Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

Copyright (c) 2024, Oracle. All rights reserved. Oracle Confidential.

Oracle ZFS Storage Appliance: How to Migrate SMB/CIFS NTFS Data with Permissions
Intact (Doc ID 1533020.1)

In this Document

Goal
Solution
References

APPLIES TO:

Oracle ZFS Storage ZS7-2 Mid-Range TAA Compliant - Version All Versions and later
Oracle ZFS Storage ZS7-2 High End TAA Compliant - Version All Versions and later
Oracle ZFS Storage ZS4-4 - Version All Versions and later
Oracle ZFS Storage ZS5-4 - Version All Versions and later
Oracle ZFS Storage ZS5-2 - Version All Versions and later
7000 Appliance OS (Fishworks)

GOAL

To discuss this information further with Oracle experts and industry peers, we encourage you to review, join or start
a discussion in the My Oracle Support Community - Disk Storage ZFS Storage Appliance

This document focuses on migrating SMB/CIFS data to the ZFS Storage Appliance(ZFSSA) with the NTFS permissions
intact.

For our purposes, we focus on migrating from a Netapp storage system, but these tools and processes should be able
to be used with any Windows NTFS file system such as Windows File servers and other NAS providers, such as EMC
Celer.

SOLUTION

1. Prerequisites:

Both the Netapp and the ZFSSA were connected to the same Windows Active Directory server Domain.
All of the migration and work below was done on a Windows PC that was a member of the Domain with
the Domain Administrator account.
The tools used for the migration are free and included in both Windows 7 and Windows 2008 R2.
Robocopy is used for the data migration. http://technet.microsoft.com/en-us/library/
cc733145(v=ws.10).aspx
ICACLS is used for the NTFS permissions migration. http://technet.microsoft.com/en-us/library/
cc753525(v=ws.10).aspx

2. For our Windows migration box we mapped the following drives:

z:\ (is the mounted Netapp share on our PC

y:\ is the mounted Oracle ZFSSA share (migration) on our PC

Share permissions are set to Full Control on both storage systems

1 di 7 09/04/2024, 13:32
Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

3. Sample permissions on Netapp directories before copy are below.

The NTFS permissions are extremely complex, including read only on some directories and full
control on sub directories of the read only directory.

Normal robocopy migration methods, with the NTFS permissions included, would cause issues with the
migration.

Read Only on the root directory/folder below would not allow any sub directories to be written and
therefore the migration would stop and never finish.

We need a way to first migrate the data with no permissions and then later backup and update the
permissions on the migrated data.

2 di 7 09/04/2024, 13:32
Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

4. First, perform the initial FULL Robocopy with mirror command which does not copy any NTFS security.

c:\>robocopy z:\ y:\ /MIR

5. These are what the permissions look like on ZFSSA after the initial mirror versus the Netapp above on Step

3 di 7 09/04/2024, 13:32
Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

3. Everything inherits the EVERYONE=Full control permissions from the share level.

6. Now you can continue to update the copy with changed files and new directories only.

No permissions are copied yet as we are still just updating the data until we are ready to completely cut
over to the new ZFS Storage Appliance.

Below you can see a change on a single file named “New Text Document.txt”. It is the only file copied
and updated with robocopy using the /e option.

c:\>robocopy z:\ y:\ /e

7. Final migration and Cutover

a. Before the final migration and cutover, disconnect all clients from the Netapp and make it Read Only.
b. To make the Netapp read only, go to the Manage computers MMC console and connect to the Netapp.
Then find the share you’re going to migrate and uncheck Full Control and Change permissions from the

4 di 7 09/04/2024, 13:32
Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

Share Permissions tab like below

8. Perform the final robocopy now, just like Step 6 above: c:\>robocopy z:\ y:\ /e

9. Permissions Backup:

a. Next, backup all permissions

b. First backup the Netapp permissions using the ICACLS tool built into Windows. This will save the
permissions to a local file called netappperms.txt with the /t /c options.
i. c:\><HOST> z:\* /save c:\netappperms.txt /t /c

c. Next backup the ZFSSA empty permissions just in case they are needed to revert for some reason.
i. c:\><HOST> y:\* /save c:\zfssaemptyperms.txt /t /c

5 di 7 09/04/2024, 13:32
Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

10. Permissions Restore

a. Next restore the original Netapp permissions to the ZFSSA share.

i. c:\><HOST> y:\ /restore c:\netappperms.txt

11. Now the ZFSSA has all the correct permissions and all data is migrated

12. Mount all clients to the ZFSSA and resume business as usual.

13. We suggest you run tests and utilize snapshots on the ZFSSA to tests your permissions migrations
before your final cut over.

14. This document does not cover updating DNS or Client mount options for migrated data. The focus of this
document is migrating SMB file shares with NTFS permissions intact to a ZFS Storage Appliance.

6 di 7 09/04/2024, 13:32
Document 1533020.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-st...

REFERENCES

NOTE:1408716.1 - Oracle ZFS Storage Appliance: How to Troubleshoot SMB (CIFS) Problems
Didn't find what you are looking for?

7 di 7 09/04/2024, 13:32