Session Recording external storage cannot be mounted the Azure files
search cancel

Session Recording external storage cannot be mounted the Azure files

book

Article ID: 118457

calendar_today

Updated On:

Products

CA Privileged Access Manager - Cloakware Password Authority (PA) CA Privileged Access Manager (PAM)

Issue/Introduction



I deployed the PAM on the Azure and tried to mount the shared folder by the Azure Files Storage for the session recording. However, I could not mount it by the below error. 
 

ERROR: PAM-CM-0058 : CIFS mount operation unsuccessful. Mount point: //example.com/pam-sessionlog Hostname: example.com 


I verified that the port 445 was opened.
Also, the below errors were updated when the problem occurred.
 

Aug 9 09:44:53 capam kernel: Status code returned 0xc0000022 STATUS_ACCESS_DENIED 
Aug 9 09:44:53 capam kernel: CIFS VFS: Send error in SessSetup = -13 
Aug 9 09:44:53 capam kernel: CIFS VFS: cifs_mount failed w/return code = -13 


What is a possible cause?

Environment

CA Privileged Access Manager r3.x

Resolution

The trigger was a specific settings in the Azure files feature. The "Secure transfer required" option is located in the below. When it is enabled, the problem occurs. When it is disabled, the problem starts to work without any problem. 
 
Azure Portal ->> Storage accounts >> (specific storage account) >> Configuration in the Settings section >> "Secure transfer required" option. 


The "Secure Transfer Required" option enable usage is NOT supported as the external storage for the session recording on the r3.2.x.