Problems trying to move data from Windows to NAS using Robocopy or Emcopy

Question

We are trying to do a cutover from a Windows File Server to the Celerra NAS CIFS server. In preperation, I am trying to use Robocopy or Emcopy to copy the data from our Windows File Server to the NAS. I am trying to copy several Terabytes of data. Most copies will usually copy around 75% of the data, but there is always a group of data that will not move. It seems as though it is data with NTFS permission oddities, but even after correcting them, I often still cannot copy the data. Here is a sample entry that is created from Robocopy: 2007/02/26 16:20:23 ERROR 1307 (0x0000051B) Copying NTFS Security to Destination Directory d:\departments\administration\Allen\ This security ID may not be assigned as the owner of this object. 2007/02/27 15:10:09 ERROR 1308 (0x0000051C) Copying NTFS Security to Destination Directory d:\departments\administration\year end\2001\ This security ID may not be assigned as the primary group of an object. Here is a sample entry that is created from Emcopy: Fixing security of z:\administration\Shortcut to Premium Summary Data.lnk z:\administration\Shortcut to Premium Summary Data.lnk: Security Descriptor error: Unable to set SD Error 1307: This security ID may not be assigned as the owner of this object. Fixing security of z:\administration\TAIM52ST.rpt z:\administration\TAIM52ST.rpt: Security Descriptor error: Unable to set SD Error 1308: This security ID may not be assigned as the primary group of an object. I have tried taking ownership of the files being copied and tried removing invalid user entriy SID's and restarting the copy for the failed folders/files, but it still will not copy. I have tried using Robocopy and Emcopy to perform the task, and get same results with both. If I perform this task between 2 Windows file servers I have no problems. Only when I try to copy the data to the NAS do I have the problems. Any thoughts?

Rainer_EMC · Accepted Answer

sure. you're very welcome.after all you're a customer so you deserve our best support

briantrotter · Answer

Excellent....thank you. Let me look in to that and I will report back in a while with the results.

Rainer_EMC · Answer

Most probably what happened is that some of the files are either owned by an unresolvable SID or have ACLs that reference unresolvable SIDs.

That happens if you delete AD accounts instead of just disabling them.

When you copy the files to the Celerra it tries to do a reverse mapping to find out the user/group name from the SID and if that fails the default action is send an error. It does that to find a corresponding Unix account - in case you want to do multi-protocol access.

You can look into these Celerra params to make it easier with ACLs:

param cifs acl.mappingErrorAction=1
param cifs acl.retryAuthSid=600
param cifs acl.FailOnSDRestoreError=0

They are explained in the Celerra Parameters Guide, which you can get from Powerlink.

For files or directories that are owned by an unresolvable SID you have no choice - you have to fix them using take owership before you can copy them to Celerra.

However it is much better to cleanup the data before migrating.

EMC professional service has a tool to quickly scan a share and report any unresolvable SIDs and other things that might cause a problem. Just call your friendly EMC TS contact and ask him if you could please have a copy of fsaudit or fsScan/fsReport

with emcopy make sure you have a up-to-date version - latest rev is 2.29

briantrotter · Answer

ral67:You were right. I was able to get those tools, and it is fixing the problem.Thank you for your help.Can you post another message so I can mark it as Correct so you get the points?Thanks.

briantrotter · Answer

Thank you very much for your help!

MattV2 · Answer

Hi, I'm trying to locate the tools (fsaudit or fsScan/fsReport) and not having any luck. An Engineer was out the other day replacing an HD and he hadn't heard of them. I searched Powerlink and only this thread shows up. Can you point me in the right direction?

Thanks,
Matt

Celerra

Was this post helpful?