OneFS 6.5 Command Reference

ContentsOneFS Command Reference......................................................................................................11

isi alerts.............................................................................................................................12isi auth ads accounts list...................................................................................................12isi auth ads cache flush.....................................................................................................12isi auth ads dc...................................................................................................................13isi auth ads groups list.......................................................................................................14isi auth ads join.................................................................................................................15isi auth ads leave...............................................................................................................16isi auth ads search............................................................................................................16isi auth ads spn check.......................................................................................................18isi auth ads spn create......................................................................................................19isi auth ads spn delete......................................................................................................20isi auth ads spn list............................................................................................................21isi auth ads status.............................................................................................................21isi auth ads time................................................................................................................22isi auth ads users list.........................................................................................................23isi auth config krb5 add realm...........................................................................................24isi auth config krb5 delete default......................................................................................25isi auth config krb5 delete domain.....................................................................................26isi auth config krb5 delete realm.......................................................................................26isi auth config krb5 list.......................................................................................................27isi auth config krb5 modify default.....................................................................................28isi auth config krb5 modify domain....................................................................................29isi auth config krb5 modify realm.......................................................................................30isi auth config krb5 write....................................................................................................30isi auth config ldap list.......................................................................................................31isi auth config ldap modify.................................................................................................33isi auth config list...............................................................................................................36isi auth config modify.........................................................................................................41isi auth config revert..........................................................................................................47isi auth config rules...........................................................................................................51isi auth error......................................................................................................................52isi auth local groups create...............................................................................................52isi auth local groups delete................................................................................................53isi auth local groups list.....................................................................................................53isi auth local groups modify...............................................................................................54isi auth local users create..................................................................................................56isi auth local users delete..................................................................................................57isi auth local users list.......................................................................................................58isi auth local users modify.................................................................................................59

isi auth log-level.................................................................................................................61isi auth mapping delete.....................................................................................................62isi auth mapping dump......................................................................................................64isi auth mapping flush.......................................................................................................65isi auth mapping idrange...................................................................................................66isi auth mapping import.....................................................................................................68isi auth mapping list...........................................................................................................68isi auth mapping modify....................................................................................................70isi auth mapping new........................................................................................................72isi auth mapping token......................................................................................................74isi auth mapping upgrade-db.............................................................................................75isi auth status....................................................................................................................76isi avscan config................................................................................................................77isi avscan get....................................................................................................................78isi avscan manual..............................................................................................................79isi avscan policy................................................................................................................79isi avscan policy add.........................................................................................................80isi avscan policy delete.....................................................................................................81isi avscan policy edit.........................................................................................................81isi avscan policy run..........................................................................................................83isi avscan quarantine........................................................................................................83isi avscan report purge......................................................................................................84isi avscan report scan.......................................................................................................84isi avscan report threat......................................................................................................85isi avscan unquarantine....................................................................................................86isi batterystatus.................................................................................................................86isi config............................................................................................................................87

changes..................................................................................................................87commit....................................................................................................................88date........................................................................................................................88deliprange...............................................................................................................88encoding.................................................................................................................89exit..........................................................................................................................90help.........................................................................................................................90interface..................................................................................................................91iprange...................................................................................................................92joinmode.................................................................................................................93lnnset......................................................................................................................93migrate...................................................................................................................94mtu.........................................................................................................................95name......................................................................................................................95netmask..................................................................................................................95quit..........................................................................................................................96reboot.....................................................................................................................96

shutdown................................................................................................................96status......................................................................................................................97timezone.................................................................................................................98version....................................................................................................................98wizard.....................................................................................................................98

isi devices..........................................................................................................................99isi domain create.............................................................................................................101isi domain filedelete.........................................................................................................101isi domain info.................................................................................................................101isi domain list...................................................................................................................102isi domain modify............................................................................................................103isi email...........................................................................................................................103isi email list......................................................................................................................104isi events cancel..............................................................................................................104isi events list....................................................................................................................105isi events notifications create..........................................................................................107isi events notifications delete...........................................................................................109isi events notifications list................................................................................................109isi events notifications modify..........................................................................................110isi events quiet.................................................................................................................112isi events sendtest...........................................................................................................112isi events settings list.......................................................................................................113isi events settings set......................................................................................................113isi events show ...............................................................................................................115isi events unquiet.............................................................................................................116isi fc disable.....................................................................................................................116isi fc enable.....................................................................................................................117isi fc list............................................................................................................................117isi fc set...........................................................................................................................118isi firmware package.......................................................................................................118isi firmware status...........................................................................................................119isi firmware update..........................................................................................................120isi ftp accept-timeout.......................................................................................................121isi ftp allow-anon-access.................................................................................................122isi ftp allow-anon-upload.................................................................................................122isi ftp allow-dirlists...........................................................................................................123isi ftp allow-downloads....................................................................................................123isi ftp allow-writes............................................................................................................123isi ftp anon-chown-username..........................................................................................124isi ftp anon-password-list.................................................................................................124isi ftp anon-password-list add..........................................................................................125isi ftp anon-password-list remove....................................................................................125isi ftp anon-root-path.......................................................................................................126isi ftp anon-umask...........................................................................................................126

isi ftp ascii-mode.............................................................................................................127isi ftp chroot-exception-list...............................................................................................127isi ftp chroot-exception-list add........................................................................................128isi ftp chroot-exception-list remove..................................................................................128isi ftp chroot-local-mode..................................................................................................129isi ftp connect-timeout.....................................................................................................130isi ftp data-timeout...........................................................................................................130isi ftp denied-user-list......................................................................................................131isi ftp denied-user-list add...............................................................................................131isi ftp denied-user-list remove.........................................................................................132isi ftp dirlist-localtime.......................................................................................................132isi ftp dirlist-names..........................................................................................................133isi ftp file-create-perm.....................................................................................................133isi ftp list..........................................................................................................................134isi ftp local-root-path........................................................................................................135isi ftp local-umask............................................................................................................135isi ftp server-to-server.....................................................................................................136isi ftp session-timeout......................................................................................................136isi ftp user-config-dir........................................................................................................137isi_gather_info.................................................................................................................137isi get...............................................................................................................................141isi iscsi isns disable.........................................................................................................143isi iscsi isns discover.......................................................................................................143isi iscsi isns enable..........................................................................................................144isi iscsi isns status...........................................................................................................144isi iscsi list.......................................................................................................................145isi iscsi pool add..............................................................................................................146isi iscsi pool delete..........................................................................................................146isi iscsi pool list................................................................................................................146isi job cancel....................................................................................................................147isi job config....................................................................................................................147isi job history...................................................................................................................147isi job list..........................................................................................................................149isi job pause....................................................................................................................150isi job policy create..........................................................................................................151isi job policy delete..........................................................................................................151isi job policy list...............................................................................................................152isi job policy modify.........................................................................................................152isi job policy set...............................................................................................................153isi job resume..................................................................................................................154isi job schedule delete.....................................................................................................155isi job schedule list..........................................................................................................155isi job schedule set..........................................................................................................156isi job start.......................................................................................................................157

