Hell.

From users who have newly started using SVM of Netapp system.

We have reports from some users that they are getting a message that "file.x is locked for UserA's editing" but UserA isn't editing that 'file.x’.

This problem sometimes occurs, but we can not reproduce the problem.

Have anyone seen any similar problems?

We want to solve this problem.

Please help us.

Hi guys,

we recently migrated from 7-mode 8.1 to CDOT 9.1P8. Now we have issues with very old Linux/Irix/HP machines that they can't mount the CIFS shares via SMB. Errors are not really giving details on the client and the NetApp event log does not show errors either. E.g. at the IRIX I'm trying to access the share with smbclient 2.0.0 via "/usr/samba/bin/smbclient //ip/volume/qtree password -U user -W domain" and error says "session setup failed: code 0"  ... ok, I did a few adjustments on smbclient and also tried to create a local SVM user to use for connection without success.

Then I've tried all possible vserver CIFS volume options and vserver cifs security options, tested after each change again without success. But when I disable SMB1 at least I'm then getting an error at client and NetApp event log.

Am I missing something, or is my new NetApp just incompatible with "very old" SMB version? Created a new vfiler on the old 8.1 NetApp - no issues.

Any help/advise appreciated

many thanks,

Robert

Here is the deal, we have an older FAS3210 that we thought would be a great repo for backups. NFS vols only go up to 50TB so I thought that we would create a 2nd volume to utilize all of the space. After creating the first volume I mounted it on my Linux backup server with no issues. I created the 2nd volume gave it the same permissions as the first volume in the exports and attempted to mount it. I added it to the fstab to ensure that it auto mounts on reboot and then ran a mount -a. It didn't error out however when I attempted to browse to the directory it hung and then timed out saying permission denied. This is odd since it's exactly the same as the first volume from a permission standpoint. 

Here are the mount options from the client: 172.x.x.x:/vol/NFS1 /mnt/veeam_repo02 nfs rsize=65536,wsize=65536,timeo=14,intr

From the client logs I see: 

kernel: nfs: server 172.x.x.x OK

nfs: server 172.x.x.x not responding, still trying

From the netapp I tried the following after using the "OnCommand System Manager" to create the volume and adjust the export settings

exportfs -io rw=172.x.x.x /vol/NFS1 and I see this node when I got to the rdfile /etc/rmtab but still i'm not able to mount this. I have tried mounting it from other servers and that is unsuccessful as well. The original mount is working great but for the life of me I can't figure out how to mount this second volume. Any ideas?

BTW i'm not that familiar with Netapp so please dumb down any suggestions for me. Thanks.

Recently during a conversation with my manager regarding VMware Infrastructure Navigator he asked me if there was a comparable NetApp tool. I said I'd look into it. I'm not aware of a similar tool that would track all the dependencies of CIFS/NFS shares or volumes for all the NAS clients within the enterprise. I'm aware of most of the command line tools that i could use to check the sessions or clients or network connectivity to the vfiler, node or SVM but not sure if there is a tool for this in the NetApp suite of tools.  I'm wondering how everyone else keeps track of what is talking to the filers before a migration to new heads etc. Thank you for your wisdome and assistance. 

I'm embarrased to even put this question on the community forums but here it is:

I'm working with an MSP (managed services provider)  to upgrade the ONTAP versions to 8.3.2 (and then 9.x). There is a concern there are software dependencies for servers that map an SMB share or mount and NFS volume. Honestly, I can’t think of any such dependency, but their insistence has me very confused. For FC, iSCSI and FCoE I can see that there could be software dependencies like the DSM, host utilities or SnapDrive etc. But on a host that simply mounts an NFS volume?  Maybe if the server is using a really old version of SMB or NFS but I see even 9.1/9.2 supports SMB 1.0…so again, no idea what the concern is.

Is anyone aware of any dependencies on NFS/CIFS related to a DataONTAP upgrade to 8.3.2 or 9.1?

Hi all,

a customer ran into an issue using XCP for NFS v 1.3-8 with the following output:

[root@FRVSM028 xcp]# ./xcp sync -id xcp_data 
XCP 1.3-8e0a9ec; (c) 2018 NetApp, Inc.; Licensed to user [None] until Tue Dec 11 21:04:14 2018

xcp: Index: {source: srcserver:/data, target: targetserver:/data_new} 


xcp: new sync for id 'xcp_data': WARNING: Incomplete sync index 'server:/xcp_data/sync/sync.index'.  Removing and trying again... 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.seld' (sync batch): nfs3 REMOVE 'file.seld' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.seld' (sync batch): nfs3 REMOVE 'file.seld' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.out' (sync batch): nfs3 REMOVE 'file.out' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.rsmout' (sync batch): nfs3 REMOVE 'file.rsmout' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.mode' (sync batch): nfs3 REMOVE 'file.mode' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.stat' (sync batch): nfs3 REMOVE 'file.stat' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.esav' (sync batch): nfs3 REMOVE 'file.esav' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.par' (sync batch): nfs3 REMOVE 'file.par' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder2/file1.err' (sync batch): nfs3 REMOVE 'file1.err' in 'targetserver:/data_new/folder2': nfs3 error 2: no such file or directory 
xcp: removeT1: WARNING: error removing 'targetserver:/data_new/folder1/file.DSP' (sync batch): nfs3 REMOVE 'file.DSP' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: diff 'xcp_data': Found 310 completed directories and 3 in progress 
xcp: sync 'xcp_data': 3,972 reviewed, 3,720 checked at source, 252 gone, 252 file.gone, 1 change, 2 modifications, 3,717 reindexed, 252 errors, 1.38 MiB in (518 KiB/s), 858 KiB out (315 KiB/s), 2s. 
xcp: sync 'xcp_data': Starting search pass for 5 modified/in-progress directories... 
xcp: sync phase 2: Rereading the 5 modified/in-progress directories... 
xcp: sync phase 2: WARNING: rescan 'srcserver:/data/folder2': nfs3 GETATTR 'srcserver:/data/folder2': nfs3 error 70: stale filehandle 
xcp: sync renames: WARNING: move2td targetserver:/data_new/folder1/file.par to targetserver:/data_new/folder1/_XCP_tmp: nfs3 RENAME 'file.par' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 
xcp: ERROR: nfs3 RENAME 'file.par' in 'targetserver:/data_new/folder1': nfs3 error 2: no such file or directory 

Syncs were successful before the failure, and no changes were made in the meantime.

