2009.Q3.2.0
This minor release contains a number of bug fixes for the 2009.Q3 release. This update is recommended for all users, particularly those using NDMP, iSCSI (especially with iSNS), shadow migration, clustering, and Infiniband. Customers with clustered systems should see RN017 at the bottom of this page before upgrading their systems.
Because this minor release includes all features and bug fixes included in previous releases of 2009.Q3 (including 2009.Q3.0.0 and 2009.Q3.1.0), customers updating from older releases should review the release notes for all previous 2009.Q3 releases starting with 2009.Q3.0.0. This is particularly important for customers using iSCSI as there are significant iSCSI management changes in 2009.Q3.
The following major issues have been addressed:
- NFS state (including locks in v3 and v4, and delegations in v4) not persisted across takeover/failback
- Shadow migration with large numbers of threads causing poor responsiveness from the management interface
- Shadow migration using NFSv3 obtaining the wrong permissions for files
- Shadow migration panic with CIFS clients
- Unable to add storage to a raidz2 pool with wide stripes
- Unable to create LUNs on VMware and VirtualBox simulators
- Several stability and functionality issues with iSCSI and iSNS
- Potential security issue with non-root administrative users: in certain error conditions, the appliance shell can give authorized non-root administrative users an OS shell on the system. Such a shell runs with the uid associated with the user, so the user cannot make any changes to the system configuration nor read or write any files that the user is not authorized to read and write according to filesystem permissions. However, this may allow access to files that they wouldn't have been able to access due to other policy constraints, such as filesystems exported only to specific hosts to which the user does not have access.
- NDMP backups sometimes omit files in directories with many subdirectories having long names. This issue is very unlikely to occur but results in silent failure to backup some files, so customers should be sure to verify the contents of full backups created on releases prior to 2009.Q3.2.0 or else replace them with full backups created using this release or later.
- Performance issues related to disabling LSO for Infiniband: previous updates disabled LSO due to data integrity issues, but this had a major impact on Infiniband performance. The integrity issues have been addressed in this release, and LSO has been enabled.
Supported Platforms
Issues Addressed
The following CRs have been fixed in this release:
| CR | Synopsis |
|---|---|
| 6891169 | akdatalink tosses 'dladm show-link' error messages |
| 6878617 | logadm doesn't roll .ak logs |
| 6882700 | Nightly log rotation restarts akd, which can be fatal in a clustered environment. |
| 6890662 | manual akbundle -u deletes bundle even if upload fails |
| 6887568 | can't add storage to a raidz2_max pool in 2009.Q3 |
| 6877295 | COMSTAR: BUI, Target requires CHAP name and secret for unidirectional authentication |
| 6878248 | COMSTAR BUI: Enable CHAP name and CHAP Secret when RADIUS is selected on Target |
| 6886979 | shadow migration: threads should not be in the RT class |
| 6881326 | BUI should report error if sharenfs value limit is exceeded |
| 6886136 | Fail to create iSCSI LUNs when product ID is over 16 characters |
| 6886017 | COMSTAR iSCSI: iSCSI authorizations only allow deleting targets/initiators, not creating |
| 6884935 | aksh-wrapper erroneously drops unprivileged users onto OS shell |
| 6888478 | shadow migration: panic in issig() when accessed from CIFS client |
| 6884794 | AmberRoad panic with 2009Q3 when running smbutil due to bad mblk |
| 6892240 | NFSv3 attribute mask is not returned correctly |
| 6895026 | NFS rm state not correctly mounted |
| 6883296 | incorrect isns updates after modify-target and after multiple-portal updates |
| 6883881 | deadlock in blocking chain (iscsit_isns_portal_online and isns_create_target_info) |
| 6867945 | iscsit does not handle pminsize properly in iscsit_dbuf_alloc |
| 6878053 | Fix for 6867945 results in undersized buffer allocations |
| 6874207 | Incorrect access permission check when setting file size |
| 6878085 | COMSTAR iscsit does not send failure response when CHAP authentication failed |
| 6884892 | PANIC : Deadlock: cycle in blocking chain |
| 6885105 | Potential for deadlock in smb_node_set_delete_on_close() |
| 6877975 | TCP_corrupt exposes corruption from using LSO on hermon |
| 6886789 | NDMP backups skip files in certain situations – sometimes silently |
Known issues
| Release Note | RN001 |
|---|---|
| Title | Network Datalink Modifications Do Not Rename Routes |
| Platforms | All |
| Related Bug IDs | 6715567 |
The Configuration/Network view permits a wide variety of networking configuration changes on the Sun Storage system. One such change is taking an existing network interface and associating it with a different network datalink, effectively moving the interface's IP addresses to a different physical link (or links, in the case of an aggregation). In this scenario, the network routes associated with the original interface are automatically deleted, and must be re-added by the administrator to the new interface. In some situations this may imply loss of a path to particular hosts until those routes are restored.