isi job status....................................................................................................................158isi job update...................................................................................................................159isi license activate...........................................................................................................160isi license status..............................................................................................................160isi license unconfigure.....................................................................................................161isi lun clone.....................................................................................................................161isi lun create....................................................................................................................163isi lun delete....................................................................................................................164isi lun import....................................................................................................................165isi lun list..........................................................................................................................165isi lun modify...................................................................................................................166isi lun move.....................................................................................................................167isi lun offline....................................................................................................................168isi lun online....................................................................................................................168isi ndmp kill......................................................................................................................168isi ndmp list.....................................................................................................................169isi ndmp probe.................................................................................................................169isi ndmp settings list........................................................................................................176isi ndmp settings set........................................................................................................177isi ndmp user create........................................................................................................178isi ndmp user delete........................................................................................................178isi ndmp user list.............................................................................................................178isi ndmp user modify.......................................................................................................179isi networks.....................................................................................................................179isi networks create pool...................................................................................................181isi networks create rule...................................................................................................183isi networks create subnet...............................................................................................184isi networks delete pool...................................................................................................185isi networks delete rule....................................................................................................186isi networks delete subnet...............................................................................................186isi networks list interfaces...............................................................................................187isi networks list pools......................................................................................................188isi networks list rules.......................................................................................................190isi networks list subnets..................................................................................................191isi networks modify pool..................................................................................................192isi networks modify rule...................................................................................................196isi networks modify subnet..............................................................................................197isi nfs clients list..............................................................................................................199isi nfs clients remove.......................................................................................................200isi nfs exports check........................................................................................................200isi nfs exports create.......................................................................................................200isi nfs exports delete.......................................................................................................205isi nfs exports list.............................................................................................................205isi nfs exports modify.......................................................................................................207

isi nfs flexprotect.............................................................................................................214isi nfs locks list................................................................................................................214isi nfs locks waiters..........................................................................................................215isi perfstat........................................................................................................................215isi pkg create...................................................................................................................216isi pkg delete...................................................................................................................216isi pkg info.......................................................................................................................216isi pkg install....................................................................................................................217isi quota create................................................................................................................218isi quota delete................................................................................................................221isi quota import................................................................................................................223isi quota list.....................................................................................................................223isi quota modify...............................................................................................................226isi quota reporting make-on-demand..............................................................................231isi quota reporting set......................................................................................................231isi quota reporting show..................................................................................................232isi quota reporting stop-reports.......................................................................................233isi readonly off.................................................................................................................233isi readonly on.................................................................................................................234isi readonly show.............................................................................................................234isi services......................................................................................................................235isi set...............................................................................................................................236isi smartlock....................................................................................................................240isi smartpools process....................................................................................................240isi smb config global list..................................................................................................241isi smb config global modify............................................................................................244isi smb config global revert..............................................................................................247isi smb config share list...................................................................................................249isi smb config share modify.............................................................................................251isi smb config share revert..............................................................................................253isi smb file close..............................................................................................................255isi smb file list..................................................................................................................255isi smb log-level...............................................................................................................256isi smb permission create................................................................................................257isi smb permission delete................................................................................................258isi smb permission list.....................................................................................................259isi smb permission modify ..............................................................................................260isi smb session delete.....................................................................................................261isi smb session list..........................................................................................................262isi smb share create........................................................................................................262isi smb share delete........................................................................................................263isi smb share list..............................................................................................................263isi smb share modify.......................................................................................................264isi snapshot alias.............................................................................................................265

isi snapshot autocreate...................................................................................................265isi snapshot autodelete...................................................................................................266isi snapshot create..........................................................................................................266isi snapshot delete..........................................................................................................267isi snapshot disable.........................................................................................................268isi snapshot enable.........................................................................................................268isi snapshot list................................................................................................................269isi snapshot lock create...................................................................................................269isi snapshot lock delete...................................................................................................270isi snapshot lock list........................................................................................................271isi snapshot lock modify..................................................................................................271isi snapshot modify..........................................................................................................272isi snapshot rename........................................................................................................273isi snapshot reserve........................................................................................................273isi snapshot schedule create...........................................................................................274isi snapshot schedule delete...........................................................................................276isi snapshot schedule list................................................................................................276isi snapshot schedule modify..........................................................................................277isi snapshot schedule rename.........................................................................................279isi snapshot schedule todo..............................................................................................279isi snapshot settings list..................................................................................................280isi snapshot settings set..................................................................................................281isi snapshot usage..........................................................................................................282isi snmp...........................................................................................................................283isi snmp list......................................................................................................................284isi statistics client.............................................................................................................284isi statistics describe.......................................................................................................291isi statistics drive.............................................................................................................292isi statistics heat..............................................................................................................295isi statistics history..........................................................................................................300isi statistics list all............................................................................................................303isi statistics list classes ...................................................................................................304isi statistics list events.....................................................................................................304isi statistics list nodes......................................................................................................305isi statistics list nooutput..................................................................................................306isi statistics list operations...............................................................................................307isi statistics list orderby...................................................................................................307isi statistics list output......................................................................................................308isi statistics list protocols ................................................................................................309isi statistics list stats........................................................................................................310isi statistics list totalby.....................................................................................................310isi statistics protocol........................................................................................................311isi statistics pstat.............................................................................................................316isi statistics query............................................................................................................318