I am aware of the stale filehandle which causes operations with folder2 to fail, and files that aren't on the target server can't be removed or renamed either. But are they the result of xcp's "Incomplete sync index"? How can that happen and how do I prevent this in future runs?

Thanks a lot in advance!

Hi,

I need to put together a DR strategy for our CIFS data. We're moving to NetApp 9.x.

I think SVM-DR is out of the question because the arrays at the primary and secondary sites will be on different subnets. If it were possible I think the other drawback is that all the configured mirrors will kick off at the same time. I'm thinking that all the concurrent mirror activity may casue an issue down the road as we scale.

I'm thinking of re-pointing DNS after a switchiver to the secondary, i.e. netapp-pri DNS record is re-configured with the IP address of netapp-sec, but I'm concenred about the DNS cache on the servers and clients not flushing in a timely manner.

What's my best option please?

Thanks

Hello,

Our customer wants to use Kerberos and NFS4.1 ACL on their Infinite Volume… I could not found any documentation about FreeIPA or Redhat IDM. I simulated their infrastructure on our demo environment and stuck on enable Kerberos on lif. I ‘m using following steps for configuration.

1. Create host on freeipa
2. Create NFS service on freeipa
3. Get keytab for nfs service on freeipa
4. Create the Kerberos realm on ONTAP
5. Get a following error when trying to enable Kerberos on lif on ONTAP

Failed to enable NFS Kerberos on LIF "nfs_node1_P1". Keytab import failed due to missing keys. Keys for encryption types "des-cbc-crc,des3-cbc-sha1,aes128-cts-hmac-sha1-96,aes256-cts-hmac-sha1-96" are required for Vserver "nfs_test" but found no matching keys for service principal name "nfs/ntap.demo.demo@demo.demo". Generate the keytab file with all required keys and try again. (Error: 13001)

demo::> nfs show -vserver nfs_test -fields permitted-enc-types
vserver permitted-enc-types
-------- ------------------------
nfs_test des,des3,aes-128,aes-256

[root@ipa-1 ~]# klist -kte /root/HOST_NFS_CERT.keytab
Keytab name: FILE:/root/HOST_NFS_CERT.keytab
KVNO Timestamp Principal
---- ------------------- ------------------------------------------------------
4 01/17/2018 09:10:45 host/ntap.demo.demo@demo.DEMO (aes256-cts-hmac-sha1-96)
4 01/17/2018 09:10:46 host/ntap.demo.demo@demo.DEMO (aes128-cts-hmac-sha1-96)
4 01/17/2018 09:10:46 host/ntap.demo.demo@demo.DEMO (des3-cbc-sha1)
4 01/17/2018 09:10:46 host/ntap.demo.demo@demo.DEMO (des-cbc-crc)
7 01/17/2018 09:11:06 nfs/ntap.demo.demo@demo.DEMO (aes256-cts-hmac-sha1-96)
7 01/17/2018 09:11:06 nfs/ntap.demo.demo@demo.DEMO (aes128-cts-hmac-sha1-96)
7 01/17/2018 09:11:06 nfs/ntap.demo.demo@demo.DEMO (des3-cbc-sha1)
7 01/17/2018 09:11:06 nfs/ntap.demo.demo@demo.DEMO (des-cbc-crc)

Hi,
I am trying to test NFS performance on big files (between 0.5 and 4 Go) using a single server and a NetApp filer connected to a switch with 10Gb links (nobody else is using the server and filer).

Test server:
- Dell PowerEdge R320 (CPU: Xeon CPU E5-2407 0 @ 2.20GHz, RAM: 16Go)
- Centos 7.4.1708
- local SSD disk

NetApp filer:
- FAS 2554 (24 FSAS disks)
- CDOT 9.3RC1
- 2 aggregates of 11 disks
- 1 FlexGroup volume writing to the 2 aggregates in the same time

A very simple test (copy data from local SSD disk to filer) shows the following results:

# umount /ssd1 ; umount /mnt/filer/vol_test ; mount /ssd1 ; mount /mnt/filer/vol_test
# time cp -r /ssd1/data /mnt/filer/vol_test/data
real 2m3.690s
user 0m0.031s
sys 0m19.842s
# du -sk /ssd1/data
14186364 /ssd1/data
-> 112 MB/s

This seems to be quite slow. How could I debug this ?

The default configuration is used except (thanks to this thread https://community.netapp.com/t5/Network-Storage-Protocols-Discussions/NFS-performance-on-10Gb-link/td-p/26036):
- rsize & wsize mount options:
rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=x.x.x.x,mountvers=3,mountport=635,mountproto=udp,local_lock=none,addr=x.x.x.x
(tcp-max-xfer-size parameter has been set to 1048576 on the filer instead of default value of 65536)

- /etc/sysctl.conf
net.core.rmem_default=524288
net.core.wmem_default=524288
net.core.rmem_max=16777216
net.core.wmem_max=16777216
net.ipv4.tcp_rmem=4096 524288 16777216
net.ipv4.tcp_wmem=4096 524288 16777216
net.ipv4.ipfrag_high_thresh=524288
net.ipv4.ipfrag_low_thresh=393216
net.ipv4.tcp_timestamps=0
net.ipv4.tcp_window_scaling=1
net.core.optmem_max=524287
net.core.netdev_max_backlog=2500
sunrpc.tcp_slot_table_entries=128
sunrpc.udp_slot_table_entries=128

Thanks,
Mathieu

Hi everyone,

i´ve created a cifs share and enabled fpolicy. 

