Tanti Technology

My photo
Bangalore, karnataka, India
Multi-platform UNIX systems consultant and administrator in mutualized and virtualized environments I have 4.5+ years experience in AIX system Administration field. This site will be helpful for system administrator in their day to day activities.Your comments on posts are welcome.This blog is all about IBM AIX Unix flavour. This blog will be used by System admins who will be using AIX in their work life. It can also be used for those newbies who want to get certifications in AIX Administration. This blog will be updated frequently to help the system admins and other new learners. DISCLAIMER: Please note that blog owner takes no responsibility of any kind for any type of data loss or damage by trying any of the command/method mentioned in this blog. You may use the commands/method/scripts on your own responsibility. If you find something useful, a comment would be appreciated to let other viewers also know that the solution/method work(ed) for you.

Saturday, 19 October 2019

umount AIX nfs mount point by removing entry in /etc/filesystems


Sometime while umounting nfs mount point, AIX admin also need to remove entry in /etc/filesystems. Let see how we can do this using 2 different method.

1. Using rmnfsmnt command.
2. Using umount command and then remove entry manually from /etc/filesystems.

In first method we need to execute following command

Lets assume that nfs mount point name is "/nfs_aix", so command is like

#rmnfsmnt -f /nfs_aix -B

-f  specify mount point name
-B Remove /etc/filesystems entry for mentioned mount point.

Second method is like below

1. umount /nfs_aix
2. Take backup of /etc/filesystems
3. find nfs mount point entry /nfs_aix  in /etc/filesystems and remove that entry.
4.confirm whether entry removed from configuration file .

Thanks !!!

auto mount issue on AIX hacmp cluster


Hello everyone ,

Today i am discussing on issue which i faced while umounting nfs mount on AIX hacmp node .on aix hacmp node netapp filer was mounted and we received request to umount that nfs mount permanently.

We executed "#umount"  command to perform this ticket and updated to responsible team, but after some time found that mount point auto mounting. we thought that somebody has mounted and did umount again, but that mount point mounting again.

so we decided to check configuration file /etc/auto.direct on AIX cluster node and found that there is entry for that mount point.

/etc/auto.direct entry:

/share/data -bg,intr,soft,rw  nfsServername:/vol/xxxxx_cifs_nfs_vol017/share_data

After comment

#/share/data -bg,intr,soft,rw  nfsServername:/vol/xxxxx_cifs_nfs_vol017/share_data


To sort out auto mount issue we commented nfs mount entry in /etc/auto.direct and then umounted /share/data.

***always take backup of configuration file before editing.

Thanks !!!!!!!!!!!

Friday, 18 October 2019

DLPAR problem



DLPAR  (Dynamic Logical Partitioning) problems

DLPAR or Dynamic Logical Partitioning problems

DLPAR provides users the ability to dynamically add, remove or modify LPAR resources such as memory, CPU, or I/O devices.

The most common problem with DLPAR operations is related to RMC (Resource Monitoring and Control). Since DLPAR function relies on RMC connection between HMC and LPARs, you should ensure that the public network interface of your HMC is properly configured and HMC can reach your LPARs via network (HMC connection to FSP (Flexisible Service Processor) of managed systems is not enough). If any firewalls between HMC and LPARs exist, check that port 657 upd/tcp is open in both directions. Ensure that RMC connection is allowed for the public interface of HMC as well:

HMC Management --> Change Network Settings --> LAN adapters (choose the public one) --> Firewall settings

To start troubleshooting any problem with Dynamic Logical Partitioning, go to HMC restricted shell and check the output of the command:

# lspartition -dlpar
The output will show you any logical partitions which are ready for DLPAR operations. If there is no output at all, that means that either there are no LPARs which can communicate with HMC via network, or there is some problem with the HMC itself. If you suspect the HMC, try with rebooting it. Experience shows that lots of strange problems associated with HMC can be solved just by reboot.

The output of lspartition -dlpar of working RMC communication for the LPAR in interest should be something similar to that:

<#1> Partition:<1 10.30.23.15="" hostname="">
Active:<1>, OS:, DCaps:<0x4ebf>, CmdCaps:<0x1b 0x1b="">, PinnedMem:<384>
You should check if DCaps value is higher than 0x0 and active value is higher than 0. If it is not, perform the next steps from the LPAR you are trying to perform DLPAR operations.

