Re: Admin session refused on each new client

2018-02-20 Thread Krzysztof Przygoda
Hi Eric
Try setting admin schedule running every few minutes "update admin *
sessionsecurity=transitional". Silly, but works...
ps.
For me IBM attitude for handling this issue is kind of silly. Especially
that this sessionsecurity=strict is also pushed to all managed accounts
which you, on your own, cannot update without deleting enterprise
subscription.

Kind Regards
Krzysztof

2018-02-20 17:17 GMT+01:00 Loon, Eric van (ITOPT3) - KLM <
eric-van.l...@klm.com>:

> Hi guys!
> We have always used a script to install the TSM client code on new Linux
> clients. Since the server was upgraded to 7.1.8 (and thus are suffering
> from the new security features) the script fails. The admin session which
> is supposed to define the new node on the TSM server is rejected with the
> message "ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused
> - client is down-level with this server version.". This can be fixed once
> by a upd admin ADMIN sessionsecurity=transitional at which point the
> certificate is exchanged and the session is working again. But because the
> sessionsecurity is immediately set to strict afterwards by TSM, the next
> time the script is run on a different client, it fails again.
> Has anybody been able to find some work-around for this?
> Kind regards,
> Eric van Loon
> Air France/KLM Storage Engineering
>
> 
> For information, services and offers, please visit our web site:
> http://www.klm.com. This e-mail and any attachment may contain
> confidential and privileged material intended for the addressee only. If
> you are not the addressee, you are notified that no part of the e-mail or
> any attachment may be disclosed, copied or distributed, and that any other
> action related to this e-mail or attachment is strictly prohibited, and may
> be unlawful. If you have received this e-mail by error, please notify the
> sender immediately by return e-mail, and delete this message.
>
> Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its
> employees shall not be liable for the incorrect or incomplete transmission
> of this e-mail or any attachments, nor responsible for any delay in receipt.
> Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch
> Airlines) is registered in Amstelveen, The Netherlands, with registered
> number 33014286
> 
>


Re: Admin session refused on each new client

2018-02-20 Thread Jansen, Jonas
Hi Eric,
I think you should use the new dsmcert tool to add the server certificate to 
the client trusted certificate store. May bee you can add this step to your 
script.
Best regards,
Jonas Jansen

-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Loon, 
Eric van (ITOPT3) - KLM
Sent: Tuesday, February 20, 2018 5:18 PM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] Admin session refused on each new client

Hi guys!
We have always used a script to install the TSM client code on new Linux 
clients. Since the server was upgraded to 7.1.8 (and thus are suffering from 
the new security features) the script fails. The admin session which is 
supposed to define the new node on the TSM server is rejected with the message 
"ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused - client is 
down-level with this server version.". This can be fixed once by a upd admin 
ADMIN sessionsecurity=transitional at which point the certificate is exchanged 
and the session is working again. But because the sessionsecurity is 
immediately set to strict afterwards by TSM, the next time the script is run on 
a different client, it fails again.
Has anybody been able to find some work-around for this?
Kind regards,
Eric van Loon
Air France/KLM Storage Engineering


For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message.

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt.
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286



Admin session refused on each new client

2018-02-20 Thread Loon, Eric van (ITOPT3) - KLM
Hi guys!
We have always used a script to install the TSM client code on new Linux 
clients. Since the server was upgraded to 7.1.8 (and thus are suffering from 
the new security features) the script fails. The admin session which is 
supposed to define the new node on the TSM server is rejected with the message 
"ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused - client is 
down-level with this server version.". This can be fixed once by a upd admin 
ADMIN sessionsecurity=transitional at which point the certificate is exchanged 
and the session is working again. But because the sessionsecurity is 
immediately set to strict afterwards by TSM, the next time the script is run on 
a different client, it fails again.
Has anybody been able to find some work-around for this?
Kind regards,
Eric van Loon
Air France/KLM Storage Engineering


For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message.

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt.
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286