Thanks Andreas, you gave me the right clue. Shame on me, it's in the fine manual...
https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.10/srv.common/r_techchg_allowdesauth_8110.html With IBM Spectrum® Protect Version 8.1.10, the default value of the ALLOWDESAUTH option is changed to NO. The default setting helps to enhance security by ensuring that the IBM Spectrum Protect server complies with the National Institute of Standards and Technology (NIST) SP800-131A standard. To allow the use of the Data Encryption Standard (DES) algorithm for authentication between an IBM Spectrum Protect server and a backup-archive client, you must specify a value of YES manually. Restrictions The ALLOWDESAUTH option must be set to YES for the following operations: Automatic deployment of backup-archive client versions earlier than V7.1.8 or V8.1.2 Connecting a server with a backup-archive client V6.2 or earlier -- Best regards / Cordialement / مع تحياتي Erwann SIMON ----- Mail original ----- De: "Andreas Boesler" <a.boes...@profi-ag.de> À: ADSM-L@VM.MARIST.EDU Envoyé: Jeudi 20 Août 2020 16:42:55 Objet: [ADSM-L] AW: [ADSM-L] Old clients cannot connect to 8.1.10 server Hi Erwann, perhaps you need: setopt ALLOWDESAUTH YES Kind regards, Andreas. i. A. Andreas Boesler Consultant Tel: +49 6151 8290-7780 Mobil: +49 163 8075141 Fax: +49 6151 8290-7692 E-Mail:a.boes...@profi-ag.de PROFI Engineering Systems AG Otto-Röhm-Straße 18 64293 Darmstadt PROFI Engineering Systems AG, Otto-Röhm-Str. 18, 64293 Darmstadt, Amtsgericht Darmstadt HRB 7833. Vorstandsvorsitzender: Manfred Lackner; Vorstand: Lutz Hohmann, Matthias Kohlhardt, Stefan Langhirt; Aufsichtsratsvorsitzender: Dr.-Ing. Udo Hamm. -----Ursprüngliche Nachricht----- Von: ADSM: Dist Stor Manager <ADSM-L@VM.MARIST.EDU> Im Auftrag von Erwann SIMON Gesendet: Donnerstag, 20. August 2020 16:16 An: ADSM-L@VM.MARIST.EDU Betreff: [ADSM-L] Old clients cannot connect to 8.1.10 server Hi all, I've just upgraded dome servers from 8.1.8.200 to 8.1.10 and it helped a lot by solving some issues. Anyway, some old B/A Clients cannot connect anymore : they were backing up just fine to a 8.1.8 server but they cannot connect to a 8.1.10 one. For instance : root@xxxx:/opt/tivoli/tsm/client/ba/bin# LANG=C dsmc q se IBM Tivoli Storage Manager Command Line Backup-Archive Client Interface Client Version 6, Release 2, Level 5.0 Client date/time: 08/20/20 16:08:18 (c) Copyright by IBM Corporation and other(s) 1990, 2013. All Rights Reserved. Node Name: xxxx ANS1357S Session rejected: Downlevel client code version and activity log says : ANR0428W Session 213732 for node XXXX(Linux86) refused - client is down-level with this server version. (SESSION: 213732) I've this same issue with a couple of old clients using various old versions depending of the OS version (Old Win2K or Linux distros...). Do someone encounter the same issue ? What is the minimum working level right now ? Thanks. -- Best regards / Cordialement / مع تحياتي Erwann SIMON
