Documentation forAccess Rights Manager

Prepare the NetApp 7-mode file servers

Beginning with version 2022.4, NetApp 7-mode is no longer supported in ARM.

Collectors for NetApp file servers

The collectors for NetApp file servers are dedicated Windows servers running the collector service.

SolarWinds strongly recommends implementing a collector server in the same network segment as the NetApp file server. Otherwise, performance and routing problems may occur.

Each 7-Mode NetApp requires its own collector.

In contrast with Windows file servers, FS Logga for NetApp file servers do not require a filter driver installation.

Set NetApp file servers as findable

In Active Directory, registered NetApp file servers include a typical value set in the LDAP attribute operatingSystem. This property is used by the collector to detect NetApp file servers and tag them as NetApp file server type in the FS Logga configuration.

By default, the operatingSystem value of the NetApp file servers is set to OnTap or NetApp in the collector configuration file. If your NetApp file servers incorporate different values for the operatingSystem property, you can adjust the search parameters.

If your NetApp file server is not registered in Active Directory, create a computer account and set the operatingSystem attribute accordingly.

Configuration file

pnCollector.config.xml

Computer

Collector server which is configured for the NetApp file server.

Path

%ProgramData%\protected-networks.com\8MAN\cfg

If the file does not exist, copy the template from the following path:

old: %ProgramFiles%\Protected Networks\8MAN\etc

new: %ProgramFiles%\solarwinds\ARM\etc

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <tracer>
    <netapp>
      <NetappOperatingSystems>OnTap,NetApp</NetappOperatingSystems>
    </netapp>
  </tracer>
</config>

Possible values

Add your operatingSystem values separated with commas.

If your NetApp file servers include different values for the operatingSystem property, insert these values separated with commas. If no or not all NetApp file servers register the operatingSystem property “ in Active Directory, leave the entry empty in the collectors configuration file.

An empty entry returns all non-EMC or non-Windows computer accounts from Active Directory that are visible for the used account.

Set the local security policies on collectors

To enable communications between NetApp and the collector, configure the following policy settings on the collector server.

(Screenshot property of © 2020 Microsoft)

The following table describes the policies highlighted above.

Security Option Value
Network access: Let Everyone permissions apply to anonymous users Enabled
Network access: Named Pipes that can be accessed anonymously

ntapfprq_<netapp name>

(<netapp name> is the name of the NetApp file server)

FPolicy feature

The FS-Logga for NetApp file server uses the NetApp FPolicy feature. As a result, this feature must be activated and configured properly.

Activate the FPolicy feature

options fpolicy.enable on

Configure the FPolicy

fpolicy create 8ManLogga screen
fpolicy enable 8ManLogga
fpolicy options 8ManLogga cifs_setattr on

The 8ManLogga value of the FPolicy must match the value in the configuration file.

Edit the configuration file only if you want to use a value other than the default value.

Configuration file

pnTracer.config.xml

Computer

The collector server that is configured for the NetApp file server.

Path

%ProgramData%\protected-networks.com\8MAN\cfg

If the file does not exist, copy the template from the following path:

old: %ProgramFiles%\Protected Networks\8MAN\etc

new: %ProgramFiles%\solarwinds\ARM\etc

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <tracer> 
    <netapp> 
      <policy>8ManLogga</policy>
    </netapp>
  </tracer> 
</config>

Possible values

The value must match the name of the created FPolicy.

Default value: 8ManLogga

Edit the configuration file only if you want to use a value other than the default value.

Domain accounts

The collector server computer account must become a member of the Backup Operators group on the NetApp file server.

useradmin domainuser add <domain\computer-account> -g "Backup Operators"

Read the complete paths of the shares a user account that is member of the Power Users group on the NetApp file server:

useradmin domainuser add <domain\user> -g "Power Users"