> We were wondering what the group's experiences have been with upgrading
> export nodes from 3.5, especially those upgrades that involved a
> transition from home-grown ADS domain integration to the new CES
> integration piece.
>
> Specifcially, we're interested in:
>
> 1) What changes were necessary to make in your domain to get it to
> interoperate with CES?
> export nodes from 3.5, especially those upgrades that involved a
> transition from home-grown ADS domain integration to the new CES
> integration piece.
>
> Specifcially, we're interested in:
>
> 1) What changes were necessary to make in your domain to get it to
> interoperate with CES?
I assume that this question relates to authentication with Active
Directory domains. Could you share details about the current setup?
That would be helpful in determining the options going forward.
Directory domains. Could you share details about the current setup?
That would be helpful in determining the options going forward.
> 2) Any good tips for CES workarounds in the case of domain
> configuration that cannot be changed?
> configuration that cannot be changed?
Can you explain in more details what you mean with "cannot be
changed"?
changed"?
> 3) Experience with CES user-defined auth mode in particular? Has
> anyone got this mode to work successfullly?
> anyone got this mode to work successfullly?
"userdefined" authentication means that the CES stack does not manage
the authentication related configuration options in the protocol
services. It is then up to the administrator to manually manage the
configurations. The downside is that this is also stepping outside of
the normal support, as we cannot test and validate all possible
configuration settings. We recommend to use one of the available CES
configuration methods, as those are fully tested and supported.
the authentication related configuration options in the protocol
services. It is then up to the administrator to manually manage the
configurations. The downside is that this is also stepping outside of
the normal support, as we cannot test and validate all possible
configuration settings. We recommend to use one of the available CES
configuration methods, as those are fully tested and supported.
My recommendation would be first to understand the existing setup,
then try to map that to a supported CES configuration method. If a
piece is missing, then it would still make sense to make use of the
existing CES methods as much as possible, to stay as close as possible
with a supported configuration.
then try to map that to a supported CES configuration method. If a
piece is missing, then it would still make sense to make use of the
existing CES methods as much as possible, to stay as close as possible
with a supported configuration.
Regards,
Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
[email protected] || +1-520-799-2469 (T/L: 321-2469)
----- Original message -----
From: "Howard, Stewart Jameson" <[email protected]>
Sent by: [email protected]
To: "[email protected]" <[email protected]>
Cc:
Subject: [gpfsug-discuss] Experiences with Export Node Transition from 3.5 -> 4.x
Date: Fri, Apr 6, 2018 8:21 AM
Hi All,
We were wondering what the group's experiences have been with upgrading
export nodes from 3.5, especially those upgrades that involved a
transition from home-grown ADS domain integration to the new CES
integration piece.
Specifcially, we're interested in:
1) What changes were necessary to make in your domain to get it to
interoperate with CES?
2) Any good tips for CES workarounds in the case of domain
configuration that cannot be changed?
3) Experience with CES user-defined auth mode in particular? Has
anyone got this mode to work successfullly?
Let us know. Thanks!
Stewart Howard
Indiana University
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwIGaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=gK8gMShOTfCp6HLaAO-JwzR5kl9xGbuaSzIIvJgDARA&s=8MoJ8aFltv_Quyv-cbZXWVpHeDE7OOJcWqjz-ufARY8&e=
_______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