isi statistics system..........................................................................................................320isi status..........................................................................................................................321isi sync bandwidth create................................................................................................323isi sync bandwidth delete................................................................................................324isi sync bandwidth disable...............................................................................................325isi sync bandwidth enable...............................................................................................325isi sync bandwidth list......................................................................................................325isi sync bandwidth modify...............................................................................................327isi sync config..................................................................................................................328isi sync jobs list...............................................................................................................328isi sync jobs pause..........................................................................................................329isi sync jobs report..........................................................................................................330isi sync jobs resume........................................................................................................330isi sync jobs stop.............................................................................................................331isi sync pause..................................................................................................................331isi sync policy assess......................................................................................................331isi sync policy create.......................................................................................................332isi sync policy delete.......................................................................................................337isi sync policy disable......................................................................................................338isi sync policy enable......................................................................................................338isi sync policy list.............................................................................................................339isi sync policy modify.......................................................................................................340isi sync policy pause.......................................................................................................346isi sync policy report........................................................................................................346isi sync policy reset.........................................................................................................348isi sync policy resolve......................................................................................................349isi sync policy resume.....................................................................................................349isi sync policy run............................................................................................................349isi sync policy stop..........................................................................................................350isi sync reports config.....................................................................................................350isi sync reports policyconf...............................................................................................351isi sync reports rebuild....................................................................................................351isi sync reports rotate......................................................................................................352isi sync resume...............................................................................................................352isi sync start....................................................................................................................352isi sync stop.....................................................................................................................353isi sync target break........................................................................................................353isi sync target cancel.......................................................................................................354isi sync target list.............................................................................................................354isi sync throttle create.....................................................................................................355isi sync throttle delete......................................................................................................356isi sync throttle disable....................................................................................................356isi sync throttle enable.....................................................................................................357isi sync throttle list...........................................................................................................357

isi sync throttle modify.....................................................................................................358isi sync upgrade..............................................................................................................360isi tape delete..................................................................................................................360isi tape list.......................................................................................................................360isi tape rename................................................................................................................361isi tape rescan.................................................................................................................362isi target create................................................................................................................362isi target delete................................................................................................................364isi target list.....................................................................................................................364isi target modify...............................................................................................................365isi update.........................................................................................................................366isi version........................................................................................................................368isi worm create................................................................................................................369isi worm filedelete............................................................................................................370isi worm info....................................................................................................................370isi worm list......................................................................................................................371isi worm modify...............................................................................................................372

OneFS Command Reference

The OneFS command-line interface extends the standard UNIX command set to include additional commands thatenable you to manage an Isilon cluster outside of the web administration interface or LCD panel. You can access thecommand-line interface by opening a secure shell (SSH) connection to any node in the cluster.This command reference provides an alphabetical list of isi commands that you can run in order to configure, monitor,and manage an Isilon IQ clustered storage system and the individual nodes in a cluster. A brief description, usageinformation, and examples are provided for each command.

The reference includes a syntax diagram for each command, using the following conventions:

DescriptionSymbol

Text that is not enclosed in square brackets [ ], angle brackets < >, or braces { } must be typed as shown.Square brackets indicate an optional element.[ ]Angle brackets indicate a placeholder for a value you must supply.< >

Braces indicate a group of mutually exclusive elements that are delimited by vertical-bar (|) symbols.{ }A vertical bar indicates you can select only one of the options shown.|A single or double hyphen indicates an option. Options define the specific action of a command ormodify the operation of a command. Many commands support multiple options.

-- or -

An ellipsis indicates that the preceding option or value can be repeated one or more times....

In the section detailing the possible parameters of each command, all required parameters are labeled "required." Allunlabeled parameters are assumed to be optional.

You can view a basic description of any command and its available options by typing its name followed by the -h optionat the command line:

-h

To view more detailed information at the command line, refer to the isi man page:

man isi[]

2011 Isilon Systems, LLC. 11


isi alertsThe isi alerts command is an alias of the isi events command. For information about a particular sub-command,see the equivalent isi events sub-command reference topic.

isi auth ads accounts listThe isi auth ads accounts list command displays a list of Active Directory machine accounts that areavailable to the cluster.

Syntaxisi auth ads accounts list [--domain=]

Options--domain=, -D

Specifies the Active Directory domain name.

Examples To view a list of all Active Directory machine accounts available to the cluster, run the following command:

isi auth ads accounts list

The system displays output similar to the following example:

Machine AccountDomain Name: SAMPLEDomain Dns Name: SAMPLE.TEST.ISILON.COMDomain Sid: S-1-5-21-1195855716-1269722693-1240286574Hostname: TECHMachine Account: TECH$Host Dns Domain: sample.test.isilon.comSalting Principal: host/[email protected] Version Number: 6Last Change Time: 1298652773

isi auth ads cache flushThe isi auth ads cache flush command flushes cached information for Active Directory (AD) users andgroups on the current node.

Flushing the cache forces the cluster to begin using updated information sooner, and might be useful if user informationon the AD server has recently changed.

Syntaxisi auth ads cache flush {--user= | --group= | --uid= | --gid= | --all}

OptionsYou must specify exactly one type of information to be flushed.

12 2011 Isilon Systems, LLC.


Specify the type of information to be flushed using one of the following options:

--user

--group --uid --gid --all

--user=, -U=Flushes cached information for the specified user.

--group=, -G=Flushes cached information for the specified group.

--uid=, -uFlushes cached information on the user with the specified user ID (UID).

--gid=, -gFlushes cached information on the group with the specified group ID (GID).

--allFlushes cached information on all users and groups.

Examples The following command flushes all information about a user with a UID of 10000:

isi auth ads cache flush --uid=10000

The following command flushes all information about a group with a GID of 10010:

isi auth ads cache flush --gid=10010

isi auth ads dcThe isi auth ads dc command displays or sets the domain controller for the specified domain, or resets the securechannel to the primary domain.

Syntaxisi auth ads dc [--domain=] [--set-dc=] [--reset-schannel] [--site=] [--force] [--verbose] [--list]

OptionsIf no options are specified, displays the current domain controller for the domain.--domain=, -D

Specifies a domain.--set-dc=

Sets the domain controller affinity to the specified domain controller.--reset-schannel

Resets the secure channel to the primary domain.--site=

Searches for a domain controller in a specific site.--force



Forces a DNS query for a domain controller.--verbose, -v

Displays information about the domain controller.--list, -l

Lists all domain controllers for this domain.

Examples To view the Active Directory domain controller with which the node communicates, run the following command:

isi auth ads dc

If available, the system displays the name of the current domain controller, as shown in the following example output:

Current Domain Controller = dc4.sample.test.isilon.com

The following command sets the Active Directory domain controller with which a node communicates todc5.sample.test.isilon:

isi auth ads dc --set-dc=dc5.sample.test.isilon.com

isi auth ads groups listThe isi auth ads groups list command lists groups in the current Active Directory domain.