Some of us have macs and using the finder tags. If I disable the fpolicy for the specific share, they are able to tag folders on their macs. But if its enabled, its not working.
Thats the tagging "feature" Mac Finder Tag

I´ve tried to find the problem by setting up a security trace filter without success.

Thats the output.

Share: *********
Path: /:AFP_AfpInfo
Win-User: *****\******
UNIX-User: root
Session-ID: 15035548830954498242
Node******* Security Style: NTFS and NT ACL
Access is allowed because the CIFS user is owner, explicit ACE grants requested access while opening existing file or directory. Access is granted for: "Read Control", "Read Attributes"

Any ideas?

Thanks!

Hello to all

I hold in the first one to excuse me beforehand for my English, I am French.

I would have a question to ask you about the implementation of a DS4243.
I would like to know if I can connect it on my server Dell with Perc H200e

Thaks a lot

Emmanuel

Hi All,

I would like to find out which entries in /etc/exports have bigger prio, when i set them on vol and qtree level.

Let's say that we have an exports configured as follows:

/vol/volume1/qtree1       -sec=sys,rw=hp-hosts-all:10.22.11.10:0.22.12,root=10.22.11.02

/vol/volume1/qtree2       -sec=sys,rw=hp-hosts-all:10.22.11.11:0.22.12,root=10.22.11.02

and I have a request to add rw permissions for /vol/volume1 which would look like these:

/vol/volume1/qtree1       -sec=sys,rw=hp-hosts-all:10.22.11.10:0.22.12,root=10.22.11.02

/vol/volume1/qtree2       -sec=sys,rw=hp-hosts-all:10.22.11.11:0.22.12,root=10.22.11.02

/vol/volume1                    -sec=sys,rw=linux-hosts-all

Does it mean that only linux-hosts-all netgroup users will see volume1 and it's qtrees exported?

I wan't to export the whole volume and just wondering if doing so won't take access rights to it's qtrees.

Thank You in advance!

Recently, in our environment one of our application groups has described a situation where one of their application servers running Windows 2012 R2 randomly loses connectivity to a NetApp filer running CDOT 8.2.3. P3. The share they use becomes unavailable by name but remain accessible by IP address. The share is available by name and IP on other clients. This seems to be a localized issue on this server. The server in question is a VM, and is running on an ESXi 5.5 update 3b is using version 9 of the Vmware hardware and tools. 

I haven't heard of this problem from any other application teams or business unit. Again seems to be isolated to this server. As mentioned the server is Windows 2012 R2 and our domain controllers are all Windows 2012 and two are Windows 2012 R2. I've looked into the posts around SID Compression and the KDC but we are running a version of code on this NAS that has that particular bug 649280 patched. 

I've created a script that the does several tests including netstats, pings and walking the file structure from a mapped drive and via UNC from calling a powershell command. The issue happens infrequently, about every 12-14 days and seems to exist from within an application or when the UNC is accessed via Windows Explorer (however I've yet to see this). I'm wondering if anyone out there has seen this issue in their environment. 

Thank you for your insights.

Regards,

McCranium

What's the file path/name character limit on ONTAP 9 for Windows 8.x clients please?

Any reference docs available?

Cheers

Hello

I have a A200 with ONTAP 9.3 and I need to add it to AD which uses LDAPS. I have enabled the Use start_tls for AD LDAP connection: true and we also imported the certificate. But the CIFS setup process fails

Error: Machine account creation procedure failed

  [  7810] Loaded the preliminary configuration.
  [  7865] Successfully connected to ip 149.x.x.x, port 88
           using TCP
  [  8056] Successfully connected to ip 149.x.x.x, port 389
           using TCP
  [  8134] Unable to start TLS: Connect error
  [  8134] Additional info: error:14090086:lib(20):func(144):reason(1
           34)
  [  8134] Unable to connect to LDAP (Active Directory) service on
           dc01.ad.neco.com
**[  8134] FAILURE: Unable to make a connection (LDAP (Active
**         Directory):AD.NECO.COM), result: 7652

Error: command failed: Failed to create the Active Directory machine account "FILE99". Reason: LDAP Error: Cannot establish a connection to the server.

What could be wrong? The time is in sync.

Thank you

Jan

I'm encountering an issue where I currently work in that we have this "Common" SMB share and the default behavior is that Everyone has access to view the root of this share. Requests for shared storage are satisfied by creating a folder within this Common share and assigning NTFS permissions to grant access.

This process has been in place for years, very few new shares have been created, but there are over 1000 folders within the share now.

This seems to be unsustainable because the volume is now over 20TB in size, so we are lacking restore granularity and snapshot deltas for replication purposes are fairly large as we even have applications using that share. (For example, we recently had a large portion of this share go missing and due to this lack of granularity, we couldn't perform SnapRestore as it would have affected too many other people not impacted by the data loss and it ended up taking days to restore from snapshots using "previous versions")

One of the most obvious solutions to this sprawling share is to use junction paths and mount additional volumes within the namespace, but that introduces other issues, such as not being able to browse previous versions as seamlessly. This feels "dirty" to me and seems like it could potentially cause problems with backup & recovery or data governance tools we use in the future possibly not being able to traverse the junction paths properly. It also opens up the possibility of having different protection policies applied to volumes mounted within the same share and causing confusion in regard to what level of data protection a user actually has.

While I have more NetApp experience than most of my peers in my current position, a large portion of my experience is in SAN as opposed to NAS, so I haven't seen many large NAS environments and I'm wondering what people do to manage this.