Check the RMC connection to HMC using the following command:

# lsrsrc IBM.ManagementServer
If you are using AIX 7.1 type the following command instead:

# lsrsrc IBM.MCP
You should see something like this:

Resource Persistent Attributes for IBM.MCP
resource 1:
        MNName            = "10.30.23.15"
        NodeID            = 18194515442147552355
        KeyToken          = "hmc.localdomain"
        IPAddresses       = {"10.30.23.15"}
        ConnectivityNames = {"10.30.23.15"}
        HMCName           = "7042CR4*XXXXXXX"
        HMCIPAddr         = "10.30.23.10"
        HMCAddIPs         = "192.168.128.1"
        HMCAddIPv6s       = ""
        ActivePeerDomain  = ""
        NodeNameList      = {"Test"}
If you can see information about the HMC, it’s a good sign; if not, check the status of the main daemon IBM.DRM used for dynamic logical partitioning:

# lssrc -g rsct_rm
Subsystem         Group            PID          Status
 IBM.ServiceRM    rsct_rm                       inoperative
 IBM.DRM          rsct_rm                       inoperative
 IBM.ERRM         rsct_rm                       inoperative
 IBM.AuditRM      rsct_rm                       inoperative
 IBM.MgmtDomainRM rsct_rm                       inoperative
 IBM.HostRM       rsct_rm                       inoperative

If it is in inoperative state, you can restart it with the following commands (note that sometimes, especially in AIX 7, this daemon is not active all the time but only when needed):

# /usr/sbin/rsct/bin/rmcctrl –z  
à Stops the RMC subsystem and all resource managers, but the command does not return until the RMC subsystem and the resource managers are actually stopped.
# /usr/sbin/rsct/bin/rmcctrl –A  
à Adds the RMC subsystem to the subsystem object class and starts the RMC subsystem
# /usr/sbin/rsct/bin/rmcctrl –p  à  to enable remote client connections.

Check its status again:

# lssrc -a | grep rsct
 ctrmc            rsct             5374166      active
 IBM.HostRM       rsct_rm          14156014     active
 IBM.ServiceRM    rsct_rm          5439716      active
 IBM.MgmtDomainRM rsct_rm          9240692      active
 IBM.DRM          rsct_rm          17301604     active
 ctcas            rsct                          inoperative
 IBM.ERRM         rsct_rm                       inoperative
 IBM.AuditRM      rsct_rm                       inoperative


If the above does not change the output of lspartition -dlpar, you can try to reconfigure the RMC by using recfgct command. Basically this command recreates the RMC connection.


Before using the recfgct command make sure that your server is not part of CMS or GPFS cluster because it could bring you more trouble than non-working DLPAR.

The full path of recfgct command is:

# /usr/sbin/rsct/install/bin/recfgct
Wait 5 to 10 minutes and check the RMC deamon again:

# lssrc -g rsct_rm
....
# lsrsrc IBM.ManagementServer
or

# lsrsrc IBM.MCP





Note:

When you change system resources dynamically do not forget to modify your LPAR profile accordingly, since at next boot system resources will be assigned according to the profile (which is not affected when performing DLPAR functions).

Monday, 23 April 2018

Questions from TSM




What is DRM? & why DRM? (Disaster recovery management)

Steps in DRM? Explain each state?

Tell me the process the moving the tape from mountable state to vault state?

How you will define library ? explain step by step in command line?

What is the last parameter in define path?

Tell me the device name for library in TSM on AIX?

Tell me full syntax for define device class LTO?

What us policy management cycle?Explain?

Full syntax for copy group? and explain the define copy group step by step?

Difference between backup and archive?

Default retention period for archive?

Difference between active and validate policy set?

Explain policy management class step by step in commandline?

What is include and exclude list?

Difference between clientopt and clopset?

Difference between label and checkinlibvolume?

Do I need to give label and check in commands for tape volume?

When inserting tape in tape library you need to define lable libvolume?

Where you set devclass in library?

Explain Reclamation with diagram?

Where it is important?

What is collocation?

Give me collocation syntax ?

Restrict Reclamation in commandline?

Backupset where it will be used?

Difference between client and admin scheduler?

Where you use it?

Your are taking Backup db every day at 10 pm?

What kind of scheduling?

Tell me example for admin scheduling?

Tell me important TSM server files?

Tell me important TSM client files?

What is the file for include and exclude list in client?

