Veritas Access Appliance Release Notes

Last Published:
Product(s): Appliances (7.4.3)
Platform: Veritas 3340,Access Appliance OS
  1. Overview of Access Appliance
    1.  
      About this release
    2. Changes in this release
      1.  
        Enhancements to the initial cluster configuration
      2.  
        Configuring NetBackup client for Access Appliance
      3.  
        Configuring AD/LDAP user roles
      4.  
        Support for FIPS 140-2 standard
      5.  
        Enabling OS STIG hardening
      6.  
        Enhancements to appliance logging
      7.  
        Enhancements to troubleshooting and collecting diagnostic details
      8.  
        Addition of multiple file systems to a Replicated Volume Group
      9.  
        Support for intrusion prevention policy
      10.  
        Deprecated functionality in this release
    3.  
      Supported NetBackup client versions
    4.  
      Access Appliance simple storage service (S3) APIs
    5.  
      Required OS and third-party RPMs
  2. Fixed issues
    1.  
      Fixed issues since the last release
  3. Software limitations
    1.  
      Limitations on using shared LUNs
    2. Limitations related to installation and upgrade
      1.  
        If the required virtual IPs are not configured, then services like NFS, CIFS, and S3 do not function properly
      2.  
        Underscore character is not supported for host names
    3.  
      Limitations in the Backup mode
    4.  
      Access Appliance IPv6 limitations
    5.  
      FTP limitations
    6.  
      Limitations related to commands in a non-SSH environment
    7.  
      Limitations related to Veritas Data Deduplication
    8.  
      Kernel-based NFS v4 limitations
    9.  
      File system limitation
    10.  
      Access Appliance S3 server limitation
    11.  
      Long-term data retention (LTR) limitations
    12.  
      Limitations related to upgrade
    13. Limitation related to replication
      1.  
        Limitation related to episodic replication authentication
      2.  
        Limitation related to continuous replication
  4. Known issues
    1. Access Appliance known issues
      1. Access Appliance issues
        1.  
          Mongo service does not start after a new node is added successfully
        2.  
          File systems that are already created cannot be mapped as S3 buckets for local users using the GUI
        3.  
          The Access Appliance management console is not available after a node is deleted and the remaining node is restarted
        4.  
          When provisioning the Access Appliance GUI, the option to generate S3 keys is not available after the LTR policy is activated
        5.  
          Unable to add an Appliance node to the cluster again after the Appliance node is turned off and removed from the Access Appliance cluster
        6.  
          Setting retention on a directory path does not work from the Access Appliance command-line interface
        7.  
          During the Access Appliance upgrade, I/O gets paused with an error message
        8.  
          When provisioning storage, the Access web interface or the command-line interface displays storage capacity in MB, GB, TB, or PB
        9. Access Appliance operational notes
          1.  
            Access services do not restart properly after storage shelf restart
      2. Admin issues
        1.  
          The user password gets displayed in the logs for the Admin> user add username system-admin|storage-admin|master command
      3. Backup issues
        1.  
          Backup or restore status may show invalid status after the BackupGrp is switched or failed over to the other node when the SAN client is enabled
      4. CIFS issues
        1.  
          Cannot enable the quota on a file system that is appended or added to the list of homedir
        2.  
          Deleting a CIFS share resets the default owner and group permissions for other CIFS shares on the same file system
        3.  
          Default CIFS share has owner other than root
        4.  
          CIFS mapuser command fails to map all the users from Active Directory (AD) to all the NIS/LDAP users
        5.  
          CIFS share may become unavailable when the CIFS server is in normal mode
        6.  
          CIFS share creation does not authenticate AD users
        7.  
          If you mount or access a CIFS share using the local user without netbios or cluster name, the operation fails
        8.  
          During upgrade, the CVM and CFS agents are not stopped
        9.  
          Unable to access CIFS shares using the Share Open command from the Access Appliance Shell menu
      5. General issues
        1.  
          A functionality of Access Appliance works from the master node but does not work from the slave node
      6. GUI issues
        1.  
          When a new node is added or when a new cluster is installed and configured, the GUI may not start on the console node after a failover
        2.  
          When an earlier version of the Access Appliance cluster is upgraded, the GUI shows stale and incomplete data
        3.  
          Restarting the server as part of the command to add and remove certificates gives an error on RHEL 7
        4.  
          Client certificate validation using OpenSSL ocsp does not work on RHEL 7
        5.  
          GUI does not support segregated IPv6 addresses while creating CIFS shares using the Enterprise Vault policy
        6.  
          File system status is not updated in the UI
        7.  
          Deprecated policies are displayed after upgrading to version 7.4.3
        8.  
          During a rolling upgrade the UI becomes inaccessible
        9.  
          REST endpoint field gives an error message for valid values while registering S3-compatible as a cloud service
      7. Installation and configuration issues
        1.  
          After you restart a node that uses RDMA LLT, LLT does not work, or the gabconfig - a command shows the jeopardy state
        2.  
          Running individual Access Appliance scripts may return inconsistent return codes
        3.  
          Installer does not list the initialized disks immediately after initializing the disks during I/O fencing configuration
        4.  
          If you run the Cluster> show command when a slave node is in the restart, shutdown, or crash state, the slave node throws an exception
        5.  
          If duplicate PCI IDs are added for the PCI exclusion, the Cluster> add node name command fails
