QoreStor 6.1.0 - User Guide

Creating a container

Refer to the sections below for instructions on creating containers:

• Creating an OST or RDS connection type container
• Creating an NFS or CIFS connection type container
• Creating a VTL type container

Creating an OST or RDS connection type container

To create an OST or RDS connection type container, follow these steps:

1. In the navigation menu, click Containers. The Containers page is displayed.
2. Click Add Container.
3. For the container Name, type the name of the container, and then click Next.

   Container names cannot exceed 32 characters in length, must start with a letter, and can be composed of any combination of the following characters:

   • A-Z (uppercase letters)
   • a-z (lowercase letters)
   • 0-9 (numbers). Do not start a container name with a number.
   • dash (-) or underscore (_) special characters

   NOTE: QoreStor does not support the use of the following special characters in container names: /, #, or @.

4. In the Storage Group drop-down, select the Storage Group for this container.
5. For Protocol, select Rapid Data Storage (RDS) or Veritas OpenStorage (OST) as appropriate.
6. Click Next.
7. On the User Access Control page, select the appropriate permissions for the displayed user accounts. Refer to Configuring User Access Controls for more information.
8. If you selected RDS, LSU Capacity is set to Unlimited by default. If you selected Veritas OpenStorage (OST), for LSU Capacity select one of the following options allowed per container:
   • Unlimited — To define the allowed amount of incoming raw data per container (based on the physical capacity of the container).
   • Quota: To define a set limit in Gibibytes (GiB) for incoming raw data allowed per container.
9. Click Finish.

container --add --name <name> [--group_name <name>]

Configuring User Access Controls

QoreStor allows you to specify user access controls for individual RDA containers. User access controls allows for multiple containers of the same type while ensuring that access to each container is isolated to specific users. User access controls (UACs) can be set at the container level to assign RWD (read-write-delete) or RW (read-write) permissions on that container to individual user accounts.Data within the containers can be access or deleted by users with both permission types, but the container can only be deleted by a user with RWD permissions.

The backup_user account is assigned by default to RDA containers, and is granted RWD permissions. Additional user access can be configured through the GUI or CLI.

Requirements for using User Access Controls

• The user account to which access is going to be assigned should be created before creating the container or configuring UAC.

To configure User Access Controls

1. In the navigation menu, click Containers. The Containers page is displayed.
2. In the list of containers, find the container for which you add user access controls, and then click User Access Control.
3. The backup_user account is listed by default. To configure other accounts with permissions, user the Search field to find the account. Click the desired account to add it to the users list.
4.  For each listed account, select the appropriate permissions. Options are:
   • Read/Write - gives the account read and write permissions on the container.
   • Read/Write/Delete - gives the account read, write, and delete permissions on the container.
5. Click Finish.

container --add --name <name> [--group_name <name>]container --add_uac --name <name> --user <user name> --mode <RW|RWD>

Adding an NFS or CIFS connection type container

To add an NFS or a CIFS connection type container, complete the following steps:

1. In the navigation menu, click Containers. The Containers page is displayed.
2. Click Add Container.
3. For the container Name, type the name of the container, and then click Next.

   Container names cannot exceed 32 characters in length, must start with a letter, and can be composed of any combination of the following characters:

   • A-Z (uppercase letters)
   • a-z (lowercase letters)
   • 0-9 (numbers). Do not start a container name with a number.
   • dash (-) or underscore (_) special characters

   NOTE:QoreStor does not support the use of the following special characters in container names: /, #, or @.

4. In the Storage Group drop-down, select the Storage Group for this container.
5. For Protocol, select NAS (NFS, CIFS)..
6. Click Next.
7. For Marker Type, select the appropriate marker that supports your Data Management Application (DMA).
   • Auto — Automatically detects CommVault, Tivoli Storage Manager (TSM), ARCserve, and HP Data Protector marker types. In addition, select this option if you need to support EMC Networker 2.0.
   • ARCserve—Supports the ARCserve marker.
   • BridgeHead — Supports the BridgeHead HDM marker.
   • CommVault—Supports the CommVault marker.
   • HP DataProtector—Supports the HP Data Protector marker.
   • Networker — Supports EMC Networker 3.0. If you need to support EMC Networker 2.0, select Auto.
   • Time Navigator—Supports the Time Navigator marker.
   • TSM—Supports the TSM marker.
   • Unix Dump — Supports the Amanda marker, among others.

   IMPORTANT: Improper marker selection can result in non-optimal savings. As a best practice, if you have only one type of DMA with traffic directed to a container, it is best to select the marker type that supports your DMA (for example, BridgeHead, Auto, or another). Conversely, as a best practice, if you have traffic from a DMA that is not one of the supported marker types, it is best to disable marker detection for the container by selecting the None marker type.

8. For Access Protocols, select NFS and CIFS as appropriate.

   (Use NFS to back up UNIX or LINUX clients. Use CIFS to back up Windows clients.)

9. Click Next.
10. If you selected NFS as the connection type, configure NFS access as follows. For CIFS connections, proceed to step 11.
    • NFS Options — Defines the type of access to the container. Select one of the following options.
      • Read Write Access — To allow read-write access to the container.
      • Read Only Access — To allow read-only access.
    • Root Mapping— Select one of the following options from the drop-down list to define the user level you want mapped to this container.
      • Root — to specify a remote user with root access to read, write, and access files on the system.
      • Nobody — to specify a user on the system without root access permissions.
      • Administrator — to specify the system administrator.
    • NFS Client Access — Define the NFS client(s) that can access the NFS container or manage the clients that can access this container by selecting one of the following options.
      • Open (allow all clients) — To allow open access for all clients to the NFS container you create. (Select this option only if you want to enable access for all clients to this NFS container.)
      • Create Client Access List — To define specific clients that can access the NFS container. In the Client FQDN or IP text box, type the IP address (or FQDN hostname) and click the Add icon. The “added” client appears in the Allow Clients list box. (To delete an existing client from this list box, select the IP address (or FQDN hostname) of the client you want to delete, and click the Delete icon. The “deleted” client disappears from the list box.)
11. If you selected CIFS as the connection type, configure CIFS access as follows.
    • Client Access — Define the CIFS client(s) that can access the container or manage the clients that can access this container by selecting one of the following options.
      • Open (allow all clients) — To allow open access for all clients to the container you create. (Select this option only if you want to enable access for all clients to this container.)
      • Create Client Access List — To define specific clients that can access the container. In the Client FQDN or IP text box, type the IP address (or FQDN hostname) and click the Add icon. The “added” client appears in the Allow Clients list box. (To delete an existing client from this list box, select the IP address (or FQDN hostname) of the client you want to delete, and click the Delete icon. The “deleted” client disappears from the list box.)

      NOTE: The QoreStor administrator that manages the system has a different set of privileges than does the CIFS administrator user. Only the QoreStor administrator can change the password for the CIFS administrator user. To change the password that allows access for the CIFS administrator user, use the authenticate --set --user administrator commands. For more information, see the QoreStor Command Line Reference Guide.

12. Click Next.

    A Configuration Summary of the options you selected for creating the container appears.

13. Click Finish.