What is the command to take backup of your TSM database?

TSM Concepts

TSM Concepts

IBM Tivoli Storage Manager (TSM) Basic Part-1



IBM Tivoli Storage Manager is enhanced Enterprise level data protection software that expedites operational and disaster recovery. TSM offers centralized, automated data protection to help reduce the risks associated with data loss. It helps you manage more data with less infrastructure and simplified administration. Tivoli Storage Manager automates data backup and restore functions and centralizes storage management operations. It offers following features. In this page you will find the basic concepts of TSM and L1 & L2 level TSM administrator daily activities and tasks.


Chapter 1: IBM Tivoli Storage Manager Basic Introduction and Overview 

IBM TSM V7 Server Components Introduction
IBM TSM V7 Backup and Archive Functions and Features Introduction
IBM TSM V7 Product Family Overview

Tivoli Storage Manager (TSM) V7.1 Server Components


IBM Tivoli Storage Manager (TSM) is an enterprise-wide protection solution designed to protect the organization’s data from hardware failures and other errors by managing backup and archive copies of data. For disaster recover purposes, an additional copy is stored off-site.  Designed for a heterogeneous environment, Tivoli Storage Manager connects over the local area network (LAN), wide area network (WAN), Internet, and storage area network (SAN). This design provides data move and store techniques, comprehensive policy based automation, and data management.

Optional modules are available for business-critical applications that must run twenty-four hours a day, seven days a week. These modules use Tivoli Storage Manager’s centralized data protection with no interruption of service.

IBM Tivoli Storage Manager V7.1 consists of the following components:


TSM Administrative interfaces
Tivoli Storage Manager Operations Center
Tivoli Storage Manager Server
TSM Scheduler Services
TSM Backup-archive client
Tivoli Storage Manager database
Tivoli Storage Manager recovery log
Storage pools
Policy-based management
Media library


 Tivoli Storage Manager Interfaces


You can access TSM Server and TSM client through various interfaces as mentioned below
Operations Center accessed through web browser and default secure port 11090
Backup-archive client GUI accessed through dsm (Windows) dsmj (UNIX) commands.
Web client GUI accessed through web browser and default port 1581
Backup-archive command line accessed through command dsmc
Tivoli Storage Manager server command line accessed through dsmadmc, Operations Center, and server console.

Tivoli Storage Manager Operations Center


IBM Tivoli Storage Manager Operations Center is a new added dashboard-style management interface starting from TSM V6.4 to simplify TSM operations and monitoring. You can use the Operations Center, command-line interfaces, backup-archive graphical user interface (GUI), and a web client interface to manage your Tivoli Storage Manager environment.

Tivoli Storage Manager Server instance


Tivoli Storage Manager server refers to an instance, not a physical system. A single system can run multiple instances of the server. In a typical local area network or LAN configuration, the Tivoli Storage Manager server stores to the storage media the backup or archive data from the backup-archive clients that it supports. The server also has a database to manage data, including policy management objects, users and administrators, and client nodes.

TSM Scheduler Services


Tivoli Storage Manager includes a central scheduling component to automatically process the administrative commands and backup-archive client operations during the specific time period when the schedule is activated. An administrator is responsible to create and maintain the schedules in each policy domain. Tivoli Storage Manager scheduling is split into two categories administrative scheduling and backup-archive client scheduling.
Administrator-defined schedules allow for the automation of Tivoli Storage Manager server and backup-archive client operations. A comprehensive and integrated set of schedules can provide the basis for efficient data management with little need for intervention during normal operations.
Scheduling Tivoli Storage Manager backup-archive client operations consists of schedules on the Tivoli Storage Manager server and a scheduler component that runs on the Tivoli Storage Manager backup-archive client machine.

TSM Backup-archive client


A backup-archive client is usually a server. Application servers and file servers, and also desktop workstations and portable PCs, are backup-archive clients to the Tivoli Storage Manager server. Physical client systems are registered on the server as nodes. File servers, workstations, and database servers that are backed up, are referred to as clients.
The Tivoli Storage Manager backup-archive client is a service that sends data to and retrieves data from a Tivoli Storage Manager server. The Tivoli Storage Manager backup-archive client must be installed on every machine that transfers data to server-managed storage called storage pools. This machine might be a workstation, a file, or a database server.
The Tivoli Storage Manager server uses a unique node name for identifying each Tivoli Storage Manager backup-archive client instance. The Tivoli Storage Manager backup-archive client supports encryption, and can use a password for authenticating communications between the Tivoli Storage Manager backup-archive client and server.

