Server unable to get updated group policy:
# vgptool apply
VGP Apply Policy - CallType: REFRESH
ERROR: Unable to open GPT.INI created from network file
Unable to copy file from CIFS:\\FQDN\TO\DC
Could not connect to any server: NT_STATUS_CONNECTION_REFUSED
Caused By:
Unsupported negotiate response capabilities: NT_STATUS_NOT_SUPPORTED
Tried updating the host password:
# vastool -u host/ passwd -rk /etc/opt/quest/vas/host.keytab host/
<server> setting password for <server>...
Saving new key in keytab file: /etc/opt/quest/vas/host.keytab
ERROR: VAS_ERR_ACCESS: <server> does not have permission to set the password for<server>. The account may be locked.
Caused by:
KPASSWD_ACCESSDENIED: Access denied
ERROR: Could not modify password
Ran vas_status.sh:
# /usr/local/sec/vas_status.sh
Host: <HP-UX B.11.23 9000/800>
Date: <Tue Jul 7 16:01:05 EDT 2009>
VAS: <3.3.2.88>
Domain: <my.domain.com>
FAILURE: /etc/nsswitch.conf does not appear to be configured to use VAS.
FAILURE: Missing NSS path </usr/lib/hpux32/libnss_vas3.so.1>
WARNING: Process <9119><vasgpd> is too large <12380>
Result: <Test(s) failed> (08 seconds)
We intentionally keep VAS out of nsswitch until we've removed the local users. Has anyone seen this behavior before, and if so, how to resolve?
Thanks in advance.
# vgptool apply
VGP Apply Policy - CallType: REFRESH
ERROR: Unable to open GPT.INI created from network file
Unable to copy file from CIFS:\\FQDN\TO\DC
Could not connect to any server: NT_STATUS_CONNECTION_REFUSED
Caused By:
Unsupported negotiate response capabilities: NT_STATUS_NOT_SUPPORTED
Tried updating the host password:
# vastool -u host/ passwd -rk /etc/opt/quest/vas/host.keytab host/
<server> setting password for <server>...
Saving new key in keytab file: /etc/opt/quest/vas/host.keytab
ERROR: VAS_ERR_ACCESS: <server> does not have permission to set the password for<server>. The account may be locked.
Caused by:
KPASSWD_ACCESSDENIED: Access denied
ERROR: Could not modify password
Ran vas_status.sh:
# /usr/local/sec/vas_status.sh
Host: <HP-UX B.11.23 9000/800>
Date: <Tue Jul 7 16:01:05 EDT 2009>
VAS: <3.3.2.88>
Domain: <my.domain.com>
FAILURE: /etc/nsswitch.conf does not appear to be configured to use VAS.
FAILURE: Missing NSS path </usr/lib/hpux32/libnss_vas3.so.1>
WARNING: Process <9119><vasgpd> is too large <12380>
Result: <Test(s) failed> (08 seconds)
We intentionally keep VAS out of nsswitch until we've removed the local users. Has anyone seen this behavior before, and if so, how to resolve?
Thanks in advance.