UNSOLVED

Kushi2

updated

17 years ago

K

Kushi2

1 Rookie

•

82 Posts

0

1664

June 19th, 2009 07:00

File system share auditing

Hi All,

How can we activate auditing for a file system share on celerra. We have customer wanted her files to be audited on NAS so that, it can help her divine who all are logging in to that share.

please let me know all possible ways and procedures of auditing a file system. I really appreciate if any one can provide me documentation on this.

Thanks in advance.
  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    457

    0

    Posted June 19th, 2009 07:00

  • mikesk813

    1 Rookie

    •

    21 Posts

    457

    0

    Posted June 19th, 2009 14:00

    Can the EMC Celerra Management be downloaded somewhere here?
    I don't have copy of my CD's.
  • mikesk813

    1 Rookie

    •

    21 Posts

    457

    0

    Posted June 19th, 2009 16:00

    Perfect dynamox!
  • Kushi2

    1 Rookie

    •

    82 Posts

    457

    0

    Posted June 21st, 2009 01:00

    Thanks for the response Dynamox.

    Can we be able to audit a particular file system on the DM. After reading the document you provided, i understood that only CIFS users and objects(i think CIFS servers) can be audited. Please correct me if i'm wrong or if i missed anything in the documentation.

    I didn't see any file system audited in a windows 2000 & 2003 server. I dont want all the logins to the DM be audited but what i want is logins to a particular filesystem mounted on a VDM needs to be audited.
  • Kushi2

    1 Rookie

    •

    82 Posts

    457

    0

    Posted July 9th, 2009 14:00

    Hi everyone,
    I am able to connect to the Datamover from Celerra Managment console. Using 'Datamover security Settings' snapin, when we clicked on audit policy, an error poped up

    "Server Error: GPO service is not available"

    What does this actually mean? Do we need to enable or actiave any GPO settings. What do we actually need to do?
  • Kushi2

    1 Rookie

    •

    82 Posts

    457

    0

    Posted July 12th, 2009 13:00

    Could someone suggest me on the error "GPO service is not availabl"....


    Thanks in advance..
  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    457

    0

    Posted July 12th, 2009 13:00

    did you connect to one of the CIFS servers ?
  • BillStein-Dell

    Moderator

    •

    285 Posts

    457

    0

    Posted July 13th, 2009 04:00

    You may have GPOs disabled on the Data Mover. You can check this using the server_param command. Assuming server_2:
    server_param server_2 -facility cifs -info gpo
    

    This will tell you several things:
    server_2 :
    name                    = gpo
    facility_name           = cifs
    default_value           = 1
    current_value           = 1
    configured_value        =
    user_action             = reboot DataMover
    change_effective        = reboot DataMover
    range                   = (0,1)
    description             = 1=enable GPO (default), 0=disable GPO)
    

    Notice the default value and the current value. Make sure that the current value is 1. If it is 0, that is your issue. To set it to 1, use the server_param command again:
    server_param server_2 -facility cifs -modify gpo -value 1
    

    Notice that "change_effective" says "reboot DataMover" which means that once you make the change, you will need to reboot that Data Mover in order for the change to become effective.
  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    89

    0

    Posted July 14th, 2009 12:00

    you can do a rolling reboot. Enable GPO on standby datamover, reboot it. Failover from primary to standby and enable GPO there, reboot. Lastly fail back from stanby to primary datamover. CIFS clients will lose connectivity during failover/failback ..so as far as they are concerned ..it's an outage. NFS clients are more forgiving, they will queue IOs and reconnect once datamover is back online. Do you have iSCSI clients ?