Migrating Your Windows File Server to a CTERA Cloud Gateway Cloud Attached Storage February 2015 Version 4.1
Copyright 2009-2015 CTERA Networks Ltd. All rights reserved. No part of this document may be reproduced in any form or by any means without written permission from CTERA Network Ltd. Information in this document is subject to change without notice and does not represent a commitment on part of CTERA Networks Ltd. CTERA, C200, C400, C800, P1200, CloudPlug, NEXT3, Cloud Attached Storage, and Virtual Cloud Drive are trademarks, service marks, or registered trademarks of CTERA Networks Ltd. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. patents, foreign patents, or pending applications.
1 Introduction If you would like to migrate from a Microsoft Windows file server to a CTERA Cloud Gateway, and your Windows server uses Windows ACLs, you can migrate the network shares on the file server to the CTERA Cloud Gateway, while retaining the defined permissions for all files. This is done as follows: 1 Disable all cloud backups and local snapshots for the CTERA Cloud Gateway. For information, refer to the CTERA C Series User Guide. 2 For each share on the file server, prepare a parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway. See Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway (page 4). 3 Copy each share from the file server to the parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway. See Migrate Network Shares from the File Server to a CTERA Cloud Gateway (page 14). 4 Re-enable cloud backups and local snapshots for the CTERA Cloud Gateway. For information, refer to the CTERA C Series User Guide. 5 Migrate access control lists to the CTERA Cloud Gateway. See Migrate Access Control Lists to CTERA Cloud Gateways (page 25). 6 Set permissions on each network share at root level. See Set Permissions on the Network Share at Root Level (page 26). 7 If you are using the Windows offline home directory feature, enable support for it. See Enable Support for Windows Offline Home Directory (page 28). 8 If Windows well-known groups are used in a migrated share, enable support for them. See Enable Support for Windows Well-Known Groups for information on how to determine whether well-known groups are used and enable support. Tip The preceding steps describe how to migrate from a single Windows migration server to a single CTERA cloud gateway. They should be repeated for each server that you wish to migrate. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 3
2 Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway Normally, CTERA Cloud Gateways use POSIX ACLs, which lack some specific capabilities of Windows ACLs. Therefore, Windows ACLs must be mapped to POSIX ACLs on a "best effort" basis. If you are using advanced features of Windows ACLs and wish to retain these features after migrating to a CTERA Cloud Gateway, then you must enable Windows ACL Emulation Mode. This mode allows CTERA Cloud Gateway users to configure permissions for files and folders in the same way as they would on a Windows file server, without the any of the limitations of POSIX. Tip Windows ACL Emulation Mode only supports the Windows File Sharing protocol. When this mode is enabled, all other file sharing protocols allow administrator access only. On a CTERA Cloud Gateway, Windows ACL Emulation Mode is enabled per network share. Once configured, users will be able to perform any of the following actions on files and folders in the share: Access the ACL Emulation Mode share using CIFS Create folders and files and configure their permissions Right-click on a file or a folder and click Properties, to open the Properties dialog box Click on the Properties dialog box's Security tab Modify the share's permissions by clicking Edit in the Security tab Add or remove permissions for users or groups Allow or deny permissions for existing users To prepare Windows ACL Emulation Mode shares on the CTERA Cloud Gateway 1 Create network shares with Windows ACL Emulation Mode enabled, and with the same names as the shares you want to migrate from the file server. See Create Network Shares with Windows ACL Emulation Mode on a CTERA Cloud Gateway (page 5). Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 4
Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway 2 2 Configure permissions for files and folders in the ACL Emulation Mode share. See Configure Permissions for Files and Folders in the ACL Emulation Mode Share (page 11). Create Network Shares with Windows ACL Emulation Mode on a CTERA Cloud Gateway Creating network shares with Windows ACL Emulation Mode on a CTERA Cloud Gateway can be performed in the following ways: For each share you want to migrate, manually create a network share on the gateway, using the Network Share Wizard. See Creating Each Network Share Manually (page 5). Automatically create all shares on the gateway simultaneously, using the share creation script. See Creating All Network Shares Automatically (page 9). Creating Each Network Share Manually Perform the following procedure for each share you want to migrate. To manually create a network share with Windows ACL Emulation Mode on a CTERA Cloud Gateway 1 Log in to user CTERA Cloud Gateway as an administrator. 2 In the Configuration tab's navigation pane, click Share > Shares. The Share > Shares page appears. 3 Click New Share. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 5
