β12-23-2011 09:12 AM
We are trying to create a parttion on EV10 which is on ISILON NAS. We are getting error that EV claims it can not set permission. From Windows point (w2008 r2) we can create and set any type of permission on the folders. We are select network share during partition creation. Following is logged on EV. What could be the problem..
Log Name: Symantec Enterprise Vault
Source: Enterprise Vault
Date: 12/23/2011 7:03:50 PM
Event ID: 6718
Task Category: Storage Management
Level: Error
Keywords: Classic
User: N/A
Computer: xx
Description:
Error setting security permissions on the Vault Store Partition Root Path '\\10.129.2.241\evroot'
Reason: An internal Windows error occurred. (0x8007085c)
Reference: VSCREATE4
For more information, see Help and Support Center at http://evevent.symantec.com/
Event Xml:
<Event xmlns="http://schemas.
<System>
<Provider Name="Enterprise Vault " />
<EventID Qualifiers="49156">6718</
<Level>2</Level>
<Task>45</Task>
<Keywords>0x80000000000000</
<TimeCreated SystemTime="2011-12-23T17:03:
<EventRecordID>68</
<Channel>Symantec Enterprise Vault</Channel>
<Computer> xx </Computer>
<Security />
</System>
<EventData>
<Data>An internal Windows error occurred. (0x8007085c)</Data>
<Data>\\10.129.2.241\evroot</
<Data>VSCREATE4</Data>
</EventData>
</Event>
Log Name: Symantec Enterprise Vault
Source: Enterprise Vault
Date: 12/23/2011 7:03:50 PM
Event ID: 6799
Task Category: Storage Management
Level: Error
Keywords: Classic
User: N/A
Computer: xx
Description:
Unable to create Vault Store Partition.
Vault Store: 149149BB2F2329646AFBB16272AE45
Partition Root Path: \\10.129.2.241\evroot\evdata
Error: Failed to set security permissions. (0xc0041096)
Internal references:
Flags: HSMType:0\NoSecurity:0\
Reference: CStorageManage::
For more information, see Help and Support Center at http://evevent.symantec.com/
Event Xml:
<Event xmlns="http://schemas.
<System>
<Provider Name="Enterprise Vault " />
<EventID Qualifiers="49156">6799</
<Level>2</Level>
<Task>45</Task>
<Keywords>0x80000000000000</
<TimeCreated SystemTime="2011-12-23T17:03:
<EventRecordID>69</
<Channel>Symantec Enterprise Vault</Channel>
<Computer>xx</Computer>
<Security />
</System>
<EventData>
<Data>Failed to set security permissions. (0xc0041096)</Data>
<Data>149149BB2F2329646AFBB162
<Data>\\10.129.2.241\evroot\
<Data>HSMType:0\NoSecurity:0\
<Data>CStorageManage::
</EventData>
</Event>
Solved! Go to Solution.
β12-30-2011 12:03 PM
Musa,
When you attempted to configure the vault store partition (as a Network Share) did you accept the default setting "Create Vault Store Partition with security ACL's" or did you uncheck this?
I am not confident that this would get the partition to create successfully but it is a good point to check/confirm. Also, the matter of certification and support needs to be resolved before deploying in a production enviornment.
β12-23-2011 09:39 AM
Hmm so the first error you are getting 0x80007085C is "An Internal Windows Error Occured"
You're going to have to call for support on this one, it might even be determined that the device is not supported, but the internal error codes and whats going on needs someone from symc to look at
β12-23-2011 09:44 AM
Oh and i saw that you posted earlier regarding the ISILON with Chau previously
https://www-secure.symantec.com/connect/forums/isilon-disk#comment-6484331
As he mentioned, it being in a pending state means that its planned to be supported, but not currently supported, sometimes it doesn't mean that it won't work, it just means that it hasn't been tested and QA'd thoroughly, so any issues you see cannot be supported by symantec.
However, due to the amount of different storage types, and different ways to access them and interact (Such as Centeras, NetApps, TSM etc), it usually means that its something they are working towards but is going to take some effort, so in this case they *might* have it as a device option that you set when you create the partition, but that could be 10 SP2 or beyond for all i know
β12-24-2011 02:24 AM
1. Try to set the permission manually: grant VSA and system full access rights.
2. Dtrace any clue?
Thank you.
β12-24-2011 10:38 AM
technically, if you address it as a NAS device via CIFS it should be supported. there's pretty much a blanket statement in the compatibility guide that says so. i would try what patriot3w suggests too.
β12-24-2011 01:12 PM
β12-26-2011 06:37 AM
It's kind of strange that it trying to set ACL for INDEX and Storage locations. Does any one why EV tries to set ACL on the storage partition during creation ??
I have also investigated the issue , for the NAS device, storage creation process tries to set permission at the share level and NTFS level. It can't set ACL for share level then it fails. Strange..!!
I have opened a case on Symantec and ISILON. Let's see what happens..
β12-26-2011 06:47 AM
Actually system and VSA accounts have full rights. Dtrace does not create any log file for Archive creation.. At least a couldn't find it..
β12-26-2011 07:01 AM
β12-28-2011 10:19 AM
Yep, Isilon i only supported for EV 7, ISION is developing a new firmware , but it could be a long shot..!!
β12-30-2011 12:03 PM
Musa,
When you attempted to configure the vault store partition (as a Network Share) did you accept the default setting "Create Vault Store Partition with security ACL's" or did you uncheck this?
I am not confident that this would get the partition to create successfully but it is a good point to check/confirm. Also, the matter of certification and support needs to be resolved before deploying in a production enviornment.
β12-30-2011 01:11 PM
I'm not sure to uncheck it. Because it's necesary for "single instances" between storages. I have been told this feature is for "sharing" purposes. Problem is not only vaultstore partitions, I can't event create indexes on ISILON nas device. It gives same error message and unable to set ACL for INDEX locations as well..