Sun ZFS Storage 7420
 
Oracle ZFS Storage ZS5-2
 
Oracle ZFS Storage ZS3-2
 
Sun ZFS Backup Appliance
 
Oracle ZFS Storage ZS4-4
 
Oracle ZFS Storage ZS5-4
 
Oracle ZFS Storage ZS3-4
 
Sun ZFS Storage 7120
 
Sun ZFS Storage 7320
 
Oracle ZFS Storage ZS3-BA
 

PLA-Support>Sun Systems>DISK>ZFS Storage>SN-DK: 7xxx NAS
 

In this Document

Goal

Solution

References

Applies to:

Goal

This MOS Document focuses on migrating SMB/CIFS data to the ZFS Storage Appliance with the NTFS permissions intact.

For our purposes we focus on migrating from a Netapp storage system, but these tools and processes should be able to be used with any Windows NTFS file system such as Windows File servers and other NAS providers such as EMC Celer.

Solution

1. Prerequisites:
   1. Both the Netapp and the ZFSSA were connected to the same Windows Active Directory server Domain.
   2. All of the migration and work below was done on a Windows PC that was a member of the Domain with the Domain Administrator account.
   3. The tools used for the migration are free and included in both Windows 7 and Windows 2008 R2.
      1. Robocopy is used for the data migration.
         http://technet.microsoft.com/en-us/library/cc733145(v=ws.10).aspx
      2. ICACLS is used for the NTFS permissions migration.
         http://technet.microsoft.com/en-us/library/cc753525(v=ws.10).aspx
          
2. For our Windows migration box we mapped the following drives:
   1. z:\ (is the mounted Netapp share (marsico) on our PC
   2. y:\ is the mounted Oracle ZFSSA share (migration) on our PC
       
   3. Share permissions are set to Full Control on both storage systems
       
       
3. Sample permissions on Netapp directories before copy are below.  The NTFS permissions are extremely complex, including read only on some directories and full control on sub directories of the read only directory.  With normal robocopy migration methods, with the NTFS permissions included, would cause issues with the migration. Read Only on the root directory/folder below would not allow any sub directories to be written and therefore the migration would stop and never finish.  We need a way to first migrate the data with no permissions and then later backup and update the permissions on the migrated data.
   
   
   
4. First you do the initial FULL Robocopy with mirror command which does not copy any NTFS security.
   1. c:\>robocopy z:\ y:\ /MIR
      
5. These are what the permissions look like on ZFSSA after the initial mirror versus the Netapp above on #3.  Everything inherits the EVERYONE=Full control permissions from the share level.
    
6. Now you can continue to update the copy with changed files and new directories only.  No permissions are copied yet as we are still just updating the data until we are ready to completely cut over to the new ZFS Storage Appliance.  Below you can see that I changed a single file named “New Text Document.txt”.  It is the only file copied and updated with robocopy with the /e option.
   1. c:\>robocopy z:\ y:\ /e
      
7. Final migration and Cutover
   1. Before we do our final migration and cutover we want to disconnect all clients from the Netapp and make it Read Only.
   2. To make the Netapp read only go to the Manage computers MMC console and connect to the Netapp.  Then find the share you’re going to migrate and uncheck Full Control and Change permissions from the Share Permissions tab like below.
      
8. Do your final robocopy now just like #5 above
   1. c:\>robocopy z:\ y:\ /e
      
      
9. Permissions Backup: 
   1. Next you want to backup all permissions
   2. First lets backup the Netapp permissions using the ICACLS tool built into Windows.  We are saving the permissions to a local file called netappperms.txt with the  /t /c options.
      1. c:\>icacls z:\* /save c:\netappperms.txt /t /c
         
   3. Next let’s backup the ZFSSA empty permissions just in case we need to revert for some reason.
      1. c:\>icacls y:\* /save c:\zfssaemptyperms.txt /t /c
          
10. Permissions Restore
    1. Next we restore the original Netapp permissions to the ZFSSA share.
       1. c:\>icacls y:\ /restore c:\netappperms.txt
           
11. Now ZFSSA has all the correct permissions and all data is migrated
     
12. Mount all your clients to the ZFSSA and resume business as usual.
13. We suggest you run tests and utilize snapshots on the ZFSSA to tests your permissions migrations before your final cut over.
14. This document does not cover updating DNS or Client mount options for migrated data.  The focus of this document is migrating SMB file shares with NTFS permissions intact to a ZFS Storage Appliance.

References

This solution has no attachment