2 Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway The Network Share Wizard opens, displaying the Select a Folder to Share dialog box appears. 4 Select the folder on which you want to create the network share. 5 Click Next. The Specify the Network Share Name dialog box appears. 6 In the Network Share Name field, type a name for the share. This must be the same name as that of the share you want to migrate from the Windows File Server. 7 Click Next. 6 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway 2 The Sharing Protocols dialog box appears. 8 Select the protocols through which you want to expose the network share. 9 In the Windows File Sharing drop-down list, select Windows ACL Emulation Mode. 10 Click Next. The NFS (UNIX File Sharing) dialog box appears. 11 Click Next. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 7
2 Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway The Configure Permissions dialog box appears. 12 Configure the share root permissions. These permissions will apply to all users accessing the share. Permissions can be applied to local users, local groups, domain users, and domain groups. You can use the drop-down list to select the desired options and use the Quick Search field to search for users and groups. Tip 13 Click Next. The most common use case is to enable access for Everyone and have users configure permissions for their folders within the share. The Wizard Completed screen appears. 14 Click Finish. The ACL Emulation Mode share is created. 8 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway 2 Creating All Network Shares Automatically To automatically create all network shares with Windows ACL Emulation Mode on a CTERA Cloud Gateway 1 Create a CSV input file, where each row represents a share that you want to migrate from the file server to the CTERA Cloud Gateway. For information on the required CSV file columns, refer to the following table. 2 On the local workstation, using the admin account you specified in the CSV file, map the share Domain\admin$ share to a local drive, and then mount the share. 3 Open a command prompt. 4 Change directory to the drive where you mounted the share. 5 Change directory to: drive:\ctera_share_utility Where drive is the drive on which you mounted the share. 6 Run the following command: java -jar ctera-share-utility.jar device-fqdn migration-sa-account volume csvfile Where: device-fqdn is the gateway's fully qualified domain name. migration-sa-account is the admin account you specified in the CSV file. volume is the volume on which you want to create the network shares. csvfile is the name of the CSV input file you created. For example: java -jar ctera-share-utility-v1.0.4.jar Domain.corp.com administrator Vol1 \\Domain.corp.com\administrator\csv_file.csv All of the network shares are migrated. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 9
2 Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway Table 1: CSV Input File Columns Column Name Content Admin Account Share Name Folder Name Local Path Full Control Users = Read/Write Users Full Control Groups = Read/Write Groups Read Write Users = Read/Write Users Read Write Groups = Read/Write Groups The admin account you want to use for migration The name of the network share The name of the local folder on which you want to create the network share The path to the local folder on which you want to create the network share A comma-separated list of users who should have read-write access to the share, as well as the ability to delete files/folders in the share, to take ownership of files/folders in the share, and to change permissions for other users on the files/folders. A comma-separated list of user groups that should have read-write access to the share, as well as the ability to delete files/folders in the share, to take ownership of files/folders in the share, and to change permissions for other users on the files/folders. A comma-separated list of users who should have read-write access to the share A comma-separated list of user groups that should have read-write access to the share Read Only Users = Read Only Users A comma-separated list of users who should have read-only access to the share Read Only Groups = Read Only Groups A comma-separated list of user groups that should have read-only access to the share 10 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway 2 Configure Permissions for Files and Folders in the ACL Emulation Mode Share The following procedure explains how to configure permissions for files and folders in the ACL Emulation Mode share, using the example of the user "mark" and the folder "Documentation". Tip If your CTERA Cloud Gateway is connected to Active Directory, you can add and set permissions for your Active Directory users and groups, as well. To configure permissions for files and folders in the ACL Emulation Mode Share 1 Access the ACL Emulation Mode share using CIFS. 2 Right-click on the desired file/folder in the ACL Emulation Mode share, and then click Properties in the menu that appears. In this example, we will configure permissions for the Documentation folder. The Properties dialog box opens displaying the General tab. 3 Click on the Security tab. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 11
