Re: Admin session refused on each new client
Hi Eric Try setting admin schedule running every few minutes "update admin * sessionsecurity=transitional". Silly, but works... ps. For me IBM attitude for handling this issue is kind of silly. Especially that this sessionsecurity=strict is also pushed to all managed accounts which you, on your own, cannot update without deleting enterprise subscription. Kind Regards Krzysztof 2018-02-20 17:17 GMT+01:00 Loon, Eric van (ITOPT3) - KLM < eric-van.l...@klm.com>: > Hi guys! > We have always used a script to install the TSM client code on new Linux > clients. Since the server was upgraded to 7.1.8 (and thus are suffering > from the new security features) the script fails. The admin session which > is supposed to define the new node on the TSM server is rejected with the > message "ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused > - client is down-level with this server version.". This can be fixed once > by a upd admin ADMIN sessionsecurity=transitional at which point the > certificate is exchanged and the session is working again. But because the > sessionsecurity is immediately set to strict afterwards by TSM, the next > time the script is run on a different client, it fails again. > Has anybody been able to find some work-around for this? > Kind regards, > Eric van Loon > Air France/KLM Storage Engineering > > > For information, services and offers, please visit our web site: > http://www.klm.com. This e-mail and any attachment may contain > confidential and privileged material intended for the addressee only. If > you are not the addressee, you are notified that no part of the e-mail or > any attachment may be disclosed, copied or distributed, and that any other > action related to this e-mail or attachment is strictly prohibited, and may > be unlawful. If you have received this e-mail by error, please notify the > sender immediately by return e-mail, and delete this message. > > Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its > employees shall not be liable for the incorrect or incomplete transmission > of this e-mail or any attachments, nor responsible for any delay in receipt. > Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch > Airlines) is registered in Amstelveen, The Netherlands, with registered > number 33014286 > >
Re: Admin session refused on each new client
Hi Eric, I think you should use the new dsmcert tool to add the server certificate to the client trusted certificate store. May bee you can add this step to your script. Best regards, Jonas Jansen -Original Message- From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Loon, Eric van (ITOPT3) - KLM Sent: Tuesday, February 20, 2018 5:18 PM To: ADSM-L@VM.MARIST.EDU Subject: [ADSM-L] Admin session refused on each new client Hi guys! We have always used a script to install the TSM client code on new Linux clients. Since the server was upgraded to 7.1.8 (and thus are suffering from the new security features) the script fails. The admin session which is supposed to define the new node on the TSM server is rejected with the message "ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused - client is down-level with this server version.". This can be fixed once by a upd admin ADMIN sessionsecurity=transitional at which point the certificate is exchanged and the session is working again. But because the sessionsecurity is immediately set to strict afterwards by TSM, the next time the script is run on a different client, it fails again. Has anybody been able to find some work-around for this? Kind regards, Eric van Loon Air France/KLM Storage Engineering For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286
Admin session refused on each new client
Hi guys! We have always used a script to install the TSM client code on new Linux clients. Since the server was upgraded to 7.1.8 (and thus are suffering from the new security features) the script fails. The admin session which is supposed to define the new node on the TSM server is rejected with the message "ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused - client is down-level with this server version.". This can be fixed once by a upd admin ADMIN sessionsecurity=transitional at which point the certificate is exchanged and the session is working again. But because the sessionsecurity is immediately set to strict afterwards by TSM, the next time the script is run on a different client, it fails again. Has anybody been able to find some work-around for this? Kind regards, Eric van Loon Air France/KLM Storage Engineering For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286