RSA Authentication Manager 8.1 SP 1 patch 1 backups to a Windows Shared Folder are failing after software upgrade
Originally Published: 2015-09-08
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1 SP1 P1 and later
Issue
- Windows backup is failing after RSA Authentication Manager 8.1 is upgraded to SP1 patch 1 or later
- The backup is failing from the Operations Console
- Mounting the Windows share from the command line will also fail using the sec=ntlmssp and sec=ntlmsspi options as shown below.
am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test -o user=<Windows_Share_User>,sec=ntlmsspi,uid=1000 Password: <enter password for Windows_Share_User> mount error(95): Operation not supported Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test -o user=<Windows_Share_User>,sec=ntlmssp,uid=1000 Password: <enter password for Windows_Share_User> mount error(5): Input/output error Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
- Mounting the Windows share from the command line succeeds when removing the sec=xxxxx option as shown below:
am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test -o user=<Windows_Share_User>,uid=1000 Password: <enter password for Windows_Share_User> am81p:~ #
- Backups to the Local Authentication Manager Server or NFS are working.
Cause
The changes made as part of supporting the NTLMv2 in SP1 Patch 1 enforced Authentication Manager to use the security options ntlmssp or ntlmsspi. If your Windows Shared Folder does not support these security modes, then Authentication Manager will fail to mount the share and fail to perform the backup.
Resolution
Workaround
- Use NFS backup,
- Use internal backup, or
- Change the security mode to NTLMv2 on the Windows machine.
Related Articles
Error during migration: Error: Failed to massage migrated data org.postgresql.util.PSQLException: ERROR: update or delete… 57Number of Views Windows Agent failing to authenticate local Group Membership with 30 Secs timeout 124Number of Views Incompatibility with Encoding of Private Key causes various issues on an RSA SecurID Access Identity Router running SLES12… 205Number of Views Intermittent SSL Exceptions with fatal alert from SOAP calls in Authentication Manager 8.4 Patch 9 52Number of Views RSA Identity Governance and Lifecycle RESTful web service response: java.lang.IllegalStateException 291Number of Views
Trending Articles
RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide How to Upgrade Internal SHA-1 Certificates to SHA-256 in Authentication Manager Using rsautil RSA Authentication Manager 8.9 Setup and Configuration Guide RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows
Don't see what you're looking for?