2 Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway The Security tab appears. 4 Click Edit. The Permissions for Documentation dialog box opens. 5 Click Add. The Select Users or Groups dialog box opens. 12 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway 2 6 Type the name of an existing local user on the CTERA Cloud Gateway, who should have permission to access the file/folder on the ACL Emulation Mode share. In this example, we will add permissions for the username "mark". 7 Click Check Names. This resolves the username. In this example, "mark" exists as a local user on the CTERA Cloud Gateway, and it is resolved as "C201-SAIMON\mark". 8 Click OK. The username you added appears in the Group or user names area. 9 Select the username. 10 In the Permissions area, use the check boxes to specify permissions for the user you added. 11 Click OK. 12 Click OK. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 13
3 Migrate Network Shares from the File Server to a CTERA Cloud Gateway Migration to a CTERA Cloud Gateway can be performed in the following ways: By copying files and folders from each network share on the file server to the parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway using Robocopy. See Migrating Network Shares to a CTERA Cloud Gateway Using Robocopy (page 14). By copying each network share on the file server to the parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway using SecureCopy. SecureCopy is commercial software and can be purchased at http://software.dell.com/products/secure-copy/. See Migrating Network Shares to a CTERA Cloud Gateway Using SecureCopy (page 15). Warning The migration account must have permissions to copy all of the relevant files/folders on the migrated Windows servers. Migrating Network Shares to a CTERA Cloud Gateway Using Robocopy It is possible to migrate a network share on the Windows file server to a the parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway, while retaining the defined permissions for all files in the network share. It is necessary to perform this procedure for each share that needs to be migrated. To migrate a single network share from a Windows file server to a CTERA Cloud Gateway 1 Create an ACL Emulation Mode share as described in Enabling Windows ACL Emulation Mode for a Network Share on a CTERA Cloud Gateway (see "Create Network Shares with Windows ACL Emulation Mode on a CTERA Cloud Gateway" on page 5). 2 Open an elevated command-prompt session on your Windows server. 3 Run the following command: Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 14
Migrate Network Shares from the File Server to a CTERA Cloud Gateway 3 robocopy /XO /XN /XC /E /COPY:DATSOU source \\gateway\share Where: source is the location of the network share on the Windows file server. gateway is the name of the CTERA Cloud Gateway to which you want to migrate the network share. share is the target Windows ACL Emulation Mode share on the CTERA Cloud Gateway. The network share in the source location on the Windows file server are migrated to the ACL Emulation Mode share on the CTERA Cloud Gateway, while maintaining the permissions for all files. Migrating Network Shares to a CTERA Cloud Gateway Using SecureCopy If you would like to work with a CTERA Cloud Gateway instead of a file server, you can migrate the network shares on the file server to the CTERA Cloud Gateway. To do so, it is necessary to define a separate job for each share that needs to be migrated. To migrate a single network share to a CTERA Cloud Gateway using SecureCopy 1 Open SecureCopy, by clicking Start > Programs > Scriptlogic Corporation > SecureCopy > SecureCopy. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 15
3 Migrate Network Shares from the File Server to a CTERA Cloud Gateway SecureCopy opens. 2 Click New to create a new job. The Create New Job dialog box opens. 3 In the field provided, type a name for the job. 4 Click OK. 5 In the left pane, expand the new job and click on Copy Locations. 16 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Migrate Network Shares from the File Server to a CTERA Cloud Gateway 3 The Copy Locations tab appears. 6 In the Select Source Folders (Copy From) area, add the share you want to migrate from the file server to the CTERA Cloud Gateway. 7 In the Select Target Folders (Copy to) area, add the target Windows ACL Emulation Modeshare on the CTERA Cloud Gateway to which the source share should be migrated. The target share is the Windows ACL Emulation Mode share you created on the CTERA Cloud Gateway in step 1. Tip It is recommended to prevent SecureCopy from creating an initial source folder under the target share, by clearing the Create initial source folder under target folder check box. 8 In the left pane, click on Synchronization. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 17
3 Migrate Network Shares from the File Server to a CTERA Cloud Gateway The Synchronization tab appears. 9 In the Specify Which Files To Copy area, choose Copy Only Changed Source Files to Target. 10 In the Specify Files To Purge area, do the following: a Select the Synchronize target contents with source check box. b Choose Purge orphaned files\folders on the target. 11 In the Archive Bit area, select the Synchronize archive bit on source and target check box. 12 In the Synchronization area, do the following: a Select the Reset last accessed data on source files check box. b Select the Synchronize last accessed date and created date on target files with source check box. c Select the Synchronize last accessed date and modified date on target folder with source check box. 13 In the Permissions area, select the Always copy permissions, even on skipped files check box. 14 In the left pane, click on Filters. 18 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Migrate Network Shares from the File Server to a CTERA Cloud Gateway 3 The Filters tab appears. 15 Configure these settings as desired. 16 In the navigation pane, click on Performance. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 19