Tivoli Storage Manager Database


Earlier versions of Tivoli Storage Manager used a proprietary B+-tree database. As of version 6, the Tivoli Storage Manager database is built on DB2. This database is part of Tivoli Storage Manager and you must not manage it as a DB2 database. The information that the database stores includes the file name, file size, management class, copy group, location of the files in Tivoli Storage Manager server storage, and all other information except for the data. Data is stored in a storage pool.
When the Tivoli Storage Manager server is installed, a database and recovery logs are created. Tivoli Storage Manager saves information in the Tivoli Storage Manager database about each file, logical volume, or database that it backs up, archives, or migrates.
The Tivoli Storage Manager database is the heart of Tivoli Storage Manager. You need take backup of this database in regular intervals in order to restore the database to the current state if any disaster occurs.

Tivoli Storage Manager Recovery log


The server uses the recovery log as a scratch pad for the database, recording information about client and server actions while the actions are performed. Changes to the database are recorded in the recovery log to maintain a consistent database image. The recovery log stores data that is required to back up a restored database to the most recent committed transaction. Starting TSM V6, the Recovery log consists of Active log, Archive log, Active mirror log and Archive failover log.
TSM Storage pools

Storage pools are collections of similar media that provide storage for backed up, archived, and migrated files. These pools can be chained to create a storage hierarchy. You can use any supported sequential media in all copy storage pools. There are 2 important process which moves client backups within the storage hierarchy.

Migration: Data moves from the primary disk pool directly to tape pools.
Copy data: Data moves from the primary disk pool to file pools or disk pools to tape pools

A storage pool volume is the basic unit of storage for the Tivoli Storage Manager storage pools. A volume might be a logical volume, a standard file system file, a tape cartridge, or an optical cartridge. A unique volume identifier identifies each volume.

Tivoli Storage Manager Policies


Backup-archive client data is centrally managed by business policy. The administrator creates policies and stores them in the database on the server. Policies are defined based on the business requirements for data backup and retention. These requirements, sometimes referred to as a storage service level agreement (SLA), identify when to perform backups, how long and how many copies of files to retain, and other requirements that the customer specifies. This feature makes it possible for different departments with different types of data to have their own customized storage management plan.

Tivoli Storage Manager Policy Structure


With policies, you can manage data that is based on business requirements by defining the following information
Files that are eligible for backup
Files that are eligible for archive
Data storage location
Length of time for retaining data
Number of versions of data to retain

Thursday, 28 September 2017

Thumb Rules – AIX ADMIN


1.    Collect System Information before doing any change on your server.

2.    Ensure the current OS level is consistent:     “oslevel -s;oslevel -r;instfix -i|grep ML;instfix -i|grep SP;lppchk -v” [If the os is inconsistent, then first bring the os level to consistent state and then proceed with the change].

3.    Check the lv/filesystems consistency “df -k”(df should not hang); all lvs should be in sync state “lsvg -o|lsvg -il”.

4.    Check errpt & ‘alog -t console -o’ to see if there are any errors.

5.    Perform ‘pwdck’ & ‘grpck’ to verify password & group file consistency.

6.    Ensure the root user has not expired.

7.    Ensure your id on the server is working.

8.    Ensure mksysb(OS image backup) is taken. Verify mksysb with “lsmksysb -l -f /mksysbimg”(check size).

9.    Check the /etc/exclude.rootvg to see if any important filesystem/dir is excluded from the mksysb backup.

10.    Take the TSM backup of mksysb as well.

11.    Ensure the scheduled TSM backup of filesystems is done.

12.    Verify boot list & boot device:   “bootlist -m normal -o”  “ipl_varyon -i”

13.    Ensure hd5(bootlv) is 32MB (contigous PPs)  [very important for migration]

14.    Remember Application/Database team are responsible for their Application/Database backup and restore. Therefore alert the application teams so that they take their backups and other precautions before we perform our change.

15.    Ensure the ‘console’ for the server is working.

16.    Initiate the change on console. If there is any network disconnection during the change, you can reconnect to the console and get the menus back.

