000031176 - Backups to a Windows Shared Folder are failing on Authentication Manager 8.1 after upgrade

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031176
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1 SP1 P1 and later
Issue
  • Windows backup is failing after AM 8.1 is upgraded to SP1 P1 or later
  • Backup is failing from operations console
  • Mounting the Windows share from the command line will also fail using the sec=ntlmssp and sec=ntlmsspi options as shown below. Make sure you replace the <Windows_Share_Server> <Windows_Share_Folder> and <Windows_Share_User> attributes with your actual Windows share information.
am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test 
-o user=<Windows_Share_User>,sec=ntlmsspi,uid=1000
Password:
mount error(95): Operation not supported
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test
-o user=<Windows_Share_User>,sec=ntlmssp,uid=1000
Password:
mount error(5): Input/output error
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

  • Mounting the Windows share from the command line succeeds when removing the sec=xxxxx option as shown below:
am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test 
-o user=<Windows_Share_User>,uid=1000
Password:
am81p:~ #

  • Backups to the Local Authentication Manager Server or NFS are working
Cause

The changes made as part of supporting the NTLMv2 in SP1 Patch 1 enforced Authentication Manager to use the security options ntlmssp or ntlmsspi. If your Windows Shared Folder does not support these security modes, then Authentication Manager will fail to mount the share and fail to perform the backup.

ResolutionApply AM 8.1 SP1 P8 to solve the problem as per defect AM-29331.
Workaround
  • Use NFS Backup
  • Use Internal Backup
  • Change the security mode to NTLMv2 on the windows machine

Attachments

    Outcomes