        6.  
          Phantomgroup for the VLAN device does not come online if you create another VLAN device from the Access Appliance command-line interface after cluster configuration is done
        7.  
          Access Appliance fails to install if LDAP or the autofs home directories are preconfigured on the system
        8.  
          Configuring Access Appliance with a preconfigured VLAN and a preconfigured bond fails
        9.  
          In a mixed mode Access Appliance cluster, after the execution of the Cluster> add node command, one type of unused IP does not get assigned as a physical IP to public NICs
        10.  
          NLMGroup service goes into a FAULTED state when the private IP (x.x.x.2) is not free
        11.  
          The cluster> show command does not detect all the nodes of the cluster
      8. Internationalization (I18N) issues
        1.  
          The Access Appliance command-line interface prompt disappears when characters in a foreign language are present in a command
      9. Networking issues
        1.  
          CVM service group goes into faulted state unexpectedly
        2.  
          In a mixed IPv4 and IPv6 VIP network set up, the IP balancing does not consider IP type
        3.  
          The netgroup search does not continue to search in NIS if the entry is not found in LDAP
        4.  
          The IPs hosted on an interface that is not the current IPv6 default gateway interface are not reachable outside the current IPv6 subnet
        5.  
          After network interface swapping between two private NICs or one private NIC and one public NIC, the service groups on the slave nodes are not probed
        6.  
          Unable to import the network module after an operating system upgrade
        7.  
          LDAP with SSL on option does not work if you upgrade Access Appliance
        8.  
          Network load balancer does not get configured with IPv6
        9.  
          Unable to add an IPv6-default gateway on an IPv4-installed cluster
        10.  
          LDAP over SSL may not work in Access Appliance 7.4.3
        11.  
          The network> swap command hangs if any node other than the console node is specified
        12.  
          LDAP user fails to establish SSH connection with the cluster when FTP is configured
      10. NFS issues
        1.  
          Latest directory content of server is not visible to the client if time is not synchronized across the nodes
        2.  
          NFS> share show command does not distinguish offline versus online shares
        3.  
          Kernel-NFS v4 lock failover does not happen correctly in case of a node crash
        4.  
          Kernel-NFS v4 export mount for Netgroup does not work correctly
        5.  
          When a file system goes into the FAULTED or OFFLINE state, the NFS share groups associated with the file system do not become offline on all the nodes
      11. ObjectAccess issues
        1.  
          When trying to connect to the S3 server over SSLS3, the client application may give a warning
        2.  
          If you have upgraded to Access Appliance 7.4.3 from an earlier release, access to S3 server fails if the cluster name has uppercase letters
        3.  
          If the cluster name does not follow the DNS hostname restrictions, you cannot work with the ObjectAccess service in Access Appliance
        4.  
          Bucket creation may fail with time-out error
        5.  
          Bucket deletion may fail with "No such bucket" or "No such key" error
        6.  
          Group configuration does not work in ObjectAccess if the group name contains a space
      12. OpenStack issues
        1.  
          Cinder and Manila shares cannot be distinguished from the Access Appliance command-line interface
        2.  
          Cinder volume creation fails after a failure occurs on the target side
        3.  
          Cinder volume may fail to attach to the instance
        4.  
          Bootable volume creation for an iSCSI driver fails with an I/O error when a qcow image is used
      13. Replication issues
        1.  
          When running episodic replication and deduplication on the same cluster node, the episodic replication job fails in certain scenarios
        2.  
          The System> config import command does not import episodic replication keys and jobs
        3.  
          The job uses the schedule on the target after episodic replication failover
        4.  
          Episodic replication fails with error "connection reset by peer" if the target node fails over
        5.  
          Episodic replication jobs created in Access Appliance 7.2.1.1 or earlier versions are not recognized after an upgrade
        6.  
          Setting the bandwidth through the GUI is not enabled for episodic replication
        7.  
          Episodic replication job with encryption fails after job remove and add link with SSL certificate error
        8.  
          Episodic replication job status shows the entry for a link that was removed
        9.  
          Episodic replication job modification fails
        10.  
          If a share is created in RW mode on the target file system for episodic replication, then it may result in there being different number of files and directories on the target file system compared to the source file system
        11.  
          Continuous replication fails when the 'had' daemon is restarted on the target manually
        12.  
          Continuous replication is unable to go to the replicating state if the Storage Replicated Log becomes full
        13.  
          Unplanned failover and failback in continuous replication may fail if the communication of the IPTABLE rules between the cluster nodes does not happen correctly
        14.  
          Continuous replication configuration may fail if the continuous replication IP is not online on the master node but is online on another node
        15.  
          If you restart any node in the primary or the secondary cluster, replication may go into a PAUSED state
        16.  
          Unplanned failback fails if the source cluster goes down
        17.  
          Cloud tiering cannot be configured with continuous replication
        18.  
          After continuous replication failover/failback operations, the virtual IPs in the source may appear offline
      14. STIG issues
        1.  
          When the STIG option is enabled, it enforces an account lockout for any user that enters three consecutive incorrect passwords
        2.  
          The changed password is not synchronized across the cluster
        3.  
          STIG status is not preserved if the system configuration is imported after reimaging the nodes
      15. Storage issues
        1.  
          Snapshot mount can fail if the snapshot quota is set
        2.  
          Sometimes the Storage> pool rmdisk command does not print a message
        3.  
          The Storage> pool rmdisk command sometimes can give an error where the file system name is not printed
        4.  
          Not able to enable quota for file system that is newly added in the list of CIFS home directories
        5.  
          Destroying the file system may not remove the /etc/mtab entry for the mount point
        6.  
          The Storage> fs online command returns an error, but the file system is online after several minutes
        7.  
          Removing disks from the pool fails if a DCO exists
        8.  
          Rollback refresh fails when running it after running Storage> fs growby or growto commands
        9.  
          If an exported DAS disk is in error state, it shows ERR on the local node and NOT_CONN on the remote nodes in Storage> list
        10.  
          Inconsistent cluster state with management service down when disabling I/O fencing
        11.  
          Storage> tier move command failover of node is not working
        12.  
          Rollback service group goes in faulted state when respective cache object is full and there is no way to clear the state
        13.  
          Event messages are not generated when cache objects get full
        14.  
          The Access Appliance command-line interface does not block uncompress and compress operations from running on the same file at the same time
        15.  
          Storage> tier move list command fails if one of the cluster nodes is rebooted
        16.  
          Pattern given as filter criteria to Storage> fs policy add sometimes erroneously transfers files that do not fit the criteria
        17.  
          When a policy run completes after issuing Storage> fs policy resume, the total data and total files count might not match the moved data and files count as shown in Storage> fs policy status
        18.  
          Storage> fs addcolumn operation fails but error notification is not sent
        19.  
          Storage> fs-growto and Storage> fs-growby commands give error with isolated disks
        20.  
          Unable to create space-optimized rollback when tiering is present
        21.  
          Enabling I/O fencing on a set up with Volume Manager objects present fails to import the disk group
        22.  
          File system creation fails when the pool contains only one disk
        23.  
          After starting the backup service, BackupGrp goes into FAULTED state on some nodes
        24.  
          File system creation fails with SSD pool
        25.  
          The CVM service group goes in to faulted state after you restart the management console node
        26.  
          The Storage> fs create command does not display the output correctly if one of the nodes of the cluster is in unknown state
        27.  
          Storage> fs growby and growto commands fail if the size of the file system or bucket is full
        28.  
          The operating system names of fencing disks are not consistent across the Access Appliance cluster that may lead to issues
        29.  
          The disk group import operation fails and all the services go into failed state when fencing is enabled
        30.  
          Error while creating a file system stating that the CVM master and management console are not on the same node
        31.  
          When you configure disk-based fencing, the cluster does not come online after you restart the node
        32.  
          After a node is restarted, the vxdclid process may generate core dump
        33.  
          The cluster> shutdown command does not shut down the node
        34.  
          After policy execution to move files from Amazon Glacier to primary file system, all files may not get moved back to the primary
      16. System issues
        1.  
          The System> ntp sync command without any argument does not appear to work correctly
      17. Upgrade issues
        1.  
          Unable to roll back the system after an attempt to upgrade from 7.4.2.400 to 7.4.3.300 failed.
        2.  
          During rolling upgrade, Access Appliance shutdown does not complete successfully
        3.  
          CVM is in FAULTED state after you perform a rolling upgrade
        4.  
          If rolling upgrade is performed when NFS v4 is configured using NFS lease, the system may hang
        5.  
          Stale file handle error is displayed during rolling upgrade
        6.  
          The upgrade operation fails if synchronous replication is configured
        7.  
          Rolling upgrade fails when the cluster has space-optimized rollback in online state
        8.  
          After upgrading from version 7.4.2 to a later version, the default route entry in the ip rule table on one of the cluster nodes is missing
        9.  
          GUI might fail to start after upgrading from version 7.4.2 to 7.4.3
        10.  
          Storage provisioning might fail after upgrading the Access Appliance from version 7.4.2 to 7.4.3
        11.  
          Alerts about node being down are generated during an upgrade
      18. Veritas Data Deduplication issues
        1.  
          The Veritas Data Deduplication storage server does not come online on a newly added node in the cluster if the node was offline when you configured deduplication
        2.  
          The Veritas Data Deduplication server goes offline after destroying the bond interface on which the deduplication IP was online
        3.  
          If you grow the deduplication pool using the fs> grow command, and then try to grow it further using the dedupe> grow command, the dedupe> grow command fails
        4.  
          The Veritas Data Deduplication server goes offline after bond creation using the interface of the deduplication IP
        5.  
          Provisioning for Veritas Data Deduplication is displayed as failed in GUI
  5. Getting help
    1.  
      Displaying the Online Help
    2.  
      Displaying the man pages
    3.  
      Using the Access Appliance product documentation