| Release Note | RN002 |
|---|---|
| Title | Considerations When Reconfiguring the Active Administrative Network Interface |
| Platforms | All |
| Related Bug IDs | - |
The Configuration/Network view permits a wide variety of networking configuration changes on the Sun Storage system. One such change is modifying or deleting the active administrative interface over which the administrator is connected to the web browser or command-line interface itself, which may also be providing the default route for the system. The appliance software attempts to detect such modifications and warn the administrator first. If such a reconfiguration is confirmed or not detected in advance, the administrator will lose contact with the appliance during the network reconfiguration. The network reconfiguration will complete, but if contact cannot be restored with the appliance (by reloading the web address or reconnecting using ssh) due to an error in the configuration applied by the administrator or the loss of the default route, the administrator should log in using the service processor console and correct the configuration using the command-line.
| Release Note | RN003 |
|---|---|
| Title | J4400 Emits Audible Alarm When a Drive is Hot-Unplugged |
| Platforms | 7410 |
| Related Bug IDs | 6725548 |
In the current version of J4400 Array firmware, used in the disk enclosures for the Sun Storage 7410, the J4400 emits an audible alarm when a disk drive is hot-unplugged. The alarm warns the operator that a drive has been removed, and the alarm is silenced when the drive is replaced, either by the original drive or by a new replacement. In some operator scenarios, it may be preferable to not emit such an alarm, particularly if a spare drive is not immediately available. The operator can manually silence the alarm by depressing a button on the J4400 front panel. Future versions of the J4400 firmware and appliance software will disable this behavior and/or permit it to be configured by the administrator.
| Release Note | RN004 |
|---|---|
| Title | Changing Active Directory domains requires a CIFS service restart |
| Platforms | All |
| Related Bug IDs | 6829904 |
When reconfiguring the Active Directory service to participate in a different domain, restart the CIFS service before attempting to reconfigure the Active Directory service.
| Release Note | RN005 |
|---|---|
| Title | Appliance doesn't boot after removing first system disk |
| Platforms | 7210 |
| Related Bug IDs | 6812465 |
In a 7210 System, removing the first system disk will make the system unbootable, despite the presence of a second mirrored disk. To workaround this issue, break into the BIOS boot menu, under 'HDD boot order', modify the list so the first item is "[SCSI:#0300 ID00 LU]".
| Release Note | RN006 |
|---|---|
| Title | CIFS service fails with large network configs |
| Platforms | All |
| Related Bug IDs | 6820325 |
With a large number of network interfaces, the CIFS service NetBIOS registration mechanism can time out, causing the CIFS service to fail. If you encounter this situation, please contact Sun support to work around the issue.
| Release Note | RN007 |
|---|---|
| Title | J4400 SIM cards fail under load |
| Platforms | 7410 |
| Related Bug IDs | 6803801 |
Under heavy load in large configurations, the first SIM card (SIM 0) can fail. The symptoms are a blue LED on the card itself and an audible alarm, with possible alerts in the UI regarding paths and/or power supplies being removed from the chassis. I/O will continue down other available paths, and there no impact to availability, though performance may suffer. Re-seating the SIM card (removing it and inserting it) should fix the problem. If this problem persists, please contact Sun Support.
| Release Note | RN008 |
|---|---|
| Title | Automatic snapshot deletion interferes with replication |
| Platforms | All |
| Related Bug IDs | 6833815 |
If an automatic snapshot is deleted during replication of the same project, it's possible for the replication to fail. The safest workaround is to disable automatic snapshots if a project is being replicated. Alternatively, picking a schedule that is guaranteed to not interfere with ongoing replication may work, but is dependent on each incremental replication stream being sent in a well-defined period of time.
| Release Note | RN009 |
|---|---|
| Title | Microsoft Internet Explorer 8 is not supported |
| Platforms | All |
| Related Bug IDs | 6847202 |
Microsoft Internet Explorer 8 is currently not supported for the web-based management interface.
| Release Note | RN010 |
|---|---|
| Title | NDMP does not backup user quotas |
| Platforms | All |
| Related Bug IDs | 6854196 |
NDMP backups of appliance data includes share metadata, including projects, shares, and share properties (see the documentation for details). However, user quotas (new to the 2009.Q3 release) are currently not backed up with NDMP. This configuration will have to be manually restored.
| Release Note | RN011 |
|---|---|
| Title | NDMP does not backup nested filesystems |
| Platforms | All |
| Related Bug IDs | 6875080 |
NDMP does not backup nested filesystems (new to 2009.Q3). When creating filesystems mounted within other filesystems, be sure to specify each mountpoint separately in the NDMP DMA backup configuration.
| Release Note | RN012 |
|---|---|
| Title | Data integrity and connectivity issues with NFS/RDMA |
| Platforms | All |
| Related Bug IDs | 6879948, 6870155 |
The NFS/RDMA support in 2009.Q3 is a preview for early adopters and should not be used on production systems. There are currently no supported clients. Linux clients still under development have experienced data validation errors and loss of access to NFS/RDMA shares on the appliance.
| Release Note | RN013 |
|---|---|
| Title | iSCSI target and initiator groups must be synchronized between replication peers |
| Platforms | All |
| Related Bug IDs | None |
The 2009.Q3 release introduces target groups and initiator groups on which individual iSCSI LUNs are exported. When replicating projects containing iSCSI LUNs using the built-in remote replication feature, ensure that the target groups and initiator groups used by LUNs within the project also exist on the replication target. It's only required that groups exist with the same name, not that they define the same configuration. Failure to ensure this can result in failure to clone and
export replicated LUNs.
| Release Note | RN014 |
|---|---|
| Title | Network interfaces may fail to come up in large jumbogram configurations |
| Platforms | All |
| Related Bug IDs | 6857490 |
In systems with large numbers of network interfaces using jumbo frames, some network interfaces may fail to come up due to hardware resource limitations. Such network interfaces will be unavailable, but will not be shown as faulted in the BUI or CLI. If this occurs, turn off jumbo frames on some of the network interfaces.
| Release Note | RN015 |
|---|---|
| Title | IPoIB datalinks become misconfigured |
| Platforms | All |
| Related Bug IDs | 6864893 |
Live cable and/or subnet manager partition re-configuration may result in mis-configured IPoIB network devices, datalinks or interfaces. If this happens, delete the affected IPoIB interfaces and partition datalinks on the affected controller. To recover the underlying IPoIB device, make sure that all IB cables are properly configured and the subnet manager is up and running with a valid partition table. Next, reboot the controller with the mis-configured IPoIB device.
| Release Note | RN016 |
|---|---|
| Title | Default route becomes inactive after configuration restore |
| Platforms | All |
| Related Bug IDs | 6880997 |
After performing a configuration restore, the default route may become inactive. It may need to be reconfigured.
| Release Note | RN017 |
|---|---|
| Title | Clustered systems must be upgraded to 2009.Q2.5.0 or later before upgrading to 2009.Q3.2.0. |
| Platforms | All |
| Related Bug IDs | 6883783. |
Clustered systems must be upgraded to the 2009.Q2.5.0 or any 2009.Q3 release before being updated to the 2009.Q3.2.0 release. If a cluster is already running either 2009.Q2.5.0 or later (including any 2009.Q3 release), it may be upgraded directly to 2009.Q3.2.0. Otherwise, it must first be updated to 2009.Q2.5.0. The 2009.Q2.5.0 release can be downloaded from the Software updates page.
Comments (2)
Nov 04
PeterTripp says:
Also fixed, CR 6888078. A regression where Mac OSX clients connecting via CIFS g...Also fixed, CR 6888078.
A regression where Mac OSX clients connecting via CIFS get access denied errors when attempting to write/append to an existing file. Reads still worked, writing to new files was unaffected. AKA "Mac CIFS clients get hosed". Introduced in 2009.09.00, unaddressed in 2009.09.01, fixed in 2009.09.02.
Why can't bugs like this be viewed or acknowledged publicly? I reported the issue and I couldn't even observe the details or progress for this bug. Would it be possible to publish verbose release notes or provide access to support paying customers to a detailed list of open/resolved CRs for 7000 series products?
From my support engineer:
"The 7000 NAS is a closed product and no bugs can be seen by users. The fix was really just a regression issue meaning the wrong mix of Open Solaris code with NAS code to make a complete NAS build"
Only Sun would build a product on OpenSolaris, call it "Open Storage" and then keep everything secret they can.
Nov 05
eschrock says:
Peter - That CR number is actually just an internal tracker bug for an issue fi...Peter -
That CR number is actually just an internal tracker bug for an issue fixed in OpenSolaris. For the release notes, we publish the actual bugs fixed, not the reference CR (which only says "pull in fix for 6874207"). The real bug is:
6874207 Incorrect access permission check when setting file size
You can see that this is in the above release notes.