Syntaxisi auth ads groups list [--domain=] [{--name=|--gid=|--sid=}] [--verbose]

OptionsIf no options are specified, all group names are displayed.--domain=, -D=

Specifies the domain name for the user or group that is authorized to connect to the cluster. This optionrequires an Active Directory fully qualified domain name (for example, test.isilon.com).

--name=, -n=Lists only the specified group.

--gid=, -gLists only the group with the specified group identifier (GID).

--sid=, -S=Lists only the group with the specified security identifier (SID).

--verboseDisplays additional information on groups, including SIDs, GIDs, and Members.

Examples The following command displays information on a group with a GID of 1000001:

isi auth ads groups list --gid=1000001 --verbose




Name: TEST\testgroup_001Gid: 1000001Sid: S-1-5-11-1125855316-1269122633-1940282374-42517Members: TEST\testuser_1, TEST\testuser_2, TEST\testadmin_1, TEST\testadmin_2

The following command displays information on a group named TEST\testgroup_002

isi auth ads groups list --name="TEST\testgroup_002" --verbose


Name: TEST\testgroup_002Gid: 1000005Sid: S-1-5-11-5378055316-1284039633-1940172574-13517Members: TEST\testuser_10, TEST\testuser_11, TEST\testadmin_12, TEST\testadmin_13

isi auth ads joinThe isi auth ads join command joins the cluster to an Active Directory (AD) domain. If this command is runwhile already joined to an AD domain, the cluster will be rejoined.The cluster can be joined to a single AD domain at a time. This command is not atomic and a failure could result inlosing existing domain connectivity.

Syntaxisi auth ads join --domain= --user= --password= [--ou=] [--server-string=] [--keep-accounts] [--kerberos-nfs-spn]


Required. Specifies the domain name for the user or group that is attempting to connect to the cluster.--user=, -U

Required. Specifies an administrative user account to connect to the cluster, if required.--password=, -P

Required. Specifies the administrative user account password.--ou=, -o

Specifies where the machine account object for the cluster is created in the AD. If not specified, theaccount object is created in a container called "Computers."

--server-string=, -CProvides the comment field for this server.

--keep-accounts, -kSpecifies to not delete the existing machine accounts for joining. You must specify this if you are notallowed to create new accounts but someone else has created them for you.

--kerberos-nfs-spn, -KAdds server principal names for using Kerberized NFS.



Examples The following command joins the cluster to the Active Directory domain 'dc1.isilon.com' using the 'admin' account

with password 'pass':

isi auth ads join --domain=dc1.isilon.com -U=admin -P=passThe system displays the following message upon successful completion:

*SUCCESS: Cluster account is joined to the domain.

isi auth ads leaveThe isi auth ads leave disconnects the cluster from an Active Directory domain.

Caution: Disconnecting a cluster from an AD domain will disrupt service for any users who are accessing orintending to access that domain.!

Syntaxisi auth ads leave --force [--workgroup=]

Options--force, -f

Required. Forces the command to complete without producing confirmation messages.--workgroup=

Specifies the workgroup. If this option is omitted, 'WORKGROUP' is used as the workgroup nameby default.

Examples To leave the current Active Directory domain, run the following command:

isi auth ads leave --force

Note: In this example, because the --workgroup option is omitted, the following message displays:

No workgroup specified, assuming 'WORKGROUP'

To verify the cluster is no longer joined to the Active Directory domain, run the isi auth ads status command.

isi auth ads searchThe isi auth ads search command uses Lightweight Directory Access Protocol (LDAP) search filters to queryand display information about Active Directory (AD) domains. This command can be useful for troubleshooting orverifying domain behavior.

Syntaxisi auth ads search --filter= [--domain=] [--machinecreds] [--user= [--password=]] [--attributes=] [--count] [--offset=]



Options--filter=, -f

Specifies the LDAP search filter.--domain=, -D

Specifies the domain name for the user or group that is attempting to connect to the cluster.--machinecreds

Directs the system to use machine credentials in order to connect to the cluster.--user=, -U

Specifies an administrative user account to connect to the cluster, if required.--password=, -P

Specifies the administrative user account password.--attributes=, -l

Sets the LDAP attribute list.--count, -c

Returns just a count of the attributes.--offset=, -o

Starts results at the specified offset.

Examples The following command displays information about a user whose name was "user1" prior to Windows 2000:

isi auth ads search -filter=(sAMAccountName=user1)


[Entry 1] distinguishedName = 'CN=User One,CN=Users,DC=test,DC=com' pwdLastSet = '128091346009531250' primaryGroupID = '513' cn = 'User One' countryCode = '0' objectCategory = 'CN=Person,CN=Schema,CN=Configuration,DC=test,DC=com' objectClass = 'top','person','organizationalPerson','user' codePage = '0' userAccountControl = '66048' objectGUID = 'cbe6506f-5b65-4477-90d1-1596a34f8a6' sAMAccountName = 'user1' whenChanged = '20110126225529.0Z' sAMAccountType = '805306368' objectSid = 'S-1-5-21-1195855716-1269722693-1240286574-7785' whenCreated = '20061127205640.0Z' uSNCreated = '17095' accountExpires = '9223372036854775807' uSNChanged = '17095' givenName = 'User One' instanceType = '4' name = 'user1'

The following command displays information about all groups on the server:

isi auth ads search filter=(objectClass=group)Note: Output for this command might be very large.



The following command displays information about all users created after January 1, 2011:

isi auth ads search--filter='(&(objectClass=user)(whenCreated>=20110101000000.0Z))'

Note: Output for this command might be very large.

isi auth ads spn checkThe isi auth ads spn check command checks valid Service Principal Names (SPN).

Syntaxisi auth ads spn check [--domain=] [--machinecreds] [--user= [--password=]] [--repair]


Specifies the domain name for the user or group that is attempting to connect to the cluster.--machinecreds

Directs the system to use machine credentials in order to connect to the cluster.--user=, -U

Specifies an administrative user account to connect to the cluster, if required.--password=, -P

Specifies the administrative user account password.--repair, -r

Repairs any missing SPNs.

