Not seeing correct AD group membership using vastool
We have an AD group 'foo'. User Abe is added to it using AD tools. I cannot see this user in the group using vastool on Solaris. And of course the user cannot login. $ vastool list groups | grep...
View ArticleStuck with kerberos authentication to Sharepoint
I have to connect to MS IIS server using SPNEGO token with Kerberos ticket inside, exactly as Internet Explorer does it.If I use java GSSManager.initiateContext() it does request tickets with incorrect...
View Articlemod_auth_vas Solaris 9 with sunfreeware build Apache 2.2.12 mod load issue
Trying on Solaris 9 hosts with Apache 2.2.12 Modified httpd.conf with below lines.LoadModule auth_vas_module modules/mod_auth_vas.so copied the mod_auth_vas.so to /usr/local/apache2/modules dir.The...
View ArticleI am getting page moved 302 error from Ajax call
By enabling logging, I see that authentication info is not found in the cache, when AJAX call is made, so vsj java filter is redirecting for authentication token. User is already authenticated and...
View Articlewyse T50 problem with key "." layout pt-BR keyboard ABNT2
I'm using Wyse T50 with brazilian ABNT2 keyboard(pt-BR) and the key "."(point) in numeric keyboard does work inside rdpclient. It works fine with console and other apps outside rdpclient but not...
View ArticleAlternate way to supply vsj properties
We are trying to use the vsj servlet filter in one of the vendor supplied web application, where we can not include vsj-federation.properties file as part of the deployments.Is there alternate way of...
View ArticleUsing VAS Apache Module on Multiple Apache instances
Hi all, - I have a Web Server configured with 2 Apache Instances, each instance running as different user and port. - I configured the VAS module for Active Directory Authentication on both instances...
View ArticleUsing Cached Kerberos Ticket to Authenticate SMB Share
I am using Quest Authentication Services to integrate my Linux systems with our lab domain. I want to use the cached kerberos tickets to authenticate without providing a password when mounting an...
View ArticleSmartCard, OS X and QAS
Hi all. I'm currently looking at adding Macs to our Active Directory using QAS. Our users all use SmartCards to authenticate, and getting that working in OS X is the primary reason that I'm looking at...
View ArticleAuth Services and Domain Trusts
Hi, Looking for some help and advice. I have a Active Directory that I administer and can install Auth Services into. Within this AD I have some admin users that need access to Redhat machines, all no...
View ArticleCreate pre-auth computer object with vastool
Hi, I need to be able to create computer