What would you do in this case? Do I need to get over my "fear" of junction paths and just start using them? If this is what people do, do you "promote" a folder to a volume with a junction path at some point or is a folder always a folder? If a folder is always a folder, how do you plan for that? Users don't often understand the full extent of their needs and may initially ask for 100 GB of storage and end up needing 5TB as their data grows.

I think I posted this on the wrong forum .. sorry 

hello.

i have just deploying a new SVM.

the files are stored as nfs security.

i use nis for the user managment.

the nfs export is working fine.

i am adding the  cifs export but cant make the name-mapping translate the ad users to nis.

looking into it, i have find that "name-service ns-switch modify -vserver svm_01 -database namemap -sources files,nis"

i cant make nis as database for namemap.

is there a way to make name map use nis?

thanks

I have a CIFS share on my FAS2040 that I want to migrate to a Windows Server. on the NetApp side the path is /vol/CIFS_VOL_Test./share On the windows side the UNC is \\server\test. I have created the file /etc/symlink.translations file and placed the following entry in it:

widelink /vol/CIFS_VOL_Test/share/* \\server\test\*

I have widelink enabled on the volume containing the share. When I display CIFS Shares the cifs share in question displays the following:

... widelinks supported
... strict symlink security disabled

when I access the cifs share on the netapp is does not redirect. What steps, if any, am I missing? 

Thank you for your assistance. 

Details: 

Model:   FAS270

Version: 7.3.7

Domain functional level: Windows server 2003

Forest functional level: Windows server 2003

DC2 is 2K12 R2

DC1 is 2K3 R2

cannot be able to configure FAS270 with active directory, please help.

Community rocks!!

-----------------------------------------------------

CIFS - Starting SMB protocol...
[FASNEW: cifs.homedir.badEntry:error]: CIFS: Bad entry /vol/vol0TESTDIR while processing home directory paths. Homedir path doesn't exist, discarding this entry.
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Starting DC address discovery for FOREST.
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 addresses using DNS site query (Default-First-Site-Name)..
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 addresses using generic DNS query.
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Starting WINS queries.
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 BDC addresses through WINS.
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 1 PDC addresses through WINS.
[FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- DC address discovery for FOREST complete. 2 unique addresses found.
[FASNEW: cifs.auditfile.enable.on:info]: ALF: CIFS auditing started.
[FASNEW: nbt.nbns.registrationComplete:info]: NBT: All CIFS name registrations have completed for the local server.
[FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC1: Connection terminated.
[FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC1: Unable to create NETLOGON pipe No Trusted Logon Servers Available - STATUS_NO_LOGON_SERVERS.
FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC2: Connection terminated.
[FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC2: Unable to create NETLOGON pipe No Trusted Logon Servers Available - STATUS_NO_LOGON_SERVERS.
Welcome to the FOREST.CORP (FOREST) Active Directory(R) domain.

----------------------------------------------------

FASNEW> cifs domaininfo
[FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- Starting AD LDAP server address discovery for FOREST.CORP.
[FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- Found 2 AD LDAP server addresses using DNS site query (Default-First-Site-Name).
[FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- Found 2 AD LDAP server addresses using generic DNS query.
[FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- AD LDAP server address discovery for FOREST.CORP complete. 2 unique addresses found.

NetBios Domain: FOREST
Windows 2003 Domain Name: forest.corp
Type: Windows 2003
Filer AD Site: Default-First-Site-Name

Not currently connected to any DCs
Preferred Addresses:
None
Favored Addresses:
192.168.1.111 DC1 PDCBROKEN
192.168.1.112 DC2 PDCBROKEN
Other Addresses:
None

Connected AD LDAP Server: \\dc2.forest.corp
Preferred Addresses:
None
Favored Addresses:
192.168.1.112
dc2.forest.corp
192.168.1.111
dc1.forest.corp
Other Addresses:
None

-------------------------------------------

FASNEW> cifs testdc
Using Established configuration
Current Mode of NBT is H Mode

Netbios scope ""
Registered names...
FASNEW < 0> WINS
FASNEW < 3> WINS
FASNEW <20> WINS
FOREST < 0> WINS
ACSFAS < 0> WINS
ACSFAS < 3> WINS
ACSFAS <20> WINS

 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 addresses using generic DNS query.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Starting WINS queries.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 BDC addresses through WINS.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 1 PDC addresses through WINS.

Testing all Primary Domain Controllers
found 2 unique addresses

found PDC DC2 at 192.168.1.112
found PDC DC1 at 192.168.1.111

Testing all Domain Controllers
found 2 unique addresses

found DC DC2 at 192.168.1.112
found DC DC1 at 192.168.1.111

--------------------------------------------------------

FASNEW> cifs resetdc
Disconnecting from domain FOREST...
Reconnecting to domain FOREST...

 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Starting DC address discovery for FOREST.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 addresses using DNS site query (Default-First-Site-Name)..
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 addresses using generic DNS query.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Starting WINS queries.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 2 BDC addresses through WINS.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- Found 1 PDC addresses through WINS.
 [FASNEW: auth.dc.trace.DCConnection.statusMsg:info]: AUTH: TraceDC- DC address discovery for FOREST complete. 2 unique addresses found.
 [FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC1: Connection terminated.
 [FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC1: Unable to create NETLOGON pipe No Trusted Logon Servers Available - STATUS_NO_LOGON_SERVERS.
 [FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC2: Connection terminated.
Reconnection failed!
 [FASNEW: cifs.server.infoMsg:info]: CIFS: Warning for server \\DC2: Unable to create NETLOGON pipe No Trusted Logon Servers Available - STATUS_NO_LOGON_SERVERS.
 [FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- Starting AD LDAP server address discovery for FOREST.CORP.
 [FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- Found 2 AD LDAP server addresses using DNS site query (Default-First-Site-Name).
 [FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- Found 2 AD LDAP server addresses using generic DNS query.
 [FASNEW: auth.ldap.trace.LDAPConnection.statusMsg:info]: AUTH: TraceLDAPServer- AD LDAP server address discovery for FOREST.CORP complete. 2 unique addresses found.

