This page documents settings for enabling external identity management using an Active Directory or LDAP service. See Configure AIStor for Authentication using Active Directory / LDAP for a tutorial on using these settings. AIStor recommends using the mc idp ldap commands for LDAP management operations. These commands offer better validation and additional features, while providing the same settings as the identity_ldap configuration key. The identity_ldap configuration settings remains available for existing scripts and other tools.

This page covers settings that configure the Erasure Code parity to use for objects written to the AIStor cluster. This impacts how AIStor uses the space on the drive(s) and how AIStor can recover objects stored on lost drives or similar issues. You can establish or modify settings by defining: an environment variable on the host system prior to starting or restarting the AIStor Server. Refer to your operating system’s documentation for how to define an environment variable. a configuration setting using mc admin config set. If you define both an environment variable and the similar configuration setting, AIStor uses the environment variable value.

The mc watch command watches for events on the specified AIStor bucket or local filesystem path. For S3 services, use mc event add to configure bucket event notifications on S3-compatible services. You can also use mc watch against a local filesystem directory to produce similar results to running the inotify -e modify,create,delete,move command. Syntax Example The following command watches for events on any object or prefix in the mydata bucket on the myminio AIStor deployment:

The AIStor Client command line tool includes the mc admin subcommand tree for performing administrative tasks on your AIStor deployments. mc admin target AIStor deployments exclusively and do not support any other S3-compatible service. The command has the following top-level syntax. Use the --help parameter to view the CLI help. mc admin [FLAGS] COMMAND [ARGUMENTS] Global Options mc admin supports the same global options as mc. See Global Options.

AIStor Server publishes all minio server operations to the system console. Reading these logs depends on how the server process is managed. For example, if the server is managed through a systemd script, you can read the logs using journalctl -u SERVICENAME.service. Replace SERVICENAME with the name of the AIStor Server service. AIStor Server also supports publishing server logs and audit logs to an HTTP webhook. Server logs contain the same minio server operations logged to the system console. Server logs support general monitoring and troubleshooting of operations. Audit logs are more granular descriptions of each operation on the AIStor deployment. Audit logging supports security standards and regulations which require detailed tracking of operations. AIStor Server publishes logs as a JSON document as a PUT request to each configured endpoint. The endpoint server is responsible for processing each JSON document. AIStor Server requires explicit configuration of each webhook endpoint and does not publish logs to a webhook by default.

mc idp openid accesskey edit modifies the specified access key on the local server. Example and Syntax Example The following example modifies the secret for the access key mykey on the minio deployment:

The mc event add command adds event notification triggers to a bucket. AIStor automatically sends triggered events to the configured notification target. Syntax EXAMPLE The following command creates a new event notification trigger for all PUT and DELETE operations for the mydata bucket on the myminio AIStor deployment:

The mc encrypt info command displays the default bucket encryption configuration. Syntax Example The following command displays the default encryption configuration for a bucket:

The mc ilm rule ls command summarizes all configured object lifecycle management rules on an AIStor bucket in a tabular format. The mc ilm rule list command has equivalent functionality to mc ilm rule ls. Syntax Example The following command lists all lifecycle management rules for the mydata bucket on the myminio AIStor deployment:

The mc ilm restore command creates a temporary copy of an object archived on a remotetier. The copy automatically expires after 1 day by default. Syntax Use this command to allow applications to access a tiered object through the AIStor deployment (e.g. “hot tier”). The archived object remains on the remote tier, while the temporary copy becomes HEAD for that object.