CIFS File Copy Error 'The security ID structure is invalid'

Question

I am dumping some NTFS shares from a Windows machine to a new EMC CIFS share using Windows utility ROBOCOPY. For some of the folders I get the error "The security ID structure is invalid"
I donot get this error when dumping files between Microsoft Windows Machines.
Its only between Windows and EMC. I tried using Emcopy tool, but the same error appears. The reason for this error is some of the folders have SID's, whose userID is deleted in the windows domain. How can I resolve this error?

Rainer_EMC · Accepted Answer

If your really care about what the checkpoints are displayed you can change the data movers timezone

You would have to use the server_date timezone CLI command - the syntax is a bit awkward since it requires a POSIX date string. see attached

The next DART version will automatically apply the control station time zone config to the data movers

Rainer_EMC · Answer

Thats normal.By default Celerra wont accept unresolable SIDs - I think thats because they make it difficult to do user mapping for.If you cant cleanup the SIDs you can config the Celerra to accept them.Just set the params acl.mappingErrorAction to 3 and acl.FailOnSDRestoreError to zero on the target DM.You might also want to bump acl.retryAuthSid to 600 in order to not overload the data mover if you have a lot of them.pls have a look at Knowledgebase emc46968 & emc61330

Avilt1 · Answer

Thank You Rainer, Great, its working fine.
One more query, I am using Microsoft tool Robocopy to mirror the data from my Windows Server to EMC. In this tool I am using "Mirror" option which copies only the changes to the target and also removes files from destination if they donot exist at the source to make it a true sync copy. This tool works fine between Windows Machines but does not work with EMC, it copies all the files from Windows system to EMC irrespective of whether the source file is changed or not. Do I have to make any changes on Data Mover to make it work?

Does EMcopy tool comes with the above features?

Thank You

Rainer_EMC · Answer

I think that might be because of a difference in time resolution between Celerra and Windows.

If you cant fix it with a robocopy option you can set the parameter cifs.nanoroundoff to 1 and restart CIFS or reboot the data mover

Typically we set this when using roaming profiles

I guess that emcopy is a bit smarter there than robocopy, but am not sure.

Avilt1 · Answer

I am using NTP time server on all Windows as well as EMC device. Anyway I will try the cifs.nanoroundoff setting. Also on Checkpoint why is it using EST timezone instead of local timezone?Thanks

dynamox · Answer

Note from Cisco website ...they talk about WAFS but also mention Celerra:

EM Copy for Celerra
For correct handling of file timestamps, use EMCopy with Celerra instead of Robocopy. While Windows uses timestamps down to nanoseconds, Celerra truncates the timestamp to the seconds that Robocopy cannot handle. The EMCopy.exe tool is available in the EMC NAS application CD.

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/wafs/v30/release/notes/rnote303.html

Avilt1 · Answer

Thank You.In Robocopy I am using 'Mirror' option which copies only the changes to the target and also removes files from destination if they donot exist at the source to make it a true sync copy. Is this option supported in EMCopy?

sagle · Answer

If you use the /FFT option with robocopy, it should copy only the changed files.

dynamox · Answer

yes, what you will see with robocopy (at least i have in my experience) is that when you run it the first time ..it will copy everything to your target location, then if you run it again ..it will do a full copy again even though files on the source did not change, that's why I've been using emcopy for any type of repetitive sync jobs.

Avilt1 · Answer

Setting 'nanoroundoff -value 1' did not solve my problem.In Robocopy /FFT is a great option./FFT Assume FAT File Times (2-second granularity). Useful for copying to third-party systems that declare a volume to be NTFS but only implement file times with a 2-second granularity.Does EMcopy removes files from the destination if they donot exist at the source?Thank You

Rainer_EMC · Answer

Does EMcopy removes files from the destination if
they donot exist at the source?

I think thats what the /purge option is for

see the Using EMC Utilities for the CIFS Environment for explanation on emcopy, sharedup and other utils

Rainer_EMC · Answer

Also on Checkpoint why is it using EST
timezone instead of local timezone?

most probably you havent set the data mover timezone

Its purely cosmetical though - scheduled checkpoints will be taken according to the controlstation time

Avilt1 · Answer

Rainer,I have the option to specify timezone on Control Station but not on the Data Movers. I have set my local timezone on the Control Station.According to Help Menu:Data Movers have the same time zone as the Control Station in the Celerra system. You cannot set the time zone on an individual Data Mover using Celerra Manager. Note: If you set the time and date on a Data Mover with an NTP server configured, the time is gradually reset to the time as broadcast by the NTP server

Celerra

CIFS File Copy Error "The security ID structure is invalid"

Was this post helpful?