Amazon Ad

Featured Post

Tuesday, October 06, 2009

Default NAS Vendors Passwords

NAS Default Passwords:

NetApp
CLI/GUI - root, no password

Dell EMC Unity / Dell EMC Celerra
CLI/GUI - nasadmin, nasadmin

BlueArc
SMU Web Manager - admin, nasadmin
SMU CLI - manager, nasadmin
SMU - root, nasadmin
Titan Server (CLI) - supervisor, supervisor

Dell EMC Isilon OneFS
CLI/GUI - root, a

LSI OnStor
CLI/GUI - root, back-door

Thursday, July 23, 2009

How to quickly create a Solaris zone?

sh-3.00# zonecfg -z web1-zone
web1-zone: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:web1-zone> create
zonecfg:web1-zone> set zonepath=/export/home/zones/web1-zones
zonecfg:web1-zone> set autoboot=true
zonecfg:web1-zone> add net
zonecfg:web1-zone:net> set address=10.1.70.233
zonecfg:web1-zone:net> set address=10.1.70.233/24
zonecfg:web1-zone:net> set physical=bge1
zonecfg:web1-zone:net> end
zonecfg:web1-zone> set pool=email-pool
zonecfg:web1-zone> verify
zonecfg:web1-zone> commit
zonecfg:web1-zone> exit
sh-3.00#

Install the zone:

sh-3.00# zoneadm -z web1-zone install
Preparing to install zone .
Creating list of files to copy from the global zone.
Copying <2528> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
Preparing to initialize <1023> packages on the zone.
Initialized <1023> packages on zone.
Zone is initialized.
Installation of these packages generated warnings:
The file
contains a log of the zone installation.

Reboot the zone:

[root@cookie:~]>zoneadm -z web1-zone boot

Connect to the zone:

sh-3.00# zlogin -C web1-zone

Thursday, July 16, 2009

How to change a Solaris zone netmask?

So it's all in /etc/zones/.xml but they tell you not to touch it.

In here:
http://forums.sun.com/thread.jspa?threadID=5075758

They tell you to run this:

zonecfg -z email-zone
zonecfg:email-zone> remove net address=10.1.30.232
zonecfg:email-zone> add net
zonecfg:email-zone:net> set address=10.1.70.232/24
zonecfg:email-zone:net> set physical=bge0
zonecfg:email-zone:net> end
zonecfg:email-zone> commit
zonecfg:email-zone> exit

Use this format for new-ip to configure a specific subnet mask: 10.1.30.232/24.

Saturday, April 11, 2009

Where to find ONTAP manpages

You can download the latest documentation set in zip format, and then install it right on a filer, and access it from the web.

Sunday, February 01, 2009

Debugging security with sectrace

A new command called "sectrace" can help debug security problems (e.g. user cannot chown a file with NT ACL).

sectrace add -a -path /vol/software

will produce meesages such as these:

Sun Feb 1 13:10:52 IST [jim: sectrace.filter.allowed:info]: [sectrace index: 2] Access allowed because 'Synchronize, Read Attributes' permission (0x100080) is granted on file or directory (Access allowed by an explicit access control entry) - Status: 1:58720452:0:0 - 10.1.20.107 - NT user name: support\administrator - UNIX user name: root(0) - Qtree security style is NTFS and NT ACL is set on file/directory - Path: /vol/software/

Typically there is no need to use -a since you only want to debug DENY replies.