Appliance Controller Release Notes Release 2.0.1.2 Supported Product Appliance Controller Date August 2018 Contents Release Notes: Appliance Controller 2.0.1.x 2 New Features for Controller 2.0.1.x 4 6 The Appliance Controller 2.0.1.x Release Notes provides the following: 2018 Quantum Corporation. All rights reserved. Your right to copy this manual is limited by copyright law. Making copies or adaptations without prior written authorization of Quantum Corporation is prohibited by law and constitutes a punishable violation of the law. Artico, Be Certain (and the Q brackets design), DLT, DXi, DXi Accent, DXi V1000, DXi V2000, DXi V4000, DXiV-Series, FlexSpace, FlexSync, FlexTier, Lattus, the Q logo, the Q Quantum logo, Q-Cloud, Quantum (and the Q brackets design), the Quantum logo, Quantum Be Certain (and the Q brackets design), Quantum Vision, Scalar, StorageCare, StorNext, SuperLoader, Symform, the Symform logo (and design), vmpro, and Xcellis are either registered trademarks or trademarks of Quantum Corporation and its affiliates in the United States and/or other countries. All other trademarks are the property of their respective owners. Products mentioned herein are for identification purposes only and may be registered trademarks or trademarks of their respective companies. All other brand names or trademarks are the property of their respective owners. Quantum specifications are subject to change. 6-68362-19, Rev A, August 2018
Release Notes: Appliance Controller 2.0.1.x Release Notes: Appliance Controller 2.0.1.x New Features for Controller 2.0.1.x on page 4 on page 6 For help with troubleshooting Appliance Controller issues, see the Troubleshooting Tips and FAQs section of the Appliance Controller Documentation Center. Upgrades If you are currently running Appliance Controller 1.4.1.x or 2.0, follow the task to upgrade offline from the local /var/upgrade directory. This upgrade method provides the most direct way to upgrade to the latest version. In addition, it ensures you can perform future upgrades using the remote upgrade repository. After upgrading to 2.0.1.x, Quantum's remote upgrade repository will be up-to-date, allowing future upgrades to occur online from the remote upgrade repository. For help with upgrading your Appliance Controller, see the Upgrades section of the Appliance Controller Documentation Center. StorNext Connect Compatibility StorNext Connect NAS App vs. Appliance Controller NAS Commands You can use the new NAS App in StorNext Connect to configure supported NAS features, such as NAS share management and cluster creation. The NAS App provides a graphical user interface (GUI). The Appliance Controller provides many of the same functions, but accesses those functions from a command line interface (CLI). For information about using the StorNext Connect NAS App, see About the NAS App page on the StorNext Connect Doc Center. The StorNext Connect Manage NAS App is not compatible with StorNext NAS 2.0.1.x. Instead use the new NAS App V1 with StorNext NAS 2.0.1.x. For more information, see the StorNext Connect Documentation Center. Release Notes 2
Release Notes: Appliance Controller 2.0.1.x Supported Software, Hardware, and Licensing Models The following section provides information regarding supported platforms and licensing models. Appliance Controller Compatibility Appliance Controller 2.0 and later is supported with StorNext 5.4.0 and later. We strongly recommend upgrading to Appliance Controller 2.0.1.x before upgrading to StorNext 6.0. Refer to the appropriate appliance Release Notes for installing the latest StorNext release. In addition, you must be running StorNext 6 to take advantage of the DNS load distribution feature in scaleout NAS clustering. Supported Quantum Hardware Appliance Controller 2.0.1.x is supported on the following Quantum appliances: Appliance CentOS Version (server hardware) Xcellis Workflow Director CentOS7 (R630 Artico CentOS7 (R630 CentOS6 (R520 Release Notes 3
New Features for Controller 2.0.1.x Appliance CentOS Version (server hardware) Xcellis Foundation CentOS7 (R630 Xcellis Workflow Extender CentOS7 (R630 CentOS6 (R520 G300 CentOS6 (R520 M-Series (M44x, M66x, and Pro Foundation) CentOS6 (R520 Note: If you want to run thestornext NAS on Xcellis Workflow Director, Xcellis Workflow Extender, G300 Gateways, or M-Series MDCs, contact your Quantum Account Manager to ask about obtaining a StorNext NAS license. Licensing and Enablement StorNext NAS 1.3.0 and later is a licensed feature. Use StorNext 5.3.0 or later to install the license. For Xcellis Foundation, and Artico systems, StorNext NAS licenses are pre-installed on the appliance. For Xcellis Workflow Director (R630), Xcellis Workflow Extender and G300 Gateway systems, and Pro Foundation, M660, and M440 Metadata Appliances, you must purchase add-on StorNext NAS licenses, and then install these licenses on each node running NAS management services. For systems running the StorNext GUI (Xcellis Workflow Director, Xcellis Foundation, Artico, Pro Foundation, M660, and M440) install the StorNext NAS license on the license page in the StorNext GUI. See the Obtain and Install StorNext Licenses GUI-based Appliances page of the Appliance InfoHub Doc Center. For Xcellis Workflow Extender, and G300 Gateway systems, you will need to apply the license from the command line Service Menu of the appliance. See the Obtain and Install StorNext Licenses Quantum Appliances Without a StorNext GUI page of the Appliance InfoHub Doc Center. New Features for Controller 2.0.1.x Appliance Controller 2.0.1.x releases include the following: Release Notes 4