---------------------------------------------

FASNEW> options
acp.domain 0
acp.enabled off
acp.netmask 0
acp.port
auditlog.enable on (value might be overwritten in takeover)
auditlog.max_file_size 10000000 (value might be overwritten in takeover)
auditlog.readonly_api.enable off (value might be overwritten in takeover)
autologout.console.enable on (value might be overwritten in takeover)
autologout.console.timeout 60 (value might be overwritten in takeover)
autologout.telnet.enable on (value might be overwritten in takeover)
autologout.telnet.timeout 60 (value might be overwritten in takeover)
autosupport.cifs.verbose off
autosupport.content complete
autosupport.doit CHASSIS POWER SUPPLY FAIL: PS 1
autosupport.enable on
autosupport.from your.name@your.domain.com
autosupport.local.nht_data.enable off
autosupport.local.performance_data.enable off
autosupport.mailhost 192.168.1.114
autosupport.minimal.subject.id hostname
autosupport.nht_data.enable on
autosupport.noteto
autosupport.partner.to
autosupport.performance_data.enable on
autosupport.retry.count 15 (value might be overwritten in takeover)
autosupport.retry.interval 4m (value might be overwritten in takeover)
autosupport.support.enable on
autosupport.support.proxy
autosupport.support.to autosupport@netapp.com
autosupport.support.transport https
autosupport.support.url support.netapp.com/asupprod/post/1.0/postAsup
autosupport.throttle on
autosupport.to your.name@your.domain.com
backup.log.enable on
bootfs.chkdsk_enabled off (value might be overwritten in takeover)
cdpd.enable off (value might be overwritten in takeover)
cdpd.holdtime 180 (value might be overwritten in takeover)
cdpd.interval 60 (value might be overwritten in takeover)
cf.giveback.auto.cifs.terminate.minutes 5
cf.giveback.auto.enable off
cf.giveback.auto.terminate.bigjobs on
cf.giveback.check.partner off
cf.hw_assist.enable off
cf.hw_assist.partner.address
cf.hw_assist.partner.port 0
cf.nodestatus.enable off (value might be overwritten in takeover)
cf.quickloop.enable false (same value required in local+partner)
cf.takeover.change_fsid on
cf.takeover.detection.seconds 20
cf.takeover.on_disk_shelf_miscompare off
cf.takeover.on_failure on
cf.takeover.on_network_interface_failure off
cf.takeover.on_network_interface_failure.policy all_nics (same value in local+partner recommended)
cf.takeover.on_panic off
cf.takeover.on_short_uptime on
cf.takeover.use_mcrc_file off (value might be overwritten in takeover)
cifs.LMCompatibilityLevel 1
cifs.audit.account_mgmt_events.enable off
cifs.audit.autosave.file.extension
cifs.audit.autosave.file.limit 0
cifs.audit.autosave.onsize.enable off
cifs.audit.autosave.onsize.threshold 75%
cifs.audit.autosave.ontime.enable off
cifs.audit.autosave.ontime.interval 1d
cifs.audit.enable on
cifs.audit.file_access_events.enable on
cifs.audit.liveview.allowed_users
cifs.audit.liveview.enable off
cifs.audit.logon_events.enable on
cifs.audit.logsize 524288
cifs.audit.nfs.enable off
cifs.audit.nfs.filter.filename
cifs.audit.saveas /etc/log/adtlog.evt
cifs.bypass_traverse_checking on
cifs.client.dup-detection ip-address
cifs.comment
cifs.enable_share_browsing on
cifs.gpo.enable off
cifs.gpo.trace.enable off
cifs.grant_implicit_exe_perms off
cifs.guest_account
cifs.home_dir_namestyle domain
cifs.home_dirs_public_for_admin on
cifs.idle_timeout 1800
cifs.ipv6.enable off
cifs.max_mpx 50
cifs.ms_snapshot_mode xp
cifs.netbios_aliases ACSFAS
cifs.netbios_over_tcp.enable off
cifs.nfs_root_ignore_acl off
cifs.oplocks.enable off
cifs.oplocks.opendelta 0
cifs.per_client_stats.enable off
cifs.perfmon.allowed_users
cifs.perm_check_ro_del_ok off
cifs.perm_check_use_gid on
cifs.preserve_unix_security off
cifs.restrict_anonymous 0
cifs.restrict_anonymous.enable off
cifs.save_case on
cifs.scopeid
cifs.search_domains acs.co.il,forest.corp
cifs.show_dotfiles on
cifs.show_snapshot off
cifs.shutdown_msg_level 2
cifs.sidcache.enable on
cifs.sidcache.lifetime 1440
cifs.signing.enable on
cifs.smb2.client.enable off
cifs.smb2.durable_handle.enable on
cifs.smb2.durable_handle.timeout 16m
cifs.smb2.enable on
cifs.smb2.signing.required on
cifs.snapshot_file_folding.enable off
cifs.symlinks.cycleguard on
cifs.symlinks.enable on
cifs.trace_dc_connection on
cifs.trace_login on
cifs.universal_nested_groups.enable off
cifs.weekly_W2K_password_change off
cifs.widelink.ttl 10m
cifs.wins_servers 192.168.1.111
cksum_offload.gbeII off
console.encoding nfs
coredump.dump.attempts 2 (value might be overwritten in takeover)
disk.asup_on_mp_loss on (value might be overwritten in takeover)
disk.auto_assign on (value might be overwritten in takeover)
disk.maint_center.allowed_entries 1 (value might be overwritten in takeover)
disk.maint_center.enable on (value might be overwritten in takeover)
disk.maint_center.max_disks 84 (value might be overwritten in takeover)
disk.maint_center.rec_allowed_entries 5 (value might be overwritten in takeover)
disk.maint_center.spares_check on (value might be overwritten in takeover)
disk.powercycle.enable on (value might be overwritten in takeover)
disk.recovery_needed.count 5 (value might be overwritten in takeover)
