Cannot remove node from cluster when auditing active

When you have the issue “Failed to disable cluster-scoped metadata volume support prior to unjoin operation”:

clA::*> cluster unjoin -node clA-01 -force true

Warning: This command will forcibly unjoin node "clA-01" from the cluster. You must unjoin the failover partner as well.
         This will permanently remove from the cluster any volumes that remain on that node and any logical interfaces
         with that node as the home-node. Contact support for additional guidance.
Do you want to continue? {y|n}: y
[Job 1819] Checking prerequisites
Error: command failed: [Job 1819] Job failed: Failed to disable cluster-scoped metadata volume support prior to unjoin
       operation. Reason: All cluster-scoped volumes are still online.

Remove all the volumes on affected aggregates, lifs from affected nodes, change home-ports from affected lifs and ports from manually created failover-groups.

Then offline the data aggregate connected to a node to be unjoined.

clA::*> aggr offline aggr05

After the last job was finished with success for one node, then unjoin again.

clA::*> cluster unjoin -node clA-01

Warning: This command will unjoin node "clA-01" from the cluster. You must unjoin the failover partner as well. After the
         node is successfully unjoined, erase its configuration and initialize all disks by using the "Clean configuration
         and initialize all disks (4)" option from the boot menu.
Do you want to continue? {y|n}: y
[Job 1843] Cleaning cluster database[Job 1843] Job succeeded: Cluster unjoin succeeded
If applicable, also unjoin the node's HA partner, and then clean its configuration and initialize all disks via the boot menu. Run "debug vreport" to address any remaining aggregate or volume issues.

When there are still system volume online on a data aggregates connected to a node to be unjoined, continue with this.

clA::*> vol show -aggregate aggr06
Vserver   Volume       Aggregate    State      Type       Size  Available Used%
--------- ------------ ------------ ---------- ---- ---------- ---------- -----
clA       MDV_aud_02e7b476ab4541e5b3b0a12357288980
                       aggr06       online     RW          2GB     1.90GB    5%

I tried to move it and found out it is audit log volume:

vol move start -volume MDV_aud_02e7b476ab4541e5b3b0a12357288980 -destination-aggregate aggr01

Error: command failed: Volume "MDV_aud_02e7b476ab4541e5b3b0a12357288980" in Vserver "vsm01" cannot be moved. Reason: This
       volume is configured to hold audit logs specific to the current aggregate.

Then  delete (cifs) audit logging

 vserver audit delete -vserver vsm01

And disable system audit:

clA::*> security audit show
               Auditing State for              Auditing State for
               Set Requests:                   Get Requests:
               ------------------              ------------------
    CLI:       on                             off
    ONTAPI:    on                             off
    SNMP:      on                              off

clA::*> security audit modify -cliset off
clA::*> security audit modify -ontapiset off
clA::*> security audit modify -snmpset off

And system volume disapeared:

clA::*> vol show -aggregate aggr06
There are no entries matching your query.

And the second node can be unjoined saccesfully!:

clA::*> cluster unjoin -node clA-02

Warning: This command will unjoin node "clA-02" from the cluster. You must unjoin the failover partner as well. After the
         node is successfully unjoined, erase its configuration and initialize all disks by using the "Clean configuration
         and initialize all disks (4)" option from the boot menu.
Do you want to continue? {y|n}: y
[Job 1864] Cleaning cluster database[Job 1864] Job succeeded: Cluster unjoin succeeded
If applicable, also unjoin the node's HA partner, and then clean its configuration and initialize all disks via the boot menu. Run "debug vreport" to address any remaining aggregate or volume issues.

Getting security audit settings back:

clA::*> security audit modify -cliset on
clA::*> security audit modify -ontapiset on
clA::*> security audit modify -snmpset on

Thanks to D_BEREZENKO for this information.

twitterlinkedinmailtwitterlinkedinmail
Arco

About

View all posts by