New Features for Controller 2.0.1.x Online Upgrades This release includes updates to enhance the upgrade process to ensure error-free online upgrades (i.e. YUM repository upgrades). Scale-Out NAS Clustering A scale-out NAS cluster provides clients direct access to both SMB and NFSv3 shares from any node within the cluster. In addition, a scale-out NAS cluster manages both health monitoring and failover for the NAS cluster nodes. Of the supported StorNext NAS cluster configurations, scale-out NAS clusters offer the best possible performance and reliability. Scale-out NAS clusters can be made up of any combination of the following components: Xcellis Workflow Director, Xcellis Workflow Extender, and G300 systems Appliances runniing CentOS7 and CentOS6 StorNext 6 and StorNext 5.4 Up to 16 cluster nodes In addition, scale-out NAS clusters support NAS failover for NFSv3 and SMB protocols. You also can take advantage of DNS load distribution to evenly distribute client connections to nodes within a NAS cluster, facilitating greater network bandwidth and better redistribution results after a NAS failover occurs. AD Authentication Improvements You can now apply advanced options to your AD authentication configuration, such as configuring an AD machine organizational unit (OU) to which to limit authentication. Additional Supported SMB Options With the is release, the following SMB share options and global share options have been added to the list of supported SMB share options: New SMB Share Options hide dot files hide unreadable hide unwriteable files max connections New SMB Global Share Options client signing guest account ntlm auth restrict anonymous server signing unix extensions windbind request timeout Release Notes 5
The following tables present notes and fixed issues for Appliance Controller releases. Table 1: Appliance Controller 2.0.1.2 HYDRA-3426 HYDRA-3259 Issue: 2.0.x requires StorNext 5.4.0 or later. This was not programmatically enforced, which could result in a failed upgrade. Resolution: A pre-install check has been added to ensure Appliance Controller 2.0.1.x is being installed on the required, minimum StorNext Platform. Issue: Under some circumstances, keepalived, on CentOS 6, was starting with invalid arguments. Resolution: This issue has been fixed. Table 2: Appliance Controller 2.0.1.1 HYDRA-2963 Issue: Under some circumstances, very large cluster environments might experience issues due to an aggressive timeout value. Resolution: The timeout value has been increased. Table 3: Appliance Controller 2.0.1 KNOWN LIMITATION Lock recovery is NOT supported for NFSv4 clients running CentOS version 7.4. Workaround Verify that all clients are running CentOS versions 6.4, 6.5, 6.6, or 6.7. Only these versions have been validated in supporting lock recovery. HYDRA-2849 Issue: winbind writes spurious messages to /var/log/messages. Resolution: Added winbind rpc only = yes to the Global section of the smb.conf file to correct this issue. Release Notes 6
Table 3: Appliance Controller 2.0.1 HYDRA-2748 HYDRA-2633 HYDRA-2539 Issue: SMB named streams with Samba 2.6.8 do not work properly in Appliance Controller 2.0.0. Users cannot write data to a file system using macos Finder when named streams are enabled. Resolution: Upgrade to Appliance Controller 2.0.1 to resolve this issue. Issue: The commands share delete and nascluster reset fail to remove the cluster ID extended file attributes (xattr). As a result, future share or cluster creations are blocked because of the presence of the xattr. Resolution: When you delete a share or reset NAS authentication to factory defaults, the xattr is now removed. Issue: If snmpd is enabled, it can log errors verbosely. Resolution: Changed the default snmpd.conf file to prevent verbose error logging. In addition, changed the snmpd.conf file to prevent the logging of each client connection. Table 4: Appliance Controller 2.0 KNOWN LIMITATION If you use DNS load distribution with NFSv3 clients, lock recovery during failover may not be honored. Workaround All NFSv3 clients must mount shares through the same predesignated VIP from the VIP pool to ensure safe lock recovery during failover. Do not use the Master VIP as the predesignated VIP. HYDRA-1343 NOTE If you choose to manage user access to SMB shares with ACLs and OpenLDAP authentication rather than using SMB options such as admin users, valid users, and invalid users you must enable SID mapping. After enabling SID mapping, you can disable it if you no longer want to use ACLs with your OpenLDAP server. However, when you disable SID mapping under these circumstances, ACLs that have already been applied to folders and subfolders will remain, and in most cases, will be enforced. Release Notes 7
