Solved!
Go to SolutionCIFS Migration - Sharedup and Lgdup
Migrating a production Win2k3 CIFS server (Physical) to Celerra NS120 Dart 5.6 (vdm) but has issues with sharedup command with /SD option.
This is what I get when I run the sharedup command.
---------------------------------------------------------------------------------------------------------------------------------------------
sharedup \\CAAPPCLU1 \\CAAPPCLU1TMP Z: /SD /FI:Z_InputFILE.txt /LOG+:D:\sharedup\Z_InputFILE.log
SHAREDUP 02.02
Copyright (C) 2008, All Rights Reserved,
by EMC Corporation, Hopkinton MA.
Source server:CAAPPCLU1 5.2
Target server:CAAPPCLU1TMP 5.0 EMC-SNAS
Getting local group(s) from \\CAAPPCLU1...
Getting local group(s) from \\CAAPPCLU1TMP...
The local groups "ConfigMgr Remote Control Users" and "CAAPPCLU1_ConfigMgr Remote Control Users" do not exist on the \\CAAPPCLU1TMP server !
The local groups "HelpServicesGroup" and "CAAPPCLU1_HelpServicesGroup" do not exist on the \\CAAPPCLU1TMP server !
The local groups "Offer Remote Assistance Helpers" and "CAAPPCLU1_Offer Remote Assistance Helpers" do not exist on the \\CAAPPCLU1TMP server !
The local groups "TelnetClients" and "CAAPPCLU1_TelnetClients" do not exist on the \\CAAPPCLU1TMP server !
Please use lgdup utility to duplicate the missing local user(s)
or group(s) from \\CAAPPCLU1 to \\CAAPPCLU1TMP.
Unable to initialize the Security Descriptor translator
*****************************************************************************
SHAREDUP source:CAAPPCLU1 target:CAAPPCLU1TMP
Summary results:
Elapsed time: hours: 00, mins: 00, secs: 00
No share found on drive Z: of server CAAPPCLU1.
Log file: D:\sharedup\Z_InputFILE.log
*****************************************************************************
-------------------------------------------------------------------------------------------------------------------------------------
Per customer, they are not using local groups at all on the physical server.If I connect to celerra, the local groups "ConfigMgr Remote Control Users", "HelpServicesGroup" etc are already there in the Celerra CIFS Server(CAAPPCLU1TMP) and the user account which I use has all administrative privileges and its been part of source and target CIFS servers.
If I run the command without /SD option, the shares will be created in Celerra with out the share permissions .Whats wrong here and how can I run the command with /SD option? Any one has any idea whats wrong with this?
The input file has been properly edited to reflect the filesystem names.
@Drive:Z
:Share3;Share3;C:\CAAPPCLU1_Z\Z\Share3\Share3;
:share2;share2;C:\CAAPPCLU1_Z\Z\Share2;
:Share1;Share1;C:\CAAPPCLU1_Z\Z\Share1;
I also tried to run lgdup but it was failing with some errors. On the local physical host, I have granted permissions "Generate security audits" and Manage Auditing security log" to the user account which I was using. But on the Celerra I dont have an option to grant these permissions to the user account. emc46968 has been applied.
I ran lgdup command.
lgdup -p -v \\CAAPPCLU1 \\CAAPPCLU1TMP -l lgdup.log and it gave error,
LGDUP 02.01
Copyright (C) 2008, All Rights Reserved,
by EMC Corporation, Hopkinton MA.
\\CAAPPCLU1 option is unknown ?Duplicates the local groups and the privileges database from
a NT server to an EMC2 Celerra file server.
Usage: LGDUP [-r] [-p] [-s] [-v] [-l[+] logFile] [-nopriv]
source: reference local groups netbios name ( \\name)
target: target netbios name
Options:-----------------------------------------------------------------------------------------------------------------------
The server \\CAAPPCLU1 is a virtual server on the two physical cluster servers, \\CAAPPCLU2 and \\CAAPPCLU3 . I tried replacing \\CAAPPCLU1 with active node on the cluster \\CAAPPCLU3 and got the same error.
