HP StorageWorks Clustered File System 3.6.0 Windows Storage Server Edition Administration Guide (403103-005, January 2008)

Chapter 4: Cluster Administration 21
• Active Directory user and groups should be used in filesystem ACLs.
Do not use local users and groups because they are meaningless to
other nodes in the cluster.
• HP Clustered File System nodes should not be used as domain
controllers because the two services will compete for resources,
resulting in decreased performance.
• The DNS servers used by Active Directory and HP Clustered File
System should not reside on HP Clustered File System nodes. Placing
the DNS servers on HP Clustered File System nodes creates a race
condition that prevents HP Clustered File System from starting.
Other Considerations
• If Role-Based Security is used, assign users/groups to appropriately
configured roles that give HP Clustered File System administrators
the least-privilege needed to perform operations.
• For best performance, we recommend that you monitor the cluster
from a separate administrative station rather than from a server in the
cluster. The HP CFS Management Console can be installed on
Windows systems outside the cluster.
• Using search bots and running parallel searches across the cluster can
have a negative impact on performance. Users should be aware of the
potential effects of various search activities.
• To ensure that file times are consistent across the cluster, it is
important that all cluster servers operate with synchronized time-of-
day clocks. An NTP server is one commonly used mechanism for
synchronizing system clocks.
• The Java Management Extensions (JMX) Remote API is included in
the Java Runtime Environment (JRE) provided with the HP
Management Console. The password file for JMX stores the password
in clear text. HP does not create or use this file and recommends that
you do not use it. However, if you do need to use the password file,
please be aware of the security risk.