IBM Support

IT25298: ANR0428W SESSION REFUSED - CLIENT IS DOWN-LEVEL WHEN SESSIONINITIATION SERVERONLY IS USED

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as documentation error.

Error description

  • When the client and server are at level 7.1.8+ and / or  8.1.2+
    , a client scheduler setup with client/server option
    SESSIONINITIATION=SERVERONLY
    will work only if the client node is not switched to
    SESSIONSECURITY=STRICT .
    It must stay in SESSIONSECURITY=TRANSITIONAL .
    The client manual explains how to setup this correctly but if
    for any reasons the node opens a direct session with the server,
    the node can change to STRICT, and message ANR0428W will be
    issued when the schedule is run.
    On theWindows client platform, the client manual needs to be
    updated as to the mehtod to store the client password locally
    with the dsmcutil command,  without contacting the server. This
    is achieved with  "/commServer:servername" parameter, where
    "servername" is the IBM Spectrum Protect "servername" seen in
    server command "Q STATUS" .
    
     There are several places in the manuals where update are
    needed:
    https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.4/client/
    t_cfg_firewall.html
    https://www.ibm.com/support/knowledgecenter/en/SSGSG7_7.1.6/clie
    nt/c_cfg_dsmcutil_cmdwin.html
    
    IBM Spectrum Protect Versions Affected:  7.1.8+ and 8.1.2+ on
    all platforms
    
    Customer/L2 Diagnostics:
    
    - The schedule job does not start and this warning is reported
    in the activity log:
    
     ANR0428W Session xx for node NODEXX () refused - client is
    down-level with  this server  version.
    
    
    Initial Impact: Medium
    
    Additional Keywords:  TSM TS000845415 sessioninitiation
                          serveronly
    

Local fix

  • - Here is the syntax to use to store the password without
    validation on Windows platform:
     "dsmcutil updatepw /node:new /commServer:<servername>
    /password:xxxx  /validate:no"
    - If the node comes to SESSIONSECURITY STRICT status by mistake,
    it can be changed back to TRANSITIONAL with command:
       "UPDATE NODE <nodename> SESSIONSECURITY TRANSITIONAL"
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users of IBM Spectrum Protect Backup-Archive Clients         *
    * Installation and User's Guide 8.1.2 - 8.1.4                  *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See ERROR DESCRIPTION.                                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This issue is projected   *
    * to be fixed in the 8.1.6 update to the IBM Spectrum Protect  *
    * Backup-Archive Clients Installation and User's Guide.        *
    *                                                              *
    * Note: This information is subject to change at the           *
    * discretion of IBM.                                           *
    ****************************************************************
    

Problem conclusion

  • The missing information will be published in the IBM Spectrum
    Protect Backup-Archive Clients Installation and User's Guide.
    The additional information for Method 2 will be located in the
    Topic titled as: Configuring IBM Spectrum Protect client/server
    communication across a firewall.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT25298

  • Reported component name

    TSM CLIENT

  • Reported component ID

    5698ISMCL

  • Reported release

    81L

  • Status

    CLOSED DOC

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-06-08

  • Closed date

    2018-09-07

  • Last modified date

    2018-09-07

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels



Document information

More support for: Tivoli Storage Manager

Software version: 81L

Reference #: IT25298

Modified date: 07 September 2018


Translate this page: