000037459 - Backup and scan for updates using NFS fails after upgrading to RSA Authentication Manager 8.4

Document created by RSA Customer Support Employee on Jul 18, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037459
Applies ToRSA Product Set:  SecurID
RSA Product/Service Type:  Authentication Manager
RSA Version/Condition:  8.4
IssueThe following error is received during the upgrade process in the Operations Console Advanced View Window:
 
mount.nfs: Remote I/O error
     There was a problem processing your request.
Failed to scan for updates on any configured sources.
The following errors occurred:
•    Failed to mount the NFS share.

 

Current Status 
[INFO] Mounting device NFS to /tmp/rsa_update/nfs_root.
[INFO] mount.nfs: Remote I/O error
[ERROR] Mounting failed with exit code 32.
[DEBUG] Failed to mount with default NFS options, Re-trying with NFSv4
Exception:
Unexpected error
[INFO] Mounting device NFS to /tmp/rsa_update/nfs_root.
[INFO] mount.nfs: Remote I/O error
[ERROR] Mounting failed with exit code 32.
Error: Failed to mount: There was an unexpected error while mounting.
Error: There were errors scanning all of the update sources.

 


The following error is seen during the backup process in Operations Console UI while back up job is running:
 


Validating remote backup location Failed
Please check that your remote connection is accessible, writable,
and has sufficient space, and back up your system again.



The NFS server is reachable and space and permissions were verified with no issues.
CauseRSA Authentication Manager 8.4 is using NFS version 4 protocol, while the NFS server is using NFS version 3 protocol.
ResolutionChecking NFS protocol version on NFS server can be done with the commands:
 
# nfsstat -m
/mnt/share from 10.0.0.1:/mnt/share
Flags:  rw,relatime,vers=3,rsize=524288,wsize=524288,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=10.0.0.1,mountvers=3,mountport=30924,mountproto=udp,local_lock=none,addr=10.0.0.1

 


or


# grep nfs /proc/mounts
10.0.0.1:/mnt/share /mnt/share nfs rw,relatime,vers=3,rsize=524288,wsize=524288,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=10.0.0.1,mountvers=3,mountport=30924,mountproto=udp,local_lock=none,addr=10.0.0.1



NFS protocol version is determined by checking the values for mountvers and vers on the NFS server.

* * * 



If the NFS server is using NFS version 3 protocol, apply the following workaround on the Authentication Manager server:



  1. Launch an SSH client, such as PuTTY.
  2. Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.

Note that during Quick Setup another user name may have been selected. Use that user name to login.


 

  1. Edit the /etc/nfsmount.conf.
  2. Change Defaultvers and Nfsvers values to 3 (instead of 4) as shown below:
 

# Protocol Version [2,3,4]
# This defines the default protocol version which will
# be used to start the negotiation with the server.
Defaultvers=3
#
# Setting this option makes it mandatory the server supports the
# given version. The mount will fail if the given version is
# not support by the server.
Nfsvers=3

 


  1. Save changes
  2. Repeat steps 1 through 5 on each replica, completing the steps on one before moving to the next.

Attachments

    Outcomes