Troubleshooting Netbackup connections

Use "bpclntcmd -pn":
When the -pn option is run on a NetBackup client, it initiates an inquiry to NetBackup master server, and the master server returns information about the requesting client to the requesting client. The information returned is, in effect, how the master server "identifies" the client server.

Good response looks like this:
C:\Program Files\VERITAS\NetBackup\bin>bpclntcmd -pn
expecting response from server master_server_01
client_01.domain.com client_01 192.168.0.30 3815

In effect, the master server identifies the requesting client as a machine named "client_01" with an IP address of 192.168.0.30.

Problem:
C:\Program Files\VERITAS\NetBackup\bin>bpclntcmd -pn
expecting response from server master_server_01
client_01.domain.com *NULL* 192.168.0.30 3815

If the output showed *NULL* for the NetBackup client name (as shown below), the client is not configured in a policy and does not show up in the image database.

Reference: http://seer.entsupport.symantec.com/docs/286620.htm

Disabling and undo-ing A-SIS for Netapp R200

Solution

To increase the size of an A-SIS enabled volume beyond the maximum limit for A-SIS, the A-SIS service must be turned off and the changes undone. Undoing A-SIS will re-inflate the file system and could require more disk space than is available in the A-SIS enabled volume. There is no way to expand the volume size until the undo is completed, so the recommended course of action is to create and use a temporary volume and migrate data necessary to free enough space for the re-inflation to complete.

WARNING: Once the volume is grown beyond the maximum size supported for A-SIS, A-SIS will be disabled.

WARNING: Disabling A-SIS will require additional disk space as files will be undeduplicated.

WARNING: Using "sis undo" may require rebaselining of snapmirror or snapvault relationships.

Complete the following steps to undo A-SIS: Note: The undo must be performed from diag mode. The sis undo command can take some time (hours) based on how much data is being un-deduped and the filer type.

• Enter df -s .
  Note the space saved, this is the amount of space that will be necessary for the re-inflation.
• Enter df .
  Note the available space. If it is not greater than or equal to the space saved found in the previous output, space will need to be cleared using other methods to complete the undo--for example, deleting Snapshots or migrating data.
• Enter sis off .
• Enter priv set diag.
• Enter sis undo .

Once the undo is complete, the volume will be a normal FlexVol volume that can be expanded.

Applies to:
All NearStore models
Data ONTAP 7G
A-SIS

Reference: kb35784 from Netapp.

Netapp oplocks

Reference: http://now.netapp.com/NOW/knowledge/docs/ontap/rel7251/html/ontap/smg/provisioning/task/t_oc_prov_oplocks.html#t_oc_prov_oplocks

Installing SQL 2005 Reporting Services

This install assumes 2 server, one for SQL and one for web/IIS part.

1. Install IIS with ASP.NET enabled to webserver.
2. Install SQL 2005 Std Ed to SQL server, database components only.
3. Install SQL 2005 Reporting services on the webserver.
4. Create SQL Account for SSRS to use to access database (see http://msdn.microsoft.com/en-us/library/ms159133.aspx) on SQL server.
5. Run the SSRS Configuration Wizard and point databases to SQL server.
6. Add users to SSRS access permissions.

Update: installed Oracle drivers to access Oracle database reports, but needed to add permissions (Users group RX) to C:\Oracle install folder so that IIS could access DLL files.

References: http://msdn.microsoft.com/en-us/library/ms159689(SQL.90).aspx
http://msdn.microsoft.com/en-us/library/ms143736(SQL.90).aspx

Adding Sysprep to VIC server

Reference: http://vmetc.com/2009/08/18/how-to-add-sysprep-to-vmware-vcenter-for-vm-customizations-vmware-converter-also/

SQL 2005 build versions after SP2

Reference: http://support.microsoft.com/kb/937137/LN/

Unattended Execution Account

If using a local account for this, I found I had to give it the User Right "Allow log on locally". Otherwise, the account is just a normal Users group account on the Reporting Services test server. SQL 2005, SSRS, and IIS are installed on the same (virtual) server.

Permissions and User Rights for IIS 6.0

Reference: http://support.microsoft.com/kb/812614

Hung VM or VM fails to power on with swap file errors

1. Login to each ESX host (via Putty or similar app)
2. Run

   ps -efwww | grep vm_guest_name

   on each host to determine which host has the hung VM process.
3. If you get something like this: (This is the process that has your file open in ESX)
   
   root 1092 1 0 10:33 ? 00:00:00 /usr/lib/vmware/bin/vmkload_app /usr/lib/vmware/bin/vmware-vmx -ssched.group=host/user -# name=VMware ESX Server;version=3.5.0;licensename=VMware ESX Server;licenseversion=2.0 build-82663; -@ pipe=/tmp/vmhsdaemon-0/vmx6a6188c22e804baf; /vmfs/volumes/48729e6e-7cf3b2df-6ca0-001ec9b1b30a/vm_guest_name/vm_guest_name.vmx
   
   
4. Kill the process using: kill -9 pid, where pid is 1092 in example above.
5. You should be able to power on the VM now.

