Skip to Main Content
IBM System Storage Ideas Portal


This portal is to open public enhancement requests against IBM System Storage products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Delivered
Created by Guest
Created on Jun 28, 2018

Multiple AD servers for Scale CES

Currently, Spectrum Scale CES only supports the addition of a single AD server for SMB authentication. We have encountered a couple of events where a communication issue with that DC results in auth services on the CES node(s) going offline, requiring a restart of GPFS on the CES node(s).

Idea priority High
  • Guest
    Reply
    |
    Sep 30, 2020

    Due to processing by IBM, this request was reassigned to have the following updated attributes:
    Brand - Servers and Systems Software
    Product family - IBM Spectrum Scale
    Product - Spectrum Scale (formerly known as GPFS) - Private RFEs
    Component - Product functionality

    For recording keeping, the previous attributes were:
    Brand - Servers and Systems Software
    Product family - IBM Spectrum Scale
    Product - Spectrum Scale (formerly known as GPFS) - Private RFEs
    Component - V4 Product functionality

  • Guest
    Reply
    |
    Jul 30, 2019

    This has been resolved in latest releases of Scale, including improved documentation to clarify what is going on in the very latest version of the Knowledge Center

  • Guest
    Reply
    |
    Jul 30, 2019

    5.0.0-1

    It looks like this can be closed.

  • Guest
    Reply
    |
    Jul 29, 2019

    Yes, that is correct. Each CES node will pick a new DC if the currently used one is down. Note that the DC reported in "mmuserauth service list" is only the one used for the initial configuration. It is not special in anyway while running. Later Scale versions report "*" instead of the initially used DC to make this a bit clearer.

    Also see the documentation, e.g. mmuserauth:

    For the file access protocol, only one authentication
    server must be specified. Specifying multiple servers is
    invalid. The AD server accepted while configuration is
    used to fetch details required for validation and
    configuration of the authentication method. Post
    successful configuration, each CES node will query DNS
    to lookout available Domain Controllers serving the AD
    domain it is joined to. Amongst the returned list, the
    node binds with the best available domain controller.

    In other words, you only specify one to Scale; it gets the rest via DNS.

    Which version of Scale are you using?

  • Guest
    Reply
    |
    Jul 19, 2019

    In looking at the configuration, it *appears* that only one server is supported; at least, we are only able to provide one. I do see that the "password server" option is set to *. So, are you saying it will failover in the event a DC goes down?

  • Guest
    Reply
    |
    Jul 18, 2019

    Can you elaborate on the requirement here? Today Scale can support multiple DCs in the same "forest". Ensure that Samba's "password server" option has "*" and that DNS is set up correctly. Also give winbind some time to recognize that a DC has failed and to connect to a new one. Is something more specific than this required?

  • Guest
    Reply
    |
    Oct 3, 2018

    When using Active Directory authentication, Spectrum Scale automatically finds domain controllers for the joined domain. This is now documented in the mmuserauth manpage:
    https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.1/com.ibm.spectrum.scale.v5r01.doc/bl1adm_mmuserauth.htm

    Still required here is additional failover testing to ensure that when one DC is lost, another is picked up

  • Guest
    Reply
    |
    Sep 26, 2018

    Due to processing by IBM, this request was reassigned to have the following updated attributes:
    Brand - Servers and Systems Software
    Product family - IBM Spectrum Scale
    Product - Spectrum Scale (formerly known as GPFS) - Private RFEs
    Component - V4 Product functionality
    Operating system - Other
    Source - Storage Technical Client Council

    For recording keeping, the previous attributes were:
    Brand - Servers and Systems Software
    Product family - Storage
    Product - Storage TCC - Private Requests
    Component - Other
    Operating system - Other
    Source - Storage Technical Client Council