How is PAM determining the availability of the EFS/S3 driver

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

How is PAM determining the availability of the share driver?

 

Environment

Release : 4.1

Cause

For session recordings or database backup we need a share folder where to place the files, the question is how PAM checks the communication with this share.

Resolution

When trying to assess availability of the mount, PAM creates a file named gibberesh, then it reads that file to confirm it has the required access.Then it deletes it.

The gibberesh file needs to be properly removed from the share. Once the file is actually removed PAM should be able to write to that folder again.

Each node is constantly checking for availability and sometimes those checks conflict. The contents of the gibberesh file are unique and when an appliance finds a gibberesh file that it doesn't expect it will be considered down just as if it fails to read/write.

This is why we recommended putting at least your DB Backup on a different path, so that way there would be less of a chance of conflict.