dns.cache.enable on (value might be overwritten in takeover)
dns.domainname forest.corp (value might be overwritten in takeover)
dns.enable on (value might be overwritten in takeover)
dns.update.enable on (value might be overwritten in takeover)
dns.update.ttl 24h (value might be overwritten in takeover)
ems.autosuppress.enable on (value might be overwritten in takeover)
ems.autosuppress.exempt_events (value might be overwritten in takeover)
fcp.enable off
flexcache.access none
flexcache.deleg.high_water 90
flexcache.deleg.low_water 50
flexcache.enable off
flexcache.per_client_stats on
flexscale.enable off (same value in local+partner recommended)
flexscale.lopri_blocks off (same value in local+partner recommended)
flexscale.normal_data_blocks on (same value in local+partner recommended)
flexscale.pcs_high_res off (same value in local+partner recommended)
flexscale.pcs_size 0GB (same value in local+partner recommended)
fpolicy.enable on
fpolicy.i2p_ems_interval 60
fpolicy.multiple_pipes on
ftpd.3way.enable off
ftpd.anonymous.enable off
ftpd.anonymous.home_dir
ftpd.anonymous.name anonymous
ftpd.auth_style mixed
ftpd.bypass_traverse_checking off
ftpd.dir.override
ftpd.dir.restriction off
ftpd.enable off
ftpd.explicit.allow_secure_data_conn on
ftpd.explicit.enable off
ftpd.idle_timeout 900s (value might be overwritten in takeover)
ftpd.implicit.enable off
ftpd.ipv6.enable off
ftpd.locking none
ftpd.log.enable on
ftpd.log.filesize 512k
ftpd.log.nfiles 6
ftpd.max_connections 400 (value might be overwritten in takeover)
ftpd.max_connections_threshold 75% (value might be overwritten in takeover)
ftpd.tcp_window_size 32768
httpd.access legacy
httpd.admin.access legacy
httpd.admin.enable on
httpd.admin.hostsequiv.enable off
httpd.admin.max_connections 512
httpd.admin.ssl.enable on
httpd.admin.top-page.authentication on
httpd.autoindex.enable on
httpd.bypass_traverse_checking off
httpd.enable off
httpd.ipv6.enable off
httpd.log.format common (value might be overwritten in takeover)
httpd.method.trace.enable off
httpd.rootdir XXX
httpd.timeout 300 (value might be overwritten in takeover)
httpd.timewait.enable off (value might be overwritten in takeover)
ic.carnegie.enable on (value might be overwritten in takeover)
interface.blocked.cifs
interface.blocked.ftpd
interface.blocked.iscsi
interface.blocked.mgmt_data_traffic off (value might be overwritten in takeover)
interface.blocked.ndmp
interface.blocked.nfs
interface.blocked.snapmirror
ip.fastpath.enable on (value might be overwritten in takeover)
ip.icmp_ignore_redirect.enable off (value might be overwritten in takeover)
ip.ipsec.enable off
ip.match_any_ifaddr on (value might be overwritten in takeover)
ip.path_mtu_discovery.enable on (value might be overwritten in takeover)
ip.ping_throttle.alarm_interval 0 (value might be overwritten in takeover)
ip.ping_throttle.drop_level 10 (value might be overwritten in takeover)
ip.tcp.newreno.enable on (value might be overwritten in takeover)
ip.tcp.sack.enable on (value might be overwritten in takeover)
ip.v6.enable off (value might be overwritten in takeover)
ip.v6.ra_enable on (value might be overwritten in takeover)
iscsi.enable on
iscsi.isns.rev 18
iscsi.max_connections_per_session use_system_default
iscsi.max_error_recovery_level use_system_default
kerberos.file_keytab.enable off
kerberos.file_keytab.principal
kerberos.file_keytab.realm
kerberos.replay_cache.enable off
ldap.ADdomain
ldap.base
ldap.base.group
ldap.base.netgroup
ldap.base.passwd
ldap.enable off
ldap.minimum_bind_level anonymous
ldap.name
ldap.nssmap.attribute.gecos gecos
ldap.nssmap.attribute.gidNumber gidNumber
ldap.nssmap.attribute.groupname cn
ldap.nssmap.attribute.homeDirectory homeDirectory
ldap.nssmap.attribute.loginShell loginShell
ldap.nssmap.attribute.memberNisNetgroup memberNisNetgroup
ldap.nssmap.attribute.memberUid memberUid
ldap.nssmap.attribute.netgroupname cn
ldap.nssmap.attribute.nisNetgroupTriple nisNetgroupTriple
ldap.nssmap.attribute.uid uid
ldap.nssmap.attribute.uidNumber uidNumber
ldap.nssmap.attribute.userPassword userPassword
ldap.nssmap.objectClass.nisNetgroup nisNetgroup
ldap.nssmap.objectClass.posixAccount posixAccount
ldap.nssmap.objectClass.posixGroup posixGroup
ldap.passwd ******
ldap.port 389
ldap.servers
ldap.servers.preferred 192.168.1.112
ldap.ssl.enable off
ldap.timeout 20
ldap.usermap.attribute.unixaccount unixaccount
ldap.usermap.attribute.windowsaccount windowsaccount
ldap.usermap.base
ldap.usermap.enable off
locking.grace_lease_seconds 45 (value might be overwritten in takeover)
lun.clone_restore on (value might be overwritten in takeover)
lun.partner_unreachable.linux.asc 0x4 (value might be overwritten in takeover)
lun.partner_unreachable.linux.ascq 0x1 (value might be overwritten in takeover)
lun.partner_unreachable.linux.behavior error (value might be overwritten in takeover)
lun.partner_unreachable.linux.hold_time 5 (value might be overwritten in takeover)
lun.partner_unreachable.linux.scsi_status 0x2 (value might be overwritten in takeover)
lun.partner_unreachable.linux.skey 0x2 (value might be overwritten in takeover)
lun.partner_unreachable.vmware.behavior error (value might be overwritten in takeover)