Examples To check if there are any SPNs currently missing, run the following command:

isi auth ads spn check


Missing Service Principal Names:

HOST/test-1

The following command logs onto the newUser account and repairs missing SPNs:

isi auth ads spn check --repair --user=newUser --password=1234

If successful, the system displays output similar to the following example:

Successfully added missing SPNs

If unsuccessful, the system displays output similar to the following example:

LdapError: Failed to modify attribute [19]



isi auth ads spn createThe isi auth ads spn create command adds a Service Principal Name (SPN) for a machine account.

Note: SPNs must be propagated to all domain controllers before clients can use them.

Syntaxisi auth ads spn create --spn= [--domain=] [--account=] [--node=] [--host=] [--machinecreds] [--user= [--password=]]

Options--spn=, -s

Required. Specifies the SPN for the user or group to register.--domain=, -D

Specifies the domain name for the user or group that is attempting to connect to the cluster.--account=, -a

Specifies the address of the machine account. If no account is specified, the machine account of thecluster is used.

--node=, -nSpecifies the specific node number. If you use this option, the user or group will attempt to registertwo SPNs: one in the form host/node, and another in the form host/node.example.com.

--host=, -hSpecifies a SmartConnect host name. If you use this option, the user or group will attempt to registerthe SPN host/hostname.

--machinecredsDirects the system to use machine credentials in order to connect to the cluster.

--user=, -USpecifies an adminstrative user account to connect to the cluster, if required.

--password=, -PSpecifies the administrative user account password.

Examples The following command creates an SPN for the "isi-auth-sample.isilon.com" SmartConnect pool:

isi auth ads spn create --spn=cifs/isi-auth-sample.isilon.com--user=Administrator



isi auth ads spn deleteThe isi auth ads spn delete command deletes a Service Principal Name (SPN) that is registered against amachine account.

Syntaxisi auth ads spn delete --spn= [--domain=] [--account=] [--node=] [--host=] [--machinecreds] [--user= [--password=]]

Options--spn=, -s

Required. Specifies the SPN.--domain=, -D

Specifies the domain name for the Active Directory user or group that is attempting to connect to thecluster.

--account=, -aSpecifies the address of the machine account to delete.

--node=, -nSpecifies the specific node number.

--host=, -hSpecifies a SmartConnect host name.


--user=, -USpecifies an adminstrative user account to connect to the cluster, if required.

--password=, -PSpecifies the administrative user account password.

Examples The following command deletes an SPN for the "isi-auth-sample.west.isilon.com" SmartConnect zone:

isi auth ads spn delete --spn=cifs/isi-auth-sample.west.isilon.com

Note: If required, the system displays a prompt for an administrative user name and password.

If the command if successful, the system displays output similar to the following example:

Successfully deleted SPN(s).



isi auth ads spn listThe isi auth ads spn list command displays a list of Service Principal Names (SPN) that are registered againsta machine account.

Syntaxisi auth ads spn list [--domain=] [--account=] [--machinecreds] [--user= [--password=]]

OptionsIf no options are specified, the system displays a list of SPNs that are currently registered against the machine account.--domain=, -D

Specifies the domain name for the Active Directory user or group that is attempting to connect to thecluster.

--account=, -aSpecifies the address of the machine account.


--user=, -USpecifies the required user name to connect to the cluster.

--password=, -PSpecifies the user account password.

Examples To view a list of SPNs that are currently registered against the machine account, run the following command:

isi auth ads spn list


HOST/isi-auth HOST/isi-auth.sample.isilon.com

isi auth ads statusThe isi auth ads status command displays whether a cluster is joined to an Active Directory domain. If joined,the system displays information about the joined domain and the machine account. The machine account typically usesthe cluster name.

Syntaxisi auth ads status [--verbose] [--domains] [--refresh]

OptionsIf no options are specified, information about the joined domain and the machine account is displayed.--verbose, -v

Display includes information about all reachable domains.



--domains, -dDisplays a list of domains and their status.

--refresh, -rRefreshes any cached information.

Examples To determine whether the cluster is joined to an Active Directory domain, run the following command:

isi auth ads status

If the cluster is joined to an Active Directory domain, the system displays output similar to the following example:Active Directory Services Status:Mode: unprovisionedStatus: onlinePrimary Domain: SAMPLE.ISILON.COMForest: sample.isilon.comSite: SiteCNetBIOS Domain: SAMPLEDomain Controller: sample-dc11.sample.isilon.comMachine Account: CLUSTER-ONE

If the cluster is not joined to a domain, the system displays the following output:The cluster is not joined to a domain.

isi auth ads timeThe isi auth ads time command displays or sets the time on a domain controller, or synchronizes the cluster'stime with an Active Directory domain.

Syntaxisi auth ads time [--domain=] [--sync [--force]]

OptionsIf no options are specified, the system displays the current time according to the domain cluster.--domain=

Specifies the Active Directory domain to query. If this option is not specified, the current ActiveDirectory domain is used

--syncSynchronizes the cluster time to the domain controller. If the difference between the cluster time andthe domain controller time is less than 30 seconds, you must also use the --force option.

--force, -fForces command execution without displaying warnings.

Examples To view the current time according to the domain controller, run the following command:

isi auth ads time




Thu Feb 24 12:07:02 2011

To synchronize the time across the cluster with the time on the current domain controller, run the following command:

isi auth ads time --sync


Successfully synced cluster time with the dc.

isi auth ads users listThe isi auth ads users list command displays lists of users on Active Directory domains.

Syntaxisi auth ads users list [--domain=] [{--name=|--uid=|--sid=}] [--verbose]

OptionsIf no options are specified, all users on the current Active Directory domain are displayed.--domain=, -D=

Specifies the domain name for the user or group that is authorized to connect to the cluster. This optionrequires an Active Directory fully qualified domain name (for example, test.isilon.com). If this optionis not specified, the current Active Directory domain is used.

--name=, -n=Lists only the specified user.

--uid=, -u=Lists only the user that is associated with the specified UID.

--sid=, -S=Lists only the user that is associated with the specified SID.

--verboseDisplays additional information on groups, including UIDs, GIDs, SIDs, Shells, Homes, and Groups.

Examples The following command displays information on a user with a UID of 1000002:

isi auth ads users list --uid=1000002 -v


User: TEST\testuser_1Uid: 1000002Gid: 1000001(testgroup_001)Sid: S-1-5-31-4825832716-1239506693-1227495274-77602Shell: /bin/shHome: /ifs/home/TEST/testuser_1Groups: 1000001(TEST\testgroup_001)Flags: Password Never Expires



The following command displays information on a user called TEST\newTestUser:

isi auth ads users list --uid=1000002 -v


User: TEST\newTestUserUid: 1000010Gid: 1000005(TEST\testgroup_002)Sid: S-1-5-31-1037589374-3720957693-1625495264-73720Shell: /bin/shHome: /ifs/home/TEST/newTestUserGroups: 1000005(TEST\testgroup_002)

isi auth config krb5 add realmThe isi auth config krb5 add realm command adds a realm definition to the Kerberos configuration file.

Syntaxisi auth config krb5 --realm= [--default-domain=] [--kdc=] [--admin-server=] [--auth-to-local=] [--is-active-directory=] [--is-default-realm=]

Options--realm=

Required. Specifies the DNS domain of the realm to add.--default-domain=

Specifies the default domain. The default domain is 'none'.--kdc=

Specifies the Key Distribution Center (KDC) hostname or IP address.--admin-server=

Specifies the admin server hostname or IP address. The default server is 'none'.--auth-to-local=

Specifies the auth-to-local mapping rule.--is-active-directory=

Indicates whether the realm is an Active Directory domain. The default setting is False.--is-default-realm=

Indicates whether the realm is the default realm.

Examples The following command adds the SAMPLE.TEST.ISILON.COM realm as an active-directory realm in the Kerberos

configuration file:

isi auth config krb5 add realm --realm=SAMPLE.TEST.ISILON.COM--is-active-directory=true



isi auth config krb5 delete defaultThe isi auth config krb5 delete default command deletes settings from the 'defaults' section of theKerberos configuration file.

Syntaxisi auth config krb5 delete default {--default-keytab-name |--default-realm | --default-tgs-enctypes | --default-tkt-enctypes |--permitted-enctypes | --preferred-enctypes}

OptionsYou must specify at least one setting to be deleted.

Specify one or more settings to be deleted using the following options:

--default-keytab-name --default-realm --default-tgs-enctypes --default-tkt-enctypes --permitted-enctypes --preferred-enctypes

--default-keytab-nameDeletes the default keytab file.

--default-realmDeletes the default realm.

--default-tgs-enctypesDeletes the default tgs enctypes.

--default-tkt-enctypesDeletes the default tkt enctypes.

--permitted-enctypesDeletes permitted enctypes.

--preferred-enctypesDeletes preferred enctypes.

Examples To delete the preferred enctypes from the 'defaults' section of the Kerberos configuration file, run the following

command:

isi auth config krb5 delete default --preferred-enctypes



isi auth config krb5 delete domainThe isi auth config krb5 delete domain command deletes a domain-to-realm mapping from the'domain_realm' section of the Kerberos configuration file.

Syntaxisi auth config krb5 delete domain --domain=

Options--domain=

Required. Specifies the domain associated with the realm.

Examples The following command deletes the mapping for the domain sample.test.isilon.com:

isi auth config krb5 delete domain sample.test.isilon.com

isi auth config krb5 delete realmThe isi auth config krb5 delete realm command deletes either the entire realm or individual settingsfrom 'realms' section of the Kerberos configuration file.

Syntaxisi auth config krb5 delete realm --realm= [--all] [--default-domain] [--all-kdc] [--kdc=] [--admin-server] [--auth-to-local=] [--all-auth-to-local]

Options--realm=

Required. Specifies the name of the realm.--all

Deletes the realm.--default-domain

Deletes the default domain.--all-kdc

Deletes all KDC definitions.--kdc=

Deletes the specified KDC hostname or IP address.--admin-server

Deletes admin server hostname or IP address.--auth-to-local=

Deletes the specified auth-to-local mapping rule.--all-auth-to-local

Deletes all auth-to-local definitions.



Examples The following command removes the default domain from the SAMPLE.TEST.ISILON.COM realm:

isi auth config krb5 delete realm --realm=SAMPLE.TEST.ISILON.COM--default-domain

The following command removes the SAMPLE.TEST.ISILON.COM realm entirely:

isi auth config krb5 delete realm --realm=SAMPLE.TEST.ISILON.COM --all

isi auth config krb5 listThe isi auth config krb5 list command displays the parameters in the Kerberos configuration file.

Syntaxisi auth config krb5 list [--section=] [--tree]

Options--section=

Specifies the prefix of the settings that are displayed.--tree

Displays the output in tree format.

Examples To view settings in the defaults section of the Kerberos configuration file, run the following command:

isi auth config krb5 list --section=krb5cfg.defaults


krb5cfg.defaults.always_send_preauth=Truekrb5cfg.defaults.default_realm=SAMPLE.TEST.ISILON.COMkrb5cfg.defaults.default_tkt_enctypes=krb5cfg.defaults.dns_lookup_realm=Truekrb5cfg.defaults.default_keytab_name=krb5cfg.defaults.permitted_enctypes=krb5cfg.defaults.dns_lookup_kdc=Truekrb5cfg.defaults.preferred_enctypes=krb5cfg.defaults.default_tgs_enctypes=

To view the Kerberos configuration settings in a tree format, run the following command:

isi auth config krb5 list --tree


{'appdefaults': {}, 'defaults': {'always_send_preauth': True, 'default_keytab_name': '', 'default_realm': 'SAMPLE.TEST.ISILON.COM', 'default_tgs_enctypes': '', 'default_tkt_enctypes': '', 'dns_lookup_kdc': True, 'dns_lookup_realm': True, 'permitted_enctypes': '', 'preferred_enctypes': ''},



'domain_realm': {}, 'realms': {}}

isi auth config krb5 modify defaultThe isi auth config krb5 modify default command sets parameters in the 'defaults' section of theKerberos configuration file. Settings specified by this command apply to all domains unless overridden.

Syntaxisi auth config krb5 {--always-send-preauth= | --dns-lookup-kdc= | --dns-lookup-realm= | --default-realm= | --default-keytab-name= | --permitted-enctypes= | --default-tkt-enctypes= | --default-tgs-enctypes= | --preferred-enctypes=}...

OptionsYou must set at least one parameter in the 'defaults' section of the Kerberos configuration file.

Set one or more parameters in the 'defaults' section of the Kerberos configuration file using the following options:

--always-send-preauth --dns-lookup-kdc --dns-lookup-realm --default-realm --default-keytab-name --permitted-enctypes --default-tkt-enctypes --default-tgs-enctypes --preferred-enctypes

--always-send-preauth=Specifies whether the preauth flag is required.

--dns-lookup-kdc=Specifies DNS lookup Key Distribution Center (KDC).

--dns-lookup-realm=Specifies DNS lookup realm.

--default-realm=Specifies the default realm.

--default-keytab-name=Specifies the default keytab file.

--permitted-enctypes=Specifies the permitted encryption types (enctypes).

Note: This option specifies the complete list of permitted enctypes; it does not add tothe existing list.

--default-tkt-enctypes=Specifies the default tkt enctypes.



Note: This option specifies the complete list of default tkt enctypes, it does not add tothe existing list.

--default-tgs-enctypes=Specifies the default tgs enctypes.

Note: This option specifies the complete list of default tgs enctypes, it does not add tothe existing list.

--preferred-enctypes=Specifies preferred enctypes.

Note: This option specifies the complete list of preferred enctypes, it does not add to theexisting list.

Examples To change the list of permitted enctypes to RC4-HMAC DES-CBC-MD5 DES-CBC-CRC, run the following

command:

isi auth config krb5 modify default --permitted-enctypes="RC4-HMAC DES-CBC-MD5DES-CBC-CRC"

isi auth config krb5 modify domainThe isi auth config krb5 modify domain command sets domain-to-realm mappings in the 'domain_realm'section of the Kerberos configuration file.

Syntaxisi auth config krb5 modify domain --domain= --realm=

Options--domain=

Required. Specifies the domain to associate with the realm.--realm=

Required. Specifies the realm to associate with the domain.

ExamplesThe following command links a domain and realm together:

isi auth config krb5 modify domain --domain=domain.name.com--realm=DOMAIN.NAME.COM



isi auth config krb5 modify realmThe isi auth config krb5 modify realm command sets parameters in the 'realms' section of the Kerberosconfiguration file.

Syntaxisi auth config krb5 modify realm --realm= [--default-domain=] [--kdc=] [--admin-server=] [--auth-to-local=] [--is-active-directory=] [--is-default-realm=]

Options--realm=

Required. Specifies which realm's parameters are being changed.--default-domain=

Sets the default domain for users who do not specify a domain.--kdc=

Specifies Key Distribution Center (KDC) hostname or IP.--admin-server=

Specifies admin server hostname or IP address.--auth-to-local=

Specifies auth to local mapping rule.--is-active-directory=

Indicates whether the realm is active-directory.--is-default-realm=

Indicate whether this realm is the default realm.

Examples The following command switches the SAMPLE.TEST.ISILON.COM realm to an active-directory realm in the

Kerberos configuration file:

isi auth config krb5 add realm --realm=SAMPLE.TEST.ISILON.COM--is-active-directory=true

isi auth config krb5 writeThe isi auth config krb5 write command writes the Kerberos configuration file to disk.

Syntaxisi auth config krb5 write [--path=]

Options--path=, -p

Specifies the file path to save the configuration file to. If this option is omitted, the configuration fileis written to the /etc/krb5.conf file by default.



Examples The following command writes the Kerberos configuration to the /example path:

isi auth config krb5 write --path=/example.

isi auth config ldap listThe isi auth config ldap list command lists current Lightweight Directory Access Protocol (LDAP) attributeconfiguration settings.

Syntaxisi auth config ldap list [--detailed] [--ldap-cn] [--ldap-cryptpasswd] [--ldap-email] [--ldap-gecos] [--ldap-gidnumber] [--ldap-group-filter] [--ldap-homedirectory] [--ldap-loginshell] [--ldap-member-nis-netgroup] [--ldap-memberUid] [--ldap-netgroup-filter] [--ldap-nis-netgroup-triple] [--ldap-ntpasswdhash] [--ldap-shadow-user-filter] [--ldap-shadowexpire] [--ldap-shadowflag] [--ldap-shadowinactive] [--ldap-shadowlastchange] [--ldap-shadowmax] [--ldap-shadowmin] [--ldap-shadowwarning] [--ldap-uid] [--ldap-uidnumber] [--ldap-uniquemember] [--ldap-user-filter] [--param=] [--verbose]

OptionsIf no options are specified, all current attribute settings are displayed in the default format.--detailed, -d

Displays detailed information about configuration settings.--ldap-cn

Displays information on the LDAP cn attribute.--ldap-cryptpasswd

Displays information on the LDAP cryptPasswd attribute.--ldap-email

Displays information on the LDAP email attribute.--ldap-gecos

Displays information on the LDAP gecos attribute.--ldap-gidnumber

Displays information on the LDAP gidNumber attribute.--ldap-group-filter

Displays information on the LDAP filter for group objects.--ldap-homedirectory

Displays information on the LDAP homeDirectory attribute.--ldap-loginshell

Displays information on the LDAP loginShell attribute.--ldap-member-nis-netgroup

Displays information on the LDAP member Network Information Service (NIS) netgroup.--ldap-memberUid

Displays information on the LDAP memberUid attribute.--ldap-netgroup-filter



Displays information on the LDAP filter for netgroups objects.--ldap-nis-netgroup-triple

Displays information on the LDAP NIS netgroup triple.--ldap-ntpasswdhash

Displays information on the LDAP ntPasswdHash attribute.--ldap-shadow-user-filter

Displays information on the LDAP filter for shadow user properties.--ldap-shadowexpire

Displays information on the LDAP shadowExpire attribute.--ldap-shadowflag

Displays information on the LDAP shadowFlag attribute.--ldap-shadowinactive

Displays information on the LDAP shadowInactive attribute.--ldap-shadowlastchange

Displays information on the LDAP shadowLastChange attribute.--ldap-shadowmax

Displays information on the LDAP shadowMax attribute.--ldap-shadowmin

Displays information on the LDAP shadowMin attribute.--ldap-shadowwarning

Displays information on the LDAP shadowWarning attribute.--ldap-uid

Displays information on the LDAP uid attribute.--ldap-uidnumber

Displays information on the LDAP uidNumber attribute.--ldap-uniquemember

Displays information on the LDAP uniqueMember attribute.--ldap-user-filter

Displays information on the LDAP filter for user objects.--param=, -p

Displays information on the specified parameters.--verbose, -v

Displays verbose output.

Examples To view the LDAP gidNumber attribute, run the following command:

isi auth config ldap list --ldap-gidnumber

The command will display output in a form similar to the following output:

Authentication OptionsOption name Value------------------------------ ---------------------------------------------

ldap-gidnumber gidNumber



To view the LDAP gidNumber attribute, run the following command:

isi auth config ldap list --ldap-gidnumber --verbose


LDAP Attribute Optionsldap-gidnumber = gidNumber (Default = gidNumber)

To view the LDAP gidNumber attribute, run the following command:

isi auth config ldap list --ldap-gidnumber --detailed


ldap-gidnumber----------------------------------------------------------------------------

Class: LDAP Attribute OptionsDescription: LDAP gidNumber attributeCurrent Value: gidNumberDefault: gidNumber

isi auth config ldap modifyThe isi auth config ldap modify command configures Lightweight Directory Access Protocol (LDAP)attributes for non-standard directories.

Syntaxisi auth config ldap modify {--ldap-cn=|--ldap-email= |--ldap-cryptpasswd=|--ldap-gecos= |--ldap-gidnumber=|--ldap-group-filter= |--ldap-homedirectory=|--ldap-loginshell= |--ldap-member-nis-netgroup=|--ldap-memberUid= |--ldap-netgroup-filter=|--ldap-nis-netgroup-triple= |--ldap-ntpasswdhash=|--ldap-shadowexpire= |--ldap-shadowflag=|--ldap-shadowinactive= |--ldap-shadowlastchange=|--ldap-shadowmax= |--ldap-shadowmin=|--ldap-shadow-user-filter= |--ldap-shadowwarning=|--ldap-uid= |--ldap-uidnumber=|--ldap-uniquemember= |--ldap-user-filter=|--param= --value=}... [--verbose]

OptionsYou must specify at least one LDAP attribute to be configured.

Specify one or more LDAP attributes using the following options:

--ldap-cn --ldap-cryptpasswd --ldap-email --ldap-gecos --ldap-gidnumber --ldap-group-filter --ldap-homedirectory --ldap-loginshel



--ldap-member-nis-netgroup --ldap-memberUid --ldap-netgroup-filter --ldap-nis-netgroup-triple --ldap-ntpasswdhash --ldap-shadowexpire --ldap-shadowflag --ldap-shadowinactive --ldap-shadowlastchange --ldap-shadowmax --ldap-shadowmin --ldap-shadow-user-filter --ldap-shadowwarning --ldap-uid--ldap-uidnumber --ldap-uniquemember --ldap-user-filter --param and --value (must be specified together)--ldap-cn=

Specifies new LDAP cn attribute.--ldap-cryptpasswd=

Specifies new LDAP cryptPasswd attribute.--ldap-email=

Specifies new LDAP email attribute.--ldap-gecos=

Specifies new LDAP gecos attribute.--ldap-gidnumber=

Specifies new LDAP gidNumber attribute.--ldap-group-filter=

Specifies new LDAP filter for group objects.--ldap-homedirectory=

Specifies new LDAP homeDirectory attribute.--ldap-loginshell=

Specifies new LDAP loginShell attribute.--ldap-member-nis-netgroup=

Specifies new LDAP Member NIS netgroup.--ldap-memberUid=

Specifies new LDAP memberUid attribute.--ldap-netgroup-filter=

Specifies new LDAP filter for netgroups objects.--ldap-nis-netgroup-triple=

Specifies new LDAP NIS netgroup triple.--ldap-ntpasswdhash=

Specifies new LDAP ntPasswdHash attribute.

Note: --ldap-shadow attributes specify references to settings that were historically stored in the shadow passwordfile /etc/shadow in UNIX systems.



--ldap-shadowexpire=Specifies new LDAP shadowExpire attribute.

--ldap-shadowflag=Specifies new LDAP shadowFlag attribute.

--ldap-shadowinactive=Specifies new LDAP shadowInactive attribute.

--ldap-shadowlastchange=Specifies new LDAP shadowLastChange attribute.

--ldap-shadowmax=Specifies new LDAP shadowMax attribute.

--ldap-shadowmin=Specifies new LDAP shadowMin attribute.

--ldap-shadow-user-filter=Specifies new LDAP filter for shadow user properties.

--ldap-shadowwarning=Specifies new LDAP shadowmin attribute.

--ldap-uid=Specifies new LDAP uid attribute.

--ldap-uidnumber=Specifies new LDAP uidNumber attribute.

--ldap-uniquemember=Specifies new LDAP uniqueMember attribute.

--ldap-user-filter=Specifies new LDAP filter for user objects.

--param=, -pSpecifies a Parameter to modify.

--value=, -vSets the parameter specified by the --value option to the given value.

--verboseDisplays verbose information.

The default values for these settings are dependant on the value of isi auth config modify--ldap-attribute-map=. The following table displays the default values for these parametersaccording to their respective maps:

Table 1. Default Attribute Value Maps

ldapsamadrfc2307Attribute Map

cncnldap-cn

msSFU30Passwordldap-cryptpasswd

emailemailemailldap-email

gecosmsSFU30Gecosgecosldap-gecos

gidNumbermsSFU30GidNumbergidNumberldap-gidnumber



ldapsamadrfc2307Attribute Map

(objectClass=posixGroup)(objectClass=Group)(objectClass=posixGroup)ldap-group-filterhomeDirectorymsSFU30HomeDirectoryhomeDirectoryldap-homedirectory

loginShellmsSFU30LoginShellloginShellldap-loginshell

memberNisNetgroupmemberNisNetgroupldap-member-nis-netgroup

memberUidmsSFU30MemberUidmemberUidldap-memberUid

(objectClass=nisNetgroup)(objectClass=nisNetgroup)ldap-netgroup-filternisNetgroupTriplenisNetgroupTripleldap-nis-netgroup-triple

sambaNTPasswordldap-ntpasswdhash

(objectClass=shadowAccount)(objectClass=User)(objectClass=shadowAccount)ldap-shadow-user-filtershadowExpiremsSFU30ShadowExpireshadowExpireldap-shadowexpire

shadowFlagmsSFU30ShadowFlagshadowFlagldap-shadowflag

shadowInactivemsSFU30ShadowInactiveshadowInactiveldap-shadowinactive

Date post:	25-Nov-2015
Category:	Documents
Upload:	jose-pinell-garcia
View:	930 times
Download:	16 times

OneFS 6.5 Command Reference

Documents