17.    Remember three essential things are in place before you perform any change “backup(mksysb); system information; console”

18.    Ensure you are on right server(hostname;ifconfig -a) before you perform change.

19.    Remember one change at one time; multiple changes could cause problem & can complicate troubleshooting.

20.    Pre-inform the monitoring team about your change; so that there are no vague alerts/PRs.

21.    Ensure there is enough free filesystem space(/usr, /var, / ), required for the change.

22.    Before and After the change, ensure the filesystems are well below the thresholds(75%).
23.    Perform changes only for the approved CRs(change requests).

24.    Check the history of the servers(PRs or CRs)…to see if there were any issues or change failures for these servers.

25.    Ensure that there is no clash of SAs over changes; one change being performed by multiple SAs. Its better to verify with the ‘who -u’ command, to see if there are any SAs already working on the server.

26.    If there are two disks in rootvg, then perform alt disk clone for one disk. This is fastest & safest backout method in case of any failure. Though you perform alt disk clone, ensure you as well take mksysb.

27.    For migration change, check if there is SAN(IBM/EMC..) used, if so, then you have to follow the procedure of exporting vgs, uninstall sdd* fileset;and after migration reinstall sdd* fileset, reimport vgs etc.

28.    Ensure hd5(bootlv) is 32MB (contigous PPs)  [very important for migration]

29.    EXPECT THE UNEXPECTED : Ensure you have the clear backout plan in place.

30.    Have the patches/filesets pre-downloaded and verified.

31.    Check/verify the repositories on NIM/central server; check if these repositories were tested/used earlier.

32.    Verify the connectivity between the client and NIM server. In some accounts the admin network is to be exclusively enabled(cabled) for the changes.

33.    Take care of the network zones(public, private, behind firewall); each zone may have their separate NIM server.

34.    Take care of the static routes(which may differ across zones). Ensure the static routes are not disturbed after the change.

35.    Ensure there are no other conflicting changes from other departments such as SAN, network, firewall, application.. which could dampen your change.

36.    Maintain/record the commands run/console output in the notepad(named after the change).

37.    Update the change record with the output/artefact. You can execute the commands with date command, so that the date & time when the command is run is recorded “date;uptime;oslevel -r”.

38.    If the system has not rebooted from longtime(> 100 days); then perform ‘bosboot’ & then reboot the machine(verify the fs/appln. after reboot), & then commence with the migration/upgrade. [Donot reboot the machine if the bosboot fails!]

39.    Check filesystems count “df -k|wc -l”  ; verify the count after migration or reboot.

40.    Ensure there are no schedule reboots in crontab. If there is any then comment it before you proceed with the change.

41.    Look for the log messages carefully; donot ignore warnings.

42.    Perform preview(TL/SP upgrade) before you perform actual change; see if there are any errors reported in preview(look for keyword ‘error’ / ‘fail’); look for the tail/summary of messages;

43.    Though the preview may report as ‘ok’ at the header, still you have to look in the messages and read the tail/summary of preview.

44.    If preview reports any dependency/requisite fileset missing then have those downloaded as well.

45.    Ensure you have enough free space in rootvg. Min of 1-2 GB to be free in rootvg(TL upgrade/OS migration).

46.    Ensure application team have tested their application on the new TL/SP/OS to which you are upgrading your system.

47.    If you have multiple putty sessions opened; then name the sessions accordingly [Putty -> under behaviour -> window title]; this will help you in quickly getting to the right session.

48.    On sev1 issues, update the SDM in the ST multichat at regular intervals.

49.    Over the conf voice call, if they verbally request you to perform any change, get the confirmation in writing in the multi ST chat.

50.    Update the PR in regular intervals.

51.    Update your team with the issue status(via mail).

52.    Document any new learnings(from issues/changes) and share it with team.

53.    Ensure proper validated CR procedure is in place;  Precheck -> Installation -> Backout -> Verification

54.    Save the severity multichats; enable autologging of multichats in Sametime.

55.    If the junior SA resource is performing the change for first time(first time in any account); then let the techlead club him with a senior SA.

56.    SAs First time execution (or first time in an account) or to say any first time had to be dealt carefully. Techleads have to take extra precautions.

57.    Any important information/document, please ensure that you update it in your account teamroom.

58.    Ensure for TL upgrades, you go by TL by TL, shortcut to direct TL could sometimes cause problem.

59.    Check if the server is running any cluster (HACMP), if so then you have to follow different procedure.