ISILON CIFS share for EV

[Musa_Timur_Sari]

We are trying to create a parttion on EV10 which is on ISILON NAS. We are getting error that EV claims it can not set permission. From Windows point (w2008 r2) we can create and set any type of permission on the folders. We are select network share during partition creation. Following is logged on EV. What could be the problem..

Log Name:      Symantec Enterprise Vault

Source:        Enterprise Vault

Date:          12/23/2011 7:03:50 PM

Event ID:      6718

Task Category: Storage Management

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      xx

Description:

Error setting security permissions on the Vault Store Partition Root Path '\\10.129.2.241\evroot'

Reason: An internal Windows error occurred.  (0x8007085c)

Reference: VSCREATE4

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=6718

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Enterprise Vault " />

    <EventID Qualifiers="49156">6718</EventID>

    <Level>2</Level>

    <Task>45</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2011-12-23T17:03:50.000000000Z" />

    <EventRecordID>68</EventRecordID>

    <Channel>Symantec Enterprise Vault</Channel>

    <Computer> xx </Computer>

    <Security />

  </System>

  <EventData>

    <Data>An internal Windows error occurred.  (0x8007085c)</Data>

    <Data>\\10.129.2.241\evroot</Data>

    <Data>VSCREATE4</Data>

  </EventData>

</Event>

Log Name:      Symantec Enterprise Vault

Source:        Enterprise Vault

Date:          12/23/2011 7:03:50 PM

Event ID:      6799

Task Category: Storage Management

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      xx

Description:

Unable to create Vault Store Partition.

Vault Store: 149149BB2F2329646AFBB16272AE4572C1210000xxxx

Partition Root Path: \\10.129.2.241\evroot\evdata

Error: Failed to set security permissions.      (0xc0041096)

Internal references:

Flags: HSMType:0\NoSecurity:0\DeviceType:0\State:2

Reference: CStorageManage::CreatePartition .\StorageManage.cpp [lines (38){...,1253,1254,1255,1256,1257,1263,1266,1268,1269,1287,1288,1311}], built Jul  5 21:06:39 2011

For more information, see Help and Support Center at http://evevent.symantec.com/rosetta/showevent.asp?EvtID=6799

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Enterprise Vault " />

    <EventID Qualifiers="49156">6799</EventID>

    <Level>2</Level>

    <Task>45</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2011-12-23T17:03:50.000000000Z" />

    <EventRecordID>69</EventRecordID>

    <Channel>Symantec Enterprise Vault</Channel>

    <Computer>xx</Computer>

    <Security />

  </System>

  <EventData>

    <Data>Failed to set security permissions.      (0xc0041096)</Data>

    <Data>149149BB2F2329646AFBB16272AE4572C1210000xxxx</Data>

    <Data>\\10.129.2.241\evroot\evdata</Data>

    <Data>HSMType:0\NoSecurity:0\DeviceType:0\State:2</Data>

    <Data>CStorageManage::CreatePartition .\StorageManage.cpp [lines (38){...,1253,1254,1255,1256,1257,1263,1266,1268,1269,1287,1288,1311}], built Jul  5 21:06:39 2011</Data>

  </EventData>

</Event>

[JesusWept3]

Hmm so the first error you are getting 0x80007085C is "An Internal Windows Error Occured"
You're going to have to call for support on this one, it might even be determined that the device is not supported, but the internal error codes and whats going on needs someone from symc to look at

[JesusWept3]

Oh and i saw that you posted earlier regarding the ISILON with Chau previously
https://www-secure.symantec.com/connect/forums/isilon-disk#comment-6484331

As he mentioned, it being in a pending state means that its planned to be supported, but not currently supported, sometimes it doesn't mean that it won't work, it just means that it hasn't been tested and QA'd thoroughly, so any issues you see cannot be supported by symantec.

However, due to the amount of different storage types, and different ways to access them and interact (Such as Centeras, NetApps, TSM etc), it usually means that its something they are working towards but is going to take some effort, so in this case they *might* have it as a device option that you set when you create the partition, but that could be 10 SP2 or beyond for all i know

[patriot3w]

1. Try to set the permission manually:  grant VSA and system full access rights.

2. Dtrace any clue? 

Thank you.

[AndrewB]

technically, if you address it as a NAS device via CIFS it should be supported. there's pretty much a blanket statement in the compatibility guide that says so. i would try what patriot3w suggests too.

[JesusWept3]

Honestly wouldn't bother doing anything other than contacting support, however they will ask you to DTrace MMC and StorageManagement, but still be prepared for the fact they may not be able to help based on the compatibility charts

[Musa_Timur_Sari]

It's kind of strange that it trying to set ACL for INDEX and Storage locations. Does any one why EV tries to set ACL on the storage partition during creation ?? 

I have also investigated the issue , for the NAS device,  storage creation process tries to set permission at the share level and NTFS level. It can't set ACL for share level then it fails. Strange..!! 

I have opened a case on Symantec and ISILON. Let's see what happens..

[Musa_Timur_Sari]

Actually system and VSA accounts have full rights. Dtrace does not create any log file for Archive creation.. At least a couldn't find it..

[JesusWept3]

It sets the permissions on the share as it creates t for the Optimized Sungle Instance Sharing, it's the way that EV can share items across multiple vault stores and partitions

[Musa_Timur_Sari]

Yep, Isilon i only supported for EV 7, ISION is developing a new firmware , but it could be a long shot..!!

[rick_krieger · Accepted solution]

Musa,

When you attempted to configure the vault store partition (as a Network Share) did you accept the default setting "Create Vault Store Partition with security ACL's" or did you uncheck this? 

I am not confident that this would get the partition to create successfully but it is a good point to check/confirm.  Also, the matter of certification and support needs to be resolved before deploying in a production enviornment. 

[Musa_Timur_Sari]

I'm not sure  to uncheck it. Because it's necesary for "single instances" between storages. I have been told this feature is for "sharing" purposes. Problem is not only vaultstore partitions, I can't event create indexes on ISILON nas device. It gives same error message and unable to set ACL for INDEX locations as well..