are there any news about this hotfix or perhaps newer hotfixes?
I have to do an MSM installation at a customer with 100 single nodes and 2 Grid systems. As BRM don´t work here since 3 years we hoped that MSM can do the monitoring better.
The customer has just update the Avamar systems to version 7.4.1., and I hope I don´t have to install a hotfix on all 100 single nodes...
Oh, ye of little faith ! Come on, of course you will. and then as soon as you complete those 100 HF installs you will receive either an emergency security patch email or the next GA to v7.5.
We have given up doing any work other than HF and patches, and we only have three dozen Avamar nodes globally.
The recommended way to change the sessions security mode is to use the corresponding AVP package. Also, the commands that you ran will disable not only dual authentication but also the secure session features. This leaves your system vulnerable to published CVEs.
Most customers will likely want "Authenticated/Single" (if they do not have any 7.1 or older clients) or "Mixed/Single" (if they have 7.1 or older clients which do not support secure sessions).
Mildur
12 Posts
0
May 30th, 2017 11:00
MSM is to buggy at the moment.
Without hotfixes for mcs, there is no correct functionality.
And the hotfixes are also not very good. My hotfix was on hold one week after installation because they found new problems.
Von meinem Samsung Galaxy Smartphone gesendet.
ionthegeek
2 Intern
•
2K Posts
0
May 31st, 2017 11:00
Which hotfix did you have issues with please?
TrophyWife11112
1 Rookie
•
26 Posts
0
May 31st, 2017 11:00
Well ok then.
Thanks for the info. =)
Mildur
12 Posts
0
May 31st, 2017 11:00
It's the MCS Hotfix Nr. HF279818.
Hotfix-mc-741-58-cumulative-201704
I don't know what the problem is, but the hotfix request was rejected for my second grid after upgrade to 7.4.1.
Emc technician told me, it's on hold.
My first grid has GUI update errors in activity log since the hotfix installation.
I have opened a SR for this.
Von meinem Samsung Galaxy Smartphone gesendet.
Druehl1
2 Intern
•
223 Posts
0
June 29th, 2017 23:00
Hello,
are there any news about this hotfix or perhaps newer hotfixes?
I have to do an MSM installation at a customer with 100 single nodes and 2 Grid systems. As BRM don´t work here since 3 years we hoped that MSM can do the monitoring better.
The customer has just update the Avamar systems to version 7.4.1., and I hope I don´t have to install a hotfix on all 100 single nodes...
DanaJeff
1 Message
0
July 31st, 2017 09:00
Oh, ye of little faith !
Come on, of course you will. and then as soon as you complete those 100 HF installs you will receive either an emergency security patch email or the next GA to v7.5. 
We have given up doing any work other than HF and patches, and we only have three dozen Avamar nodes globally.
pcbureau
3 Posts
0
August 25th, 2017 05:00
I had the same problem and it is solved now...
Issue is about dual authentication deployed with Avamar 7.4
You can deactivate it with these commands :
enable_secure_config.sh --undo --secure-session
enable_secure_config.sh --undo --secure-ticket
enable_secure_config.sh --undo --dualauth
dpnctl stop mcs
dpnctl start mcs
dpnctl start sched
After that, it's working on MSM.
Regards.
pcbureau
3 Posts
0
August 25th, 2017 06:00
Ok thank you. I had these commands from a EMC presale. I will look for avp package. Where I can find them ?
ionthegeek
2 Intern
•
2K Posts
0
August 25th, 2017 06:00
The download links can be found in the following KB article:
https://support.emc.com/kb/484773
ionthegeek
2 Intern
•
2K Posts
0
August 25th, 2017 06:00
The recommended way to change the sessions security mode is to use the corresponding AVP package. Also, the commands that you ran will disable not only dual authentication but also the secure session features. This leaves your system vulnerable to published CVEs.
Most customers will likely want "Authenticated/Single" (if they do not have any 7.1 or older clients) or "Mixed/Single" (if they have 7.1 or older clients which do not support secure sessions).
pcbureau
3 Posts
0
August 25th, 2017 07:00
Great, thank you !