Table 4: Appliance Controller 2.0 HYDRA-1565 NOTE When you upgrade, you may see errors and warnings related to replacing or obsoleting some packages. Resolution As long as the upgrade is successful, you can ignore these errors and warnings. They are expected. Release Notes 8
Table 4: Appliance Controller 2.0 HYDRA-1622 NOTE The Appliance Controller 2.0 release updates Samba packages to 4.6.8. This version of Samba includes security patches to disable non-secure clients. Some older Linux CIFS clients are affected by these security patches, and cannot mount SMB shares. Resolution To resolve this issue, we recommend obtaining a newer SMB client for your Linux machines. If that is not possible, then use the following workaround. Workaround 1. Log in to the controller console from the NAS cluster's master node. 2. At the prompt, enter the following to update your SMB shares with the smb global ntml auth option: share change smb global ntlm auth = yes Example > share change smb global ntlm auth = yes Broadcasting share config-sync to NAS cluster... Waiting for nascluster_share_config_sync to complete on node 10.42.xx.yy Share global successfully changed > share show SMB global options: ntlm auth = yes 2 shares: 1: tstsmbshare1 smb /stornext/snfs1/smbshare public = no,writable = yes 2: tstsmbshare2 smb /stornext/snfs2/smbshare public = no,writable = yes HYDRA-707 Issue: Need SMB share options to hide directory structures that users that do not have access to. Resolution: Added support for hide unreadable and hide unwriteable files SMB share options. Release Notes 9
Table 4: Appliance Controller 2.0 HYDRA-981 Issue: SNMP community string character limitations were not being enforced. Resolution: In Appliance Controller 1.4.1.2, SNMP community string values are limited to no less than 1 and no more than 255 of the following ASCII characters: Lowercase characters (a-z) Uppercase characters (A-Z) Numbers (0-9) Dash (-) Underscore (_) HYDRA-1005 HYDRA-1191 HYDRA-1396 HYDRA-1465 HYDRA-1468 Issue: Need SMB share option to hide dot file attributes. Resolution: Added support for hide dot files SMB share option. Issue: Upgrades can take longer than anticipated because SMB var/log/samba is not ever cleaned. Resolution: SMB var/log/samba is now cleaned daily to remove files that are older than 7 days. Issue: A gap in HAProxy stats is occurring with the following error: 2017-03-25-20:00:03.668130 node01 Keepalived_vrrp8826: Process 6789 didn't respond to SIGTERM Resolution: The Appliance Controller 2.0 contains an update from Keepalived 1.2.13 to Keepalived 1.3.5, which resolves this issue. Issue: Need a way to refresh NAS authentication mappings on-demand to reflect the current status of the LDAP server. Resolution: The new auth refresh command enables customers to refresh NAS authentication mappings on-demand to reflect the current state of their LDAP server. Issue: Unable to gather specific SNFS file attributes without manually opening the file. Resolution: Appliance Controller 2.0 updates enables the SNFS VFS plugin to use the new StorNext CvApis. Release Notes 10
Table 4: Appliance Controller 2.0 HYDRA-1578 HYDRA-1606 HYDRA-1781 HYDRA-1802 HYDRA-1991 HYDRA-1992 HYDRA-2113 Issue: ACL SID mapping may not work with LDAP authentication. Resolution: Upgrade to Appliance Controller 2.0 to resolve this issue. Issue: Appliance Controller does not support advanced options for AD authentication configurations. Resolution: Appliance Controller 2.0 now supports advanced options for AD authentication configurations. Issue: Need a way to activate or inactivate Unix extensions on SMB shares. Resolved: Added support for unix extensionsglobal SMB share option. Issue: Need to provide a way to allow / disallow trusted AD domains from accessing the Appliance Controller. Resolution: Appliance Controller 2.0 now supports an Allow Trusted Domains advanced option. Issue: The Appliance Controller fails to start because postgres is still running. Resolution: When the Appliance Controller is started, postgres is now restarted if it is already running, resolving this issue. Issue: After NAS failover, the local LDAP configuration may no longer be valid. Resolution: Upgrade to Appliance Controller 2.0 to resolve this issue. Issue: A large amount of smbd processes may require too much available memory and cause the kernel to panic. Resolution: The Appliance Controller now supports an upper-limit default of 1200 concurrent smbd processes to resolve this issue. Release Notes 11