lun.partner_unreachable.vmware.hold_time 1 (value might be overwritten in takeover)
lun.partner_unreachable.vmware.scsi_status 0x8 (value might be overwritten in takeover)
lun.partner_unreachable.xen.asc 0x4 (value might be overwritten in takeover)
lun.partner_unreachable.xen.ascq 0x1 (value might be overwritten in takeover)
lun.partner_unreachable.xen.behavior error (value might be overwritten in takeover)
lun.partner_unreachable.xen.hold_time 5 (value might be overwritten in takeover)
lun.partner_unreachable.xen.scsi_status 0x2 (value might be overwritten in takeover)
lun.partner_unreachable.xen.skey 0x2 (value might be overwritten in takeover)
lun.use_partner.cc.bytes 512000 (value might be overwritten in takeover)
lun.use_partner.cc.enable on (value might be overwritten in takeover)
lun.use_partner.cc.warn_limit 10 (value might be overwritten in takeover)
ndmpd.access all
ndmpd.authtype challenge
ndmpd.connectlog.enabled off
ndmpd.data_port_range all
ndmpd.enable on
ndmpd.ignore_ctime.enabled off
ndmpd.offset_map.enable on
ndmpd.password_length 16
ndmpd.preferred_interface disable (value might be overwritten in takeover)
ndmpd.tcpnodelay.enable off
nfs.acache.persistence.enabled on (value might be overwritten in takeover)
nfs.always.deny.truncate on (value might be overwritten in takeover)
nfs.assist.queue.limit 40 (value might be overwritten in takeover)
nfs.export.allow_provisional_access on (value might be overwritten in takeover)
nfs.export.auto-update on (value might be overwritten in takeover)
nfs.export.exportfs_comment_on_delete on (value might be overwritten in takeover)
nfs.export.harvest.timeout 1800 (value might be overwritten in takeover)
nfs.export.neg.timeout 3600 (value might be overwritten in takeover)
nfs.export.pos.timeout 36000 (value might be overwritten in takeover)
nfs.export.resolve.timeout 30 (value might be overwritten in takeover)
nfs.hide_snapshot off
nfs.ifc.rcv.high 98910
nfs.ifc.rcv.low 33170
nfs.ifc.xmt.high 16
nfs.ifc.xmt.low 8
nfs.ipv6.enable off
nfs.kerberos.enable off
nfs.locking.check_domain on (value might be overwritten in takeover)
nfs.max_num_aux_groups 32
nfs.mount_rootonly on
nfs.mountd.trace off
nfs.netgroup.strict off
nfs.notify.carryover on
nfs.ntacl_display_permissive_perms off (value might be overwritten in takeover)
nfs.per_client_stats.enable off
nfs.require_valid_mapped_uid off
nfs.response.trace off (value might be overwritten in takeover)
nfs.response.trigger 60 (value might be overwritten in takeover)
nfs.rpcsec.ctx.high 0
nfs.rpcsec.ctx.idle 360
nfs.tcp.enable on
nfs.thin_prov.ejuke off (value might be overwritten in takeover)
nfs.udp.enable on
nfs.udp.xfersize 32768 (value might be overwritten in takeover)
nfs.v2.df_2gb_lim off (value might be overwritten in takeover)
nfs.v2.enable on (value might be overwritten in takeover)
nfs.v3.enable on (value might be overwritten in takeover)
nfs.v4.acl.enable off (value might be overwritten in takeover)
nfs.v4.enable off (value might be overwritten in takeover)
nfs.v4.id.domain acs.co.il
nfs.v4.read_delegation off (value might be overwritten in takeover)
nfs.v4.write_delegation off (value might be overwritten in takeover)
nfs.webnfs.enable off
nfs.webnfs.rootdir XXX
nfs.webnfs.rootdir.set off
nis.domainname
nis.enable off
nis.group_update.enable off
nis.group_update_schedule 24
nis.netgroup.domain_search.enable on
nis.netgroup.legacy_nisdomain_search.enable on
nis.servers *
nis.slave.enable off
nlm.cleanup.timeout 100
nlm.trace off
pcnfsd.enable off (value might be overwritten in takeover)
pcnfsd.umask 22
ra.path_switch.threshold 100 (value might be overwritten in takeover)
raid.background_disk_fw_update.enable on (value might be overwritten in takeover)
raid.disk.copy.auto.enable on (value might be overwritten in takeover)
raid.disktype.enable off (value might be overwritten in takeover)
raid.max_fill_holes.size 0 (value might be overwritten in takeover)
raid.media_scrub.enable on (value might be overwritten in takeover)
raid.media_scrub.rate 600 (value might be overwritten in takeover)
raid.media_scrub.spares.enable on (value might be overwritten in takeover)
raid.min_spare_count 1 (value might be overwritten in takeover)
raid.mirror_read_plex_pref local (value might be overwritten in takeover)
raid.reconstruct.perf_impact medium (value might be overwritten in takeover)
raid.reconstruct.wafliron.enable on (value might be overwritten in takeover)
raid.resync.perf_impact medium (value might be overwritten in takeover)
raid.rpm.ata.enable off (value might be overwritten in takeover)
raid.rpm.fcal.enable on (value might be overwritten in takeover)
raid.scrub.duration 360
raid.scrub.enable on
raid.scrub.perf_impact low (value might be overwritten in takeover)
raid.scrub.schedule
raid.timeout 24 (value might be overwritten in takeover)
raid.verify.perf_impact low (value might be overwritten in takeover)
replication.logical.reserved_transfers 0 (value might be overwritten in takeover)
replication.logical.transfer_limits current (value might be overwritten in takeover)
replication.throttle.enable off
replication.throttle.incoming.max_kbs unlimited
