Documentation forAccess Rights Manager

Prepare NetApp 7-mode file servers

 

Please note that as of ARM version 2022.4, NetApp 7-mode is no longer supported.

 

Collectors for NetApp file servers

Collectors for NetApp file servers are dedicated Windows servers with the collector service running.

We strongly recommend that you use a Collector server within the same network segment as the NetApp file server, otherwise performance and routing problems may occur.

Each 7-Mode NetApp needs its own collector.

The FS Logga for NetApp file servers does not require a filter driver installation like on Windows file servers.

 

Set NetApp file servers findable

In Active Directory registered NetApp file servers have a typical value set in the LDAP attribute operatingSystem. This property is used by the collector to detect NetApp file servers and mark it as NetApp file server type in the FS Logga configuration.

By default, the operatingSystem value of the NetApp file servers is set to OnTap or NetApp in the collector configuration file. If your NetApp file servers use different values for the operatingSystem property, you can adjust the search parameters.

If your NetApp file server is not registered in Active Directory, you must create a computer account and set the operatingSystem attribute accordingly.

 

Configuration file

pnCollector.config.xml

 

Computer

Collector server which is configured for the NetApp file server.

 

Path

%ProgramData%\protected-networks.com\8MAN\cfg

If the file does not exist, copy the "template" from the following path:

old: %ProgramFiles%\Protected Networks\8MAN\etc

new: %ProgramFiles%\solarwinds\ARM\etc

 

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <tracer>
    <netapp>
      <NetappOperatingSystems>OnTap,NetApp</NetappOperatingSystems>
    </netapp>
  </tracer>
</config>

 

Possible Values

Add your operatingSystem values comma-separated.

If your NetApp file servers have different values for the property “operatingSystem” then insert all these values separated by comma. If no or not all NetApp file servers register the property “operatingSystem” in the Active Directory leave the entry empty in the collectors configuration file. With an empty entry you will get all non-EMC or non-Windows computer accounts from Active Directory visible for the used account.

 

Set local security policies on collectors

Screenshots property of © 2020 Microsoft.

To enable communication between NetApp and the collector, you must configure the following policy settings on the collector server.

 

Security Option Value
Network access: Let Everyone permissions apply to anonymous users Enabled
Network access: Named Pipes that can be accessed anonymously

ntapfprq_<netapp name>

(<netapp name> is the name of the NetApp file server)

 

FPolicy feature

The FS-Logga for NetApp file server uses the NetApp FPolicy feature. Therefore it has to be activated and properly configured.

 

Activation of the FPolicy feature

options fpolicy.enable on

 

Configuration of the FPolicy

fpolicy create 8ManLogga screen

fpolicy enable 8ManLogga

fpolicy options 8ManLogga cifs_setattr on

 

The value 8ManLogga of the FPolicy has to match with the value in the configuration file.

The configuration file only needs to be edited if you want to use a value other than the default value.

 

Configuration file

pnTracer.config.xml

 

Computer

Collector server which is configured for the NetApp file server.

 

Path

%ProgramData%\protected-networks.com\8MAN\cfg

If the file does not exist, copy the "template" from the following path:

old: %ProgramFiles%\Protected Networks\8MAN\etc

new: %ProgramFiles%\solarwinds\ARM\etc

 

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <tracer> 
    <netapp> 
      <policy>8ManLogga</policy>
    </netapp>
  </tracer> 
</config>

 

Possible Values

The value has to match with the name of the created FPolicy.

Default value: 8ManLogga

The configuration file only needs to be edited if you want to use a value other than the default value.

 

Domain accounts

The collector server's computer account must become a member of the Backup Operators group on the NetApp file server.

useradmin domainuser add <domain\computer-account> -g "Backup Operators"

 

To be able to read the complete paths of the shares a user account is needed, that is member of the "Power Users" group on the NetApp file server:

useradmin domainuser add <domain\user> -g "Power Users"