Authentication Manager: Backup failed to Windows Share (cifs)
2 years ago
Originally Published: 2018-04-26
Article Number
000041718
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: SecurID Appliance
RSA Version/Condition: 8.x
Platform: Linux
 
Issue
Error While backing up to Windows share, with error:
@@@2017-04-20 08:38:20,052 ERROR [[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] GUILog.traceException(587) | exception: 
java.io.IOException: Remote file access error: mount error(95): Operation not supported
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
	at com.rsa.ims.operationsconsole.admin.fileshare.RemoteFileShare.runCommand(RemoteFileShare.java:129)
	at com.rsa.ims.operationsconsole.admin.fileshare.RemoteFileShare.retryCommand(RemoteFileShare.java:155)
	at com.rsa.ims.operationsconsole.admin.fileshare.impl.CIFSFileShare.mountCIFS(CIFSFileShare.java:161)
	at com.rsa.ims.operationsconsole.admin.fileshare.impl.CIFSFileShare.mount(CIFSFileShare.java:98)
	at com.rsa.ims.web.operationsconsole.action.handler.ManageBackupHandler.retrieveList(ManageBackupHandler.java:66)
	at com.rsa.ims.common.operationsconsole.action.BaseListAction.retrieveList(BaseListAction.java:120)
	at com.rsa.ims.common.operationsconsole.action.BaseListAction.list(BaseListAction.java:65)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:606)
	at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:269)
	at com.rsa.ui.common.struts.action.RSABaseDispatchAction.execute(RSABaseDispatchAction.java:180)
	at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:425)
	at com.rsa.ui.common.util.RSAWebRequestProcessor.process(RSAWebRequestProcessor.java:220)
	at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1913)
	at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:449)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:844)
	at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:280)
	at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:254)
	at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:136)
	at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:346)
	at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:25)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:101)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at com.rsa.ui.common.filter.I18NFilter.doFilter(I18NFilter.java:96)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at com.rsa.ui.common.security.csrf.CSRFFilter.doFilterInternal(CSRFFilter.java:199)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at com.rsa.ui.common.filter.UrlValidationFilter.doFilter(UrlValidationFilter.java:133)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at com.rsa.ims.common.operationsconsole.security.filter.CommonOCIMSSignOnFilter.doFilter(CommonOCIMSSignOnFilter.java:127)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at com.rsa.ims.common.operationsconsole.security.filter.CommonOCSignOnFilter.doFilter(CommonOCSignOnFilter.java:107)
	at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
	at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3431)
	at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3397)
	at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
	at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
	at weblogic.servlet.provider.WlsSubjectHandle.run(WlsSubjectHandle.java:57)
	at weblogic.servlet.internal.WebAppServletContext.doSecuredExecute(WebAppServletContext.java:2280)
	at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2196)
	at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
	at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1575)
	at weblogic.servlet.provider.ContainerSupportProviderImpl$WlsRequestExecutor.run(ContainerSupportProviderImpl.java:255)
	at weblogic.work.ExecuteThread.execute(ExecuteThread.java:311)
	at weblogic.work.ExecuteThread.run(ExecuteThread.java:263)
Cause
Sometimes we need to specify the exact version of CIFS needed, in our case it is cifs ver 3.0
Resolution
The Windows server that will host the Authentication Manager backups needs to have cifs version 3.0 enabled and working.
A quick test through SSH/command line of the Authentication Manager Primary, ex:
mount -t cifs "//192.168.10.10/RSABackup" -o username=administrator,password=<your_password>,domain=<YOUR DOMAIN IN CAPS>,vers=3\.0 /opt/rsa/am/backup/test