[prev in list] [next in list] [prev in thread] [next in thread] 

List:       adsm-l
Subject:    Re: Admin session refused on each new client
From:       Krzysztof Przygoda <przygod () GMAIL ! COM>
Date:       2018-02-21 7:53:54
Message-ID: CA+Uh2HBeoZo6zmhXDvj4=rgh68ZVxYU3z6nzNREFFLtVqfaeDA () mail ! gmail ! com
[Download RAW message or body]

Hi Eric
Try setting admin schedule running every few minutes "update admin *
sessionsecurity=transitional". Silly, but works...
ps.
For me IBM attitude for handling this issue is kind of silly. Especially
that this sessionsecurity=strict is also pushed to all managed accounts
which you, on your own, cannot update without deleting enterprise
subscription.

Kind Regards
Krzysztof

2018-02-20 17:17 GMT+01:00 Loon, Eric van (ITOPT3) - KLM <
Eric-van.Loon@klm.com>:

> Hi guys!
> We have always used a script to install the TSM client code on new Linux
> clients. Since the server was upgraded to 7.1.8 (and thus are suffering
> from the new security features) the script fails. The admin session which
> is supposed to define the new node on the TSM server is rejected with the
> message "ANR0404W Session 66 for administrator ADMIN (Linux x86-64) refused
> - client is down-level with this server version.". This can be fixed once
> by a upd admin ADMIN sessionsecurity=transitional at which point the
> certificate is exchanged and the session is working again. But because the
> sessionsecurity is immediately set to strict afterwards by TSM, the next
> time the script is run on a different client, it fails again.
> Has anybody been able to find some work-around for this?
> Kind regards,
> Eric van Loon
> Air France/KLM Storage Engineering
>
> ********************************************************
> For information, services and offers, please visit our web site:
> http://www.klm.com. This e-mail and any attachment may contain
> confidential and privileged material intended for the addressee only. If
> you are not the addressee, you are notified that no part of the e-mail or
> any attachment may be disclosed, copied or distributed, and that any other
> action related to this e-mail or attachment is strictly prohibited, and may
> be unlawful. If you have received this e-mail by error, please notify the
> sender immediately by return e-mail, and delete this message.
>
> Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its
> employees shall not be liable for the incorrect or incomplete transmission
> of this e-mail or any attachments, nor responsible for any delay in receipt.
> Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch
> Airlines) is registered in Amstelveen, The Netherlands, with registered
> number 33014286
> ********************************************************
>
[prev in list] [next in list] [prev in thread] [next in thread]