3 Migrate Network Shares from the File Server to a CTERA Cloud Gateway The Performance tab appears. 17 Configure these settings as desired. 18 In the navigation pane, click on Local Groups and Users. 20 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Migrate Network Shares from the File Server to a CTERA Cloud Gateway 3 The Local Groups and Users tab appears. 19 Make sure that the Migrate local groups/users to destination server check box is cleared. 20 In the navigation pane, click on File Shares. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 21
3 Migrate Network Shares from the File Server to a CTERA Cloud Gateway The Files Shares tab appears. 21 Configure these settings as desired. 22 In the navigation pane, click on Other File Options. 22 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
Migrate Network Shares from the File Server to a CTERA Cloud Gateway 3 The Other File Options tab appears. 23 In the Compression area, choose Never compress target files. 24 Configure the remaining settings as desired. 25 In the navigation pane, click on Email. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 23
3 Migrate Network Shares from the File Server to a CTERA Cloud Gateway The Email tab appears. 26 Configure these settings as desired. 27 Click Save. 28 Click Run. The job is executed, and the share is migrated. 24 Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway
4 Migrate Access Control Lists to CTERA Cloud Gateways When migrating access control list (ACLs) from a Microsoft Windows-based file server to a CTERA Cloud Gateway, the gateway preserves the ACLs. The steps taken to preserve the ACLs differ according to the ACL type: When migrating an Active Directory-based ACL: The gateway performs a one-to-one mapping of the entire Windows NT ACL. This means that the gateway allocates a unique ID for each domain user or user group. The gateway stores the ACL mapping information in a dedicated layer in its file system. When migrating a local Windows ACL: The gateway only maps the Authenticated Users local user group to the Everyone user group. The gateway does not perform mapping for any other user groups. Tip If any other vital Windows NT ACL user or users groups are used, contact CTERA Support for further assistance. The gateway does not store the ACL mapping information in a dedicated layer in its file system. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 25
5 Set Permissions on the Network Share at Root Level To set permissions on the network share at root level 1 Log in to the CTERA Cloud Gateway's Web interface. 2 In the Configuration tab's navigation pane, click System > Firmware. 3 Add "cli" to the end of the link in your browser's address bar, as follows: http://cloud_gateway/admingui/main.html?target=/admingui/main.html#c onfigtab:system:cli The CLI Execution page appears. 4 In the CLI Execution field, type the following: set /config/fileservices/share/share-name/dirpermissions 755 Where share-name is the name of the share. 5 Click GO. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 26
Set Permissions on the Network Share at Root Level 5 A message appears. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 27
Enable Support for Windows Offline Home Directory 6 To enable support for Windows offline home directory 1 Log in to the CTERA Cloud Gateway's Web interface. 2 In the Configuration tab's navigation pane, click System > Firmware. 3 Add "cli" to the end of the link in your browser's address bar, as follows: http://cloud_gateway/admingui/main.html?target=/admingui/main.html#c onfigtab:system:cli The CLI Execution page appears. 4 In the CLI Execution field, type the following: exec /config/fileservices/homedirs reapplyadv share share-name Where share-name is the name of the share. 5 Click GO. A message appears. Tip The command only works on home directories where the folder name is the name of the user. In cases, contact CTERA Support for further assistance. Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 28
Migration Checklist Appendix A You can use the following checklist during migration of a single Windows files server to a CTERA Cloud Gateway. Table 2: Migration checklist Step To Do Reference Done? 1 Disable all cloud backups and local snapshots for the CTERA Cloud Gateway. 2 For each share on the file server, prepare a parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway. 3 Copy each share from the file server to the parallel Windows ACL Emulation Mode share on the CTERA Cloud Gateway. 4 Re-enable cloud backups and local snapshots for the CTERA Cloud Gateway. 5 Migrate access control lists to the CTERA Cloud Gateway. 6 Set permissions on each network share at root level 7 If you are using the Windows offline home directory feature, enable support for it. 8 If Windows well-known groups are used in a migrated share, enable support for them. CTERA C Series User Guide Prepare Windows ACL Emulation Mode Shares on a CTERA Cloud Gateway (page 4) Migrate Network Shares from the File Server to a CTERA Cloud Gateway (page 14) CTERA C Series User Guide Migrate Access Control Lists to CTERA Cloud Gateways (page 25) Set Permissions on the Network Share at Root Level (page 26) Enable Support for Windows Offline Home Directory (page 28) Enable Support for Windows Well-Known Groups Cloud Attached Storage Migrating Your Windows File Server to a CTERA Cloud Gateway 29