:00:00 GMT [<filer>:
kern.uptime.filer:info]: 4:00am up 20:03 0 NFS ops, 5024835 CIFS
ops, 46 HTTP ops, 0 DAFS ops, 0 FCP ops, 0 iSCSI ops</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>There is a bug note (Bug ID: 81237) on the NOW site
which states '</span></font><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'>This is believed to be a
problem with a vendor's anti-virus software.'</span></font><o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Has anyone else had these issues ? If so, is
there a work around or a fix ?</span></font> <o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Thanks,</span></font> <o:p></o:p></p>
<p style='margin-left:.5in'><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'>Jason</span></font> <br>
<font size=2 face=Verdana><span \
style='font-size:10.0pt;font-family:Verdana'>-----------------------------------<br> \
Jason Palmer <Team Leader><br> Messaging & Storage Implementation<br>
MCI [EMEA]<br>
-----------------------------------<br>
[e]: <u> <font color=blue><span \
style='color:blue'>jason.palmer@uk.mci.com</span></font></u></span></font><br> <font \
size=2 face=Verdana><span \
style='font-size:10.0pt;font-family:Verdana'>[i]: </span></font><u> \
</u><u><font size=2 color=blue face=Verdana><span style='font-size:10.0pt; \
font-family:Verdana;color:blue'><a href="http://www.mci.com/uk" \
target="_blank">http://www.mci.com/uk</a></span></font></u><br> <font size=2 \
face=Verdana><span style='font-size:10.0pt;font-family:Verdana'>-----------------------------------</span></font>
<o:p></o:p></p>
</div>
</body>
</html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic