This is good to know as we are an SMB shop planning the upgrade to OneFS 8
Any idea if its been patched in the OneFS 8.1 variant running on the Gen6 hardware?
380 West 5th Ave
Vancouver, BC Canada V5Y 1J5
From: firstname.lastname@example.org [mailto:email@example.com]
On Behalf Of julian firminger
Sent: July 11, 2017 2:53 AM
Subject: [SSA-Discuss] Isilon Continuous Availability bug + Disabling SMB3 on Isilon
We've been heavily effected by what appears to be a bug in Isilon OFSv8.0.0.x implementation of SMB3-CA extension where Win2012R2 and later servers will fail to release ephemeral socket connections to the Isilon, eventually leading to a
network stack collapse on the server. - I will post more on this if/when we know it.
Out of this came some useful tooling around handling SMB3 that I though I would share:
To disable SMB3 multichannel support:
# isi smb settings global modify --support-multichannel=no
This will preserve the SMB3 dialect negotiation, authentication, CA and piping but disable support for cli/serv NIC RSS. Persisting sessions will continue to be multichannel until dropped / re-established.
To prevent Continuous Availability session setup:
# isi_for_array s /usr/likewise/bin/lwsm stop lwwit
This will disable the Isilon's file-witness service (on each node). Clients will still negotiate up to SMB3 dialect and if CA capable will attempt a CA session setup but this will fail when the client cannot find a file-witness. This
will effectively leave CA turned on (on enabled shares) but prevent clients from using it. This will force reset any persisting SMB3-CA sessions.
To disable SMB3 entirely:
# isi_gconfig registry.Services.lwio.Parameters.Drivers.srv.MaxSmb2DialectVersion=2.10
This will stop the Isilon offering SMB3 dialect on session setup so the client side will have only 2.1, 2.0 or 1.0 to choose from. Persisting sessions will continue to be SMB3 until dropped / re-established.
The last two are USE AT OWN PERIL. And I have been advised that these changes should be done by an EMC engineer. Especially the lwwit stop. This can have drastic and immediate effects across all SMB sessions.
Senior Systems Administrator
United Broadcast Facilities
Amsterdam, The Netherlands
To unsubscribe from the list send a blank e-mail to mailto:firstname.lastname@example.org?subject=unsubscribe