replication.throttle.outgoing.max_kbs unlimited
replication.volume.reserved_transfers 0 (value might be overwritten in takeover)
replication.volume.transfer_limits current (value might be overwritten in takeover)
replication.volume.use_auto_resync off (value might be overwritten in takeover)
rmc.setup off (value might be overwritten in takeover)
rpc.mountd.tcp.port 4046
rpc.mountd.udp.port 4046
rpc.nlm.tcp.port 4045
rpc.nlm.udp.port 4045
rpc.nsm.tcp.port 4047
rpc.nsm.udp.port 4047
rpc.pcnfsd.tcp.port 4048
rpc.pcnfsd.udp.port 4048
rpc.rquotad.udp.port 4049
rquotad.enable on (value might be overwritten in takeover)
rsh.access legacy
rsh.enable on
security.admin.authentication internal
security.admin.nsswitchgroup
security.passwd.firstlogin.enable off
security.passwd.lockout.numtries 4294967295
security.passwd.rootaccess.enable on
security.passwd.rules.enable on
security.passwd.rules.everyone off
security.passwd.rules.history 0
security.passwd.rules.maximum 256
security.passwd.rules.minimum 8
security.passwd.rules.minimum.alphabetic 2
security.passwd.rules.minimum.digit 1
security.passwd.rules.minimum.symbol 0
sftp.auth_style mixed
sftp.bypass_traverse_checking off
sftp.dir_override
sftp.dir_restriction off
sftp.enable off
sftp.idle_timeout 900s (value might be overwritten in takeover)
sftp.locking none
sftp.log_enable on
sftp.log_filesize 512k
sftp.log_nfiles 6
sftp.max_connections 15 (value might be overwritten in takeover)
sftp.max_connections_threshold 75% (value might be overwritten in takeover)
sftp.override_client_permissions off
shelf.atfcx.auto.reset.enable auto (value might be overwritten in takeover)
shelf.esh4.auto.reset.enable auto (value might be overwritten in takeover)
shelf.fw.ndu.enable on (value might be overwritten in takeover)
sis.max_vfiler_active_ops 8 (value might be overwritten in takeover)
sis.min_share_blks 1 (value might be overwritten in takeover)
snaplock.autocommit_period none (value might be overwritten in takeover)
snaplock.compliance.write_verify off (value might be overwritten in takeover)
snaplock.log.default_retention 6m (value might be overwritten in takeover)
snaplock.log.maximum_size 10m (value might be overwritten in takeover)
snapmirror.access legacy
snapmirror.checkip.enable off
snapmirror.delayed_acks.enable on
snapmirror.enable on
snapmirror.log.enable on
snapmirror.readahead 0 (value might be overwritten in takeover)
snapmirror.readahead_freq 0 (value might be overwritten in takeover)
snapmirror.vbn_log_enable off (value might be overwritten in takeover)
snapvalidator.version 9
snapvault.access none
snapvault.enable off
snapvault.lockvault_log_volume
snapvault.nbu.archival_snap_default on
snapvault.ossv.compression off
snapvault.preservesnap off
snapvault.snapshot_for_dr_backup vsm_base_only
snmp.access legacy
snmp.enable on
ssh.access *
ssh.enable on
ssh.idle.timeout 600
ssh.passwd_auth.enable on
ssh.port 22
ssh.pubkey_auth.enable on
ssh1.enable off
ssh2.enable on
ssl.enable on
ssl.enable on
ssl.v2.enable on (same value required in local+partner)
ssl.v3.enable on (same value required in local+partner)
sslp.enable off
stats.archive.enable off
tape.reservations off (value might be overwritten in takeover)
telnet.access legacy (same value required in local+partner)
telnet.distinct.enable off (same value required in local+partner)
telnet.enable on (same value required in local+partner)
tftpd.enable off
tftpd.logging off
tftpd.max_connections 8 (value might be overwritten in takeover)
tftpd.rootdir /etc/tftpboot
timed.enable on (same value in local+partner recommended)
timed.log on (same value in local+partner recommended)
timed.max_skew 30m (same value in local+partner recommended)
timed.min_skew 0 (same value in local+partner recommended)
timed.proto ntp (same value in local+partner recommended)
timed.sched hourly (same value in local+partner recommended)
timed.servers 192.168.1.112 (same value in local+partner recommended)
timed.window 0s (same value in local+partner recommended)
tls.enable on (same value required in local+partner)
trusted.hosts * (same value required in local+partner)
vfiler.vol_clone_zapi_allow off
vif.failover.link_degraded off (value might be overwritten in takeover)
vol.copy.throttle 10 (value might be overwritten in takeover)
vol.snaprestore.nondisruptive off
wafl.default_nt_user
wafl.default_qtree_mode 0777
wafl.default_security_style ntfs
wafl.default_unix_user pcuser
wafl.group_cp off (same value required in local+partner)
wafl.inconsistent.asup_frequency.blks 10 (value might be overwritten in takeover)
wafl.inconsistent.asup_frequency.time 24h (value might be overwritten in takeover)
wafl.inconsistent.buf_limit 10
wafl.inconsistent.buf_not_fixable_limit 50
wafl.inconsistent.ems_suppress off (value might be overwritten in takeover)
wafl.inconsistent.ino_limit 5
wafl.inconsistent.snap_limit 5
wafl.maxdirsize 10470 (value might be overwritten in takeover)
wafl.nt_admin_priv_map_to_root off
wafl.root_only_chown on (value might be overwritten in takeover)
wafl.wcc_minutes_valid 20
webdav.enable off

----------------------------------------------

Wish you all the best, thanks