I was unable to find the name \\CAAPPCLU1 on the Active directory but I could find physical servers in there. I have given granted generate security audits etc permissions to the user account from the active node on the cluster.
I got a similar problem with lgdup while trying to use sharedup and i was successful with an output file
D:\EMCopy\CifsTools\sharedup\nt\sharedup.exe \\MIW2k3FSPRE38 \\PNT-NAS-P01-AG.PRENATAL.LOCAL L: /SD /ND:PRENATAL /FO:D:\EMCopy\MIW2k3FSPRE38_DiscoL-out.txt /log+:D:\EMCopy\MIW2k3FSPRE38_DiscoL.log
SHAREDUP 02.02
Copyright (C) 2008, All Rights Reserved,
by EMC Corporation, Hopkinton MA.
Source server:MIW2K3FSPRE38 5.2 File Server Windows Server 2003 R2
Target server:PNT-NAS-P01-AG 5.0 EMC-SNAS:T5.6.48.7
*****************************************************************************
SHAREDUP source:MIW2K3FSPRE38 target:PNT-NAS-P01-AG
Summary results:
Amount of share(s) stored in file D:\EMCopy\MIW2k3FSPRE38_DiscoL-out.txt: 10
Log file: D:\EMCopy\MIW2k3FSPRE38_DiscoL.log
*****************************************************************************
but i got an error while using the in file, what can be the problem?
D:\EMCopy\CifsTools\sharedup\nt\sharedup.exe \\MIW2k3FSPRE38 \\PNT-NAS-P01-AG.PRENATAL.LOCAL L: /SD /ND:PRENATAL /FO:D:\EMCopy\MIW2k3FSPRE38_DiscoL-out.txt /log+:D:\EMCopy\MIW2k3FSPRE38_DiscoL.log
SHAREDUP 02.02
Copyright (C) 2008, All Rights Reserved,
by EMC Corporation, Hopkinton MA.
Source server:MIW2K3FSPRE38 5.2 File Server Windows Server 2003 R2
Target server:PNT-NAS-P01-AG 5.0 EMC-SNAS:T5.6.48.7
*****************************************************************************
SHAREDUP source:MIW2K3FSPRE38 target:PNT-NAS-P01-AG
Summary results:
Amount of share(s) stored in file D:\EMCopy\MIW2k3FSPRE38_DiscoL-out.txt: 10
Log file: D:\EMCopy\MIW2k3FSPRE38_DiscoL.log
*****************************************************************************
Rainer_EMC
6 Operator
•
8645 Posts
1212
0
Posted March 25th, 2011 14:00
Just add the account you are using to the local Adminstrator group of the Celerra CIFS server by using the MMC that manages local groups
Since by default the AD Administrators group where the CIFS server was joined is added there it also works to use an account that is a member of this domains domain administrators group
Rainer_EMC
6 Operator
•
8645 Posts
1212
0
Posted March 25th, 2011 16:00
I am a bit confused as to what lgdup has to do with auditing?
lgdup per se has nothing to do with auditing.
The user account running lgdup should have the follwing rights:
--Member of either ‘Administrators’ or ‘Account Operators’ Local Groups on Source & Target Servers
--Member must have “Generate Security Audits” & “Manage Auditing & Security Log” Privileges within the NT Domain(s)
Rainer_EMC
6 Operator
•
8645 Posts
1212
0
Posted December 18th, 2009 12:00
the arguments need to be in the *exact* order, try
lgdup -p -v -l lgdup.log \\CAAPPCLU1 \\CAAPPCLU1TMP
there is a complete manual about emcopy/lgdup/sharedup - see
Using EMCUtilities for the CIFS Environment
available on the Celerra Doc CD or from Powerlink
Rainer