Use the commands in this section for managing AD, Trustee Index and hard links media upgrade.
This section provides the commands to upgrade the NSS pools to AD or Trustee Index media.
When an NSS32 pool is migrated to OES 2015 or later, all its active volumes are automatically media upgraded to support hard links. For more information, see Automatic Hard Link Media Upgrade
All NSS32 pools must be AD media upgraded in order to support AD users. NSS64 pools are by default Trustee Index media (includes AD media) upgraded. Use the commands in this section to upgrade the existing NSS32 media to support AD users or to enable all future NSS32 pool creation to be automatically created with the AD user support.
Upgrades the specified NSS pool to support AD media.
NOTE:Media upgrading a shared NSS pool in a mixed-node cluster environment is not recommended. You can still force the upgrade using the /ForceMedia switch. After the forceful media upgrade, the pool will not load in nodes older than OES 2015.
The following commands can also be used to upgrade the existing NSS32 pool media to support AD users.
Upgrades the file system media format of a particular NSS32 pool to support AD users.
Any NSS32 shared pools created after running this command will be AD media enabled.
Any NSS32 local pools created after running this command will be AD media enabled.
Any NSS32 pools (shared or local) created after running this command will be AD media enabled.
NOTE:Media upgrading a shared NSS32 pool in a mixed-node cluster environment is not recommended. You can still force the upgrade using the /ForceADMedia switch. After the forceful media upgrade, the pool will not load in nodes older than OES 2015. For more information, see Behavior of an NSS Pool Resource with Media Version 44.03 and Above in Mixed Node Cluster
in the OES 23.4: OES Cluster Services for Linux Administration Guide.
The commands placed in the nssstart.cfg file persists across server reboots. If the NSS commands are added in the nssstart.cfg file, ensure those commands are not prefixed with nss.
If these commands are issued from the command line, it persists only till a server reboot.
Sets the file system media format of all the newly created pools (shared or local) to support AD media.
Sets the file system media format of all the newly created shared pools to support AD media.
Sets the file system media format of all the newly created local pools to support AD media.
NOTE:Media upgrading a shared NSS pool in a mixed-node cluster environment is not recommended. You can still force the upgrade using the /ForceMedia switch. After the forceful media upgrade, the pool will not load in nodes older than OES 2015.
The following commands can also be used to enable all future NSS32 pool creation to be automatically created with the AD user support.
Upgrades the file system media format of all the newly created NSS32 pools (shared or local) to support AD users.
Upgrades the file system media format of all the newly created NSS32 shared pools to support AD users.
Upgrades the file system media format of all the newly created NSS32 local pools to support AD users.
NOTE:Media upgrading a shared NSS32 pool in a mixed-node cluster environment is not recommended. You can still force the upgrade using the /ForceADMedia switch. After the forceful media upgrade, the pool will not load in nodes older than OES 2015. For more information, see Behavior of an NSS Pool Resource with Media Version 44.03 and Above in Mixed Node Cluster
in the OES 23.4: OES Cluster Services for Linux Administration Guide.
Use the following commands to AD-enable the volumes. Only after AD-enabling, the AD users will be able to access the NSS resources based on the access rights assignment. Before running these commands, ensure that the pools on which these volumes exist are NSS AD media-upgraded.
AD-enables the specified volume.
AD-enables all the volumes. The volumes whose pools are not AD media-upgraded are ignored.
Enables or disables the automatic AD-enabling of new volumes.
The commands placed in the nssstart.cfg file persists across server reboots. If this NSS command is added in the nssstart.cfg file, ensure this command is not prefixed with nss.
If this command is issued from the command line, it persists only till a server reboot.
Default: Off
Range: On or Off
Examples
To enable automatic AD-enabling of new volumes, enter
nss /EnableNewVolumeToAD
To disable automatic AD-enabling of new volumes, enter
nss /NoEnableNewVolumeToAD
The OES Storage Services (NSS) volumes use the Trustee Model to secure access to directories and files. The Trustee Model allows you to assign users as trustees of directories and files on the NSS volumes. The model’s inheritance feature allows the subdirectories and files to inherit rights from a parent directory or masks the rights that should not be inherited. The Trustee Index tree stores the list of directories and files in the NSS volumes that are having trustees and IRF (Inherited Rights Filter). The ZIDs (iNode number) in NSS consists of ACLs (with trustees and IRFs) that are stored in volumes in the Trustee Index tree. These ZIDs helps you to scan the trustee information for OES URM, NFARM, and so on at any given path in the NSS volume. Therefore, NSS requires a media upgrade to pool and volume to support Trustee Index. For more information on Trustee Model, see Section 6.5.3, OES Trustee Model.
Use the nsscon commands in this section to upgrade the existing NSS media to support Trustee Index or to enable all future NSS pool creation to be automatically created with the Trustee Index support.
Upgrades the specified pool to support Trustee Index media.
The commands placed in the nssstart.cfg file persists across server reboots. If the NSS commands are added in the nssstart.cfg file, ensure those commands are not prefixed with nss.
If these commands are issued from the command line, it persists only till a server reboot.
Sets the file system media format of all the newly created pools (shared or local) to support Trustee Index media.
Sets the file system media format of all the newly created shared pools to support Trustee Index media.
Sets the file system media format of all the newly created local pools to support Trustee Index media.
NOTE:Media upgrading a shared NSS pool in a mixed-node cluster environment is not recommended. You can still force the upgrade using the /ForceMedia switch. After the forceful media upgrade, the pool will not load in nodes older than OES 2015 SP1.
To create encrypted volumes with an AES-256 encryption algorithm, use the NSS64 pool type with pool media upgraded to AES. The AES-256 encryption algorithm has longer key size and provides additional security compared to AES-128. Use the nsscon commands in this section to upgrade the existing NSS media to support AES or to enable all future NSS pool creation to be automatically created with the AES Index support.
Upgrades the specified pool to support AES media.
The commands placed in the nssstart.cfg file persists across server reboots. If the NSS commands are added in the nssstart.cfg file, ensure those commands are not prefixed with nss.
If these commands are issued from the command line, it persists only till a server reboot.
Sets the file system media format of all the newly created pools (shared or local) to support AES media.
Sets the file system media format of all the newly created shared pools to support AES media.
Sets the file system media format of all the newly created local pools to support AES media.
NOTE:Media upgrading a shared NSS pool in a mixed-node cluster environment is not recommended. You can still force the upgrade using the /ForceMedia switch. After the forceful media upgrade, the pool will not load in nodes older than OES 23.4.
In NSS32 and NSS64 pool type, the pool status can be determined by the media version. Table A-1 provides information about the NSS32 and NSS64 pool type media version.
Table A-1 NSS Pool Media Version Details
|
Pool Media Version |
Description |
|---|---|
|
XX.YY |
|
|
43.02 |
|
|
43.03 |
|
|
44.02 |
|
|
44.03 |
|
|
45.00 |
|
|
45.01 |
|
|
51.00 |
|
|
52.00 |
|
|
52.01 |
|
|
53.00 |
|
Similarly, the volume status can also be determined by the media version. Table A-2 provides information about the NSS volume media version.
Table A-2 NSS Volume Media Version Details
|
Volume Media Version |
Description |
|---|---|
|
38.05 |
|
|
41.00 |
|
|
41.01 |
|
Use the following command to automatically upgrade the NSS32 and NSS64 pools to latest pool media (AES). The automatic pool media upgrade happens only if the pool is AD media enabled. Whenever an AD media enabled pool is activated, the pools are automatically upgraded to support latest media.
Media upgrading an NSS32 pool to AD, automatically upgrades the pool to latest media. However, creating an NSS64 pool, will automatically creates the pool with latest media.
The commands placed in the nssstart.cfg file persists across server reboots. If this NSS command is added in the nssstart.cfg file, ensure this command is not prefixed with nss.
If this command is issued from the command line, it persists only till a server reboot.
Enables or disables the pool media to upgrade automatically. If enabled, the pools are automatically upgraded to support the latest media (AES).
Default: Off
Range: ZLSS, ZLSS64, or both (with comma separated)
Examples
To enable the pool media to upgrade automatically for NSS32 pool, enter
nss /PoolMediaAutoUpgrade=ZLSS
To enable the pool media to upgrade automatically for NSS64 pool, enter
nss /PoolMediaAutoUpgrade=ZLSS64
To enable the pool media to upgrade automatically for both NSS32 and NSS64 pool, enter
nss /PoolMediaAutoUpgrade=ZLSS,ZLSS64
To disable the pool media to upgrade automatically for NSS32 pool, enter
nss /NoPoolMediaAutoUpgrade=ZLSS
To disable the pool media to upgrade automatically for NSS64 pool, enter
nss /NoPoolMediaAutoUpgrade=ZLSS64
To disable the pool media to upgrade automatically for both NSS32 and NSS64 pool, enter
nss /NoPoolMediaAutoUpgrade=ZLSS,ZLSS64
NOTE:For clustered pools, the automatic pool media upgrade occurs only in homogeneous cluster environment. For local pools, the automatic pool media upgrade occurs both in homogeneous and mixed-node cluster environment.
Use the commands in this section for managing hard links capability for NSS volumes.
When an NSS32 pool is migrated to OES 2015 or later, all its active volumes are automatically media upgraded to support hard links.
Once all the volumes in the pool are upgraded to support hard links, the pool media version is incremented. If there are deleted and inactive volumes, they are not media upgraded; therefore, the pool media version is not incremented. To know the pool media version, execute the PoolMediaVersion command in NSSCON.
Use the commands in this section to enable or disable the Hard Links attribute for an NSS volume. The Hard Links attribute cannot be set or viewed in NSSMU or in the Storage plug-in to iManager.
Enables the Hard Links attribute for the specified volume. This enables hard links to be created on the volume.
Sets the Hard Links attribute for all NSS volumes on the server. This enables hard links to be created on any volume on the server. Any given hard link can point only to a file on the same volume.
Disables the Hard Links attribute for the specified volume. Existing hard links continue to function, but no new hard links can be created on the specified volume.
Disables the Hard Links attribute for all NSS volumes on the server. Existing hard links continue to function, but no new hard links can be created on any NSS volume on the server.
You can view a report of hard links for a file to identify its primary link and the hard link that becomes the primary link if the primary link is deleted. For information, see Section 25.7, Viewing Hard Links for a File.
View information about the primary link and hard links for a file on an NSS volume.
Replace path with the file’s primary link path or one of its hard link paths where you want to start the search. Replace filename.ext with the actual filename of the file, including the extension.
Use the /volumes option to verify that the Hard Links attribute is enabled.
View a list of NSS volumes on the server and information about them. In the Attributes column, the HardLinks attribute is listed if it is enabled for the volume.