Error: PAM-CM-0473: Mounted directory is not writable.-- Unable to mount NFS drives after 4.2 upgrade

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Unable to mount NFS session recording share after 4.2.1 upgrade.   We require session recording for all auto connect sessions.    After upgrade we now get this message:

Error: PAM-CM-0473: Mounted directory is not writable.

Cause

The NetApp NFS server was not properly negotiating the security level for the connection (sec=none) specifically for the NFS 4.1 and 4.2 protocols while 4.0 and lower would negotiate just fine. The upgrade to PAM 4.2 caused our appliance to request a NFS 4.2 version  where the older version PAM was only requesting NFS 4.0.

Resolution

With the help of Netapp support the client was able to set the value of the defaults security level to system  ( sec=sys ) for this network share. This allowed PAM to connect to the share with the proper values  negotiated.