Front cover Implementing the IBM Storwize V7000 Unified Disk System Consolidates storage and file serving workloads into an integrated system Simplifies management and reduces cost Integrates support for IBM Real-time Compression Jure Arzensek Nancy Kinney Daniel Owen Jorge Quintal Jon Tate ibm.com/redbooks International Technical Support Organization Implementing the IBM Storwize V7000 Unified Disk System April 2014 SG24-8010-01 Note: Before using this information and the product it supports, read the information in “Notices” on page xi. Second Edition (April 2014) This edition applies to Version 7.1.0.5 of the IBM Storwize V7000 code and Version v1.4.2.0-27-2273 of the IBM Storwize V7000 File Module code. © Copyright International Business Machines Corporation 2013, 2014. All rights reserved. Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contents Notices . xi Trademarks . xii Preface . xiii Authors. xiii Now you can become a published author, too! . .xv Comments welcome. xvi Stay connected to IBM Redbooks . xvi Chapter 1. Introduction. 1 1.1 A short history lesson . 2 1.2 About the rest of this book . 3 1.3 Latest release highlights . 4 1.3.1 USB Access Recovery . 4 1.3.2 Call-home installation enhancement. 4 1.3.3 SSH tunnel from the IFS Management Node to the Storwize V7000 Node . 4 Chapter 2. Terminology and file serving concepts . 5 2.1 Terminology for storage and file services . 6 2.1.1 Terminology for random access mass storage . 6 2.1.2 Terminology for file systems and file sharing, file access, and file transfer . 7 2.2 File serving with file sharing and file transfer protocols. 10 2.2.1 The Network File System protocol . 11 2.2.2 The Server Message Block protocol . 13 2.2.3 File Transfer Protocol . 16 2.2.4 Hypertext Transfer Protocol . 17 2.2.5 Secure Copy Protocol . 18 2.2.6 Secure Shell File Transfer Protocol . 18 Chapter 3. Architecture and functions . 19 3.1 High-level overview of Storwize V7000 Unified system . 20 3.1.1 Storwize V7000 Unified storage subsystem: the Storwize V7000 . 20 3.1.2 Storwize V7000 Unified system file server subsystem: The file modules . 20 3.2 Storwize V7000 Unified system configuration. 21 3.2.1 Storwize V7000 Unified storage subsystem configuration . 21 3.2.2 Storwize V7000 Unified system file server subsystem configuration . 22 3.3 Storwize V7000 Unified system storage functions . 23 3.4 Storwize V7000 Unified system file serving functions. 24 3.4.1 Storwize V7000 Unified system file sharing and file transfer protocols. 26 3.4.2 Storwize V7000 Unified system NFS protocol support . 26 3.4.3 Storwize V7000 Unified system SMB and CIFS protocol support. 27 3.4.4 Storwize V7000 Unified system cluster manager . 31 3.4.5 Storwize V7000 Unified system product limits . 33 Chapter 4. Access control for file serving clients . 37 4.1 Authentication and authorization overview . 38 4.1.1 UNIX authentication and authorization . 38 4.1.2 Windows authentication and authorization . 39 4.1.3 UNIX and Windows authentication and authorization. 39 © Copyright IBM Corp. 2013, 2014. All rights reserved. iii 4.2 Methods used for access control . 39 4.2.1 Kerberos . 39 4.2.2 User names and user IDs . 40 4.2.3 Group names and group identifiers in UNIX . 40 4.2.4 Resource names and security identifiers in Windows. 40 4.2.5 UID, GID, and SID mapping in the Storwize V7000 Unified system . 40 4.2.6 Directory services in general. 41 4.2.7 Windows NT 4.0 domain controller and Samba primary domain controller . 41 4.2.8 Lightweight Directory Access Protocol . 41 4.2.9 Microsoft Active Directory . 41 4.2.10 Services for UNIX and Identity Management for UNIX . 42 4.2.11 Network Information Service. 42 4.2.12 Access control list in general. 42 4.2.13 GPFS NFSv4 ACLs . 42 4.2.14 POSIX bits . 42 4.2.15 ACL mapping . 43 4.3 Access control with Storwize V7000 Unified system. 43 4.3.1 Authentication methods supported . 43 4.3.2 Active Directory authentication . 44 4.3.3 Active Directory with Services for UNIX or Identity Management for UNIX . 44 4.3.4 Samba primary domain controller authentication . 45 4.3.5 LDAP authentication . 45 4.3.6 Network Information Service. 45 4.4 Access control limitations and considerations. 46 4.4.1 Authentication limitations . 46 4.4.2 Authorization limitations . 47 Chapter 5. Storage virtualization . 49 5.1 User requirements that storage virtualization can meet . 50 5.2 Storage virtualization terminology . 50 5.2.1 Realizing the benefits of Storwize V7000 Unified storage virtualization . 53 5.2.2 Using internal physical disk drives in the Storwize V7000 Unified system . 53 5.2.3 Using external physical disk drives in the Storwize V7000 Unified system. 55 5.3 Summary. 56 Chapter 6. NAS use cases and differences: SONAS and Storwize Unified. 57 6.1 Use cases for the Storwize V7000 Unified system . 58 6.1.1 Unified storage with both file and block access . 58 6.1.2 Multi-user file sharing with centralized snapshots and backup . 59 6.1.3 Availability and data protection . 60 6.1.4 Information lifecycle management (ILM), hierarchical storage management (HSM), and archiving . 60 6.2 Storwize V7000 Unified system and SONAS . 61 6.2.1 SONAS brief overview . 61 6.2.2 Implementation differences between Storwize V7000 Unified and SONAS . 63 Chapter 7. IBM General Parallel File System ..