Unplanned failback fails if the source cluster goes down

If the source cluster goes down, unplanned failback fails with an error: 

ACCESS Sync_rep ERROR V-493-10-91 Failback operation failed!

The following error appears in the logs: 

Message from Host 10.221.62.53: VxVM VVR vradmin 
ERROR V-5-52-449 Secondary rvg1 does not have an active Primary

The issue is seen if the virtual IP address used by the replication service is on a different node then the logowner node. This happens because continuous replication requires the IP and logowner to be on the same node.

Workaround:

  1. Find the logowner node.

    # vxprint -Vl rvg_test | grep logowner
logowner: clat743-01 (default)

    In this example, clat743-01 is the logowner node.

  2. Run the following command.on the Access CLISH:

    # /opt/VRTSnas/clish/bin/clish -u admin -c "network ip addr show"
					IP 						Netmask/Prefix Device Node 						Type 				Status
------------ --------------- ------ -----      -------- ------ 		
10.221.54.85 255.255.240.0 		eth4   clat743-01 Physical
10.221.54.86 255.255.240.0   eth5   clat743-01 Physical
10.221.54.55 255.255.240.0   eth1   clat743-01 Physical
10.221.54.87 255.255.240.0   eth4   clat743-02 Physical
10.221.54.88 255.255.240.0   eth5   clat743-02 Physical
10.221.54.56 255.255.240.0   eth1   clat743-02 Physical
10.221.54.89 255.255.240.0   eth1   clat743-01 Virtual  ONLINE 
																																																								(Con IP)
10.221.54.59 255.255.240.0   eth5   clat743-02 Virtual  ONLINE 		
																																																								(Continuous 
																																																								Replication IP)

    Observe the node on which the continuous replication IP resides. In this example, it is clat743-02.

  3. Move the logowner to the node on which the continuous replication IP resides. Run the following command on the node where continuous replication IP is running.

    # vxrvg -g sfsdg set logowner=on rvg_test

    In the example, run the command on clat743-02.

  4. Run the failback command.

    # replication continuous failback fs_name