ESX Logs

1. Login to ESX host (via Putty or similar app)
2. Review files in /var/logs

Expanding a VM-Windows partition

1. Power off the VM
2. Expand VMDK file to final size: One method is to use VIC, Edit settings, select Hard Disk, then change New Size.
3. The other is to login to ESX host and use command line tool /usr/sbin/vmkfstools –X #G pathtofile/file.vmdk, where #G is the final disk size and file.vmdk is the vmdk of the virtual server.
4. Edit settings of VM and mount the Gparted-livecd-*.iso to the VM.
5. Go into Options tab and change Boot Options to for entry into BIOS setup screen and make CD-ROM boot before the hard disk.
6. OK to close VM Properties.
7. Power on VM
8. Once within GParted tool, use the defaults until into the GUI
9. Click on current partition
10. Select Resize
11. Drag arrow to expand partition
12. Click Resize
13. Click Exit and Shutdown VM
14. Edit settings again to remove the Gparted ISO
15. Power on VM
16. Login via VIC console and Windows will find new hardware.Reboot the VM to complete process.

Reference: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=994

Netbackup Duplication jobs fail with Status Code 191

Cause:

• More files are open than the memory cache manager can handle. As a result, the cache manager has exhausted the available paged pool memory.
• The backup program has tried to back up a file whose size is larger than the backup API can access on that version of the operating system. This has the same result (that is, the paged pool is exhausted).

Solution:

• On the Windows 2003 server in question, 2 Registry Keys (PoolUsageMaximum, PagedPoolSize) may be created to fine-tune how the operating system manages Paged Pool Memory.
• First create PoolUsageMaximum regkey and set to DWORD value = 60. If that does not work, try value = 40. If that works, increase the value by 25% until it stops working. Go back to last working value.
• If backups are still failing, use PagedPoolSize with DWORD (hex) value = FFFFFFFF. Do not set this to any other value if you are using the /3GB switch. If you are running /3GB and /PAE together, do not set this setting without extensive testing.

References: http://seer.entsupport.symantec.com/docs/295563.htm

http://support.microsoft.com/kb/304101/en-us

Impact of "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting"

Reference: http://support.microsoft.com/kb/811833

Netbackup Service account user rights

To use a domain account as a service account to run the Netbackup Client Service and Netbackup Remote Manager and Monitor Service, these are the user rights required:

• Act as part of the operating system
• Create a token object
• Debug Programs???
• Logon as a service
• Replace a process level token

Reference: http://seer.entsupport.symantec.com/docs/270086.htm

Gizmodo guide to cables

Nice guide to the latest cable types and it includes pictures too!

Reference: http://gizmodo.com/5030810/giz-explains-an-illustrated-guide-to-every-stupid-cable-you-need

Performance tuning SQL 2000/2005 on Windows 2003

Maximize Data Throughput for Network Applications

If the Maximize data throughput for network applications network connection option is selected, the operating system gives priority to applications that perform buffered I/O operations by caching their I/O pages in file system cache. This option may limit memory available to SQL Server for normal operation. Use "Minimize memory used".

Reference: http://technet.microsoft.com/en-us/library/ms178067(SQL.90).aspx

Proper SQL server settings

Do not use priority boost for clustered servers that are running SQL Server 7.0, SQL Server 2000, or SQL Server 2005.

Reference: http://support.microsoft.com/kb/319942

ASPNET account rights

Default permissions for the ASPNET account

The ASPNET account is created as a local account when you install ASP.NET. The ASPNET account belongs only to the Users group on that computer. Therefore, the ASPNET account has all of the rights that are associated with the Users group and can access any resources that the Users group is granted access to. The ASPNET account inherits the following user rights from the Users group.

It also is granted:

• Log on as a service
• Log on as a batch job
• Deny log on locally

Reference: http://support.microsoft.com/kb/317012

Microsoft Office Sharepoint 2007 service accounts

This is about the "best" reference article I could find on MOSS 2007 service accounts, but IMO, that's not saying much... :-)

Reference: http://technet.microsoft.com/en-us/library/cc263445.aspx

Uninstalling Java from Windows

1. Download the Microsoft Installer Clean Up utility file and save it on your desktop.
2. Double click on executable file. The installation process will start. Follow the instructions accordingly.
3. Once installation process is over, go to Start -> All Programs -> Run Windows Install Clean Up utility.
4. This will launch the Windows Installer Clean Up utility dialog box
   Under the Installed products list, select the desired Java version that you want to remove.
5. Click Remove and Exit

Reference: http://www.java.com/en/download/help/uninstall_java.xml

User rights for IIS Service Account

Windows user rights

Access this computer from the network

• Administrators
• ASPNET
• IUSR_MachineName
• IWAM_MachineName
• Users

Adjust memory quotas for a process

• Administrators
• IWAM_MachineName
• Local service
• Network service

Bypass traverse checking

• IIS_WPG
  

Allow log on locally (see Note)

• Administrators
• IUSR_MachineName

Deny logon locally

• ASPNET

Impersonate a client after authentication

• Administrators
• ASPNET
• IIS_WPG
• Service

Log on as a batch job

• ASPNET
• IIS_WPG
• IUSR_MachineName
• IWAM_MachineName
• Local service

Logon as a service

• ASPNET
• Network service

Replace a process level token

• IWAM_MachineName
• Local service
• Network service

Note: If the Users group and the Everyone group must be removed from the Bypass traverse checking permissions, add the IIS_WPG group to permit IIS to function as expected.

Reference: http://support.microsoft.com/kb/812614
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/3648346f-e4f5-474b-86c7-5a86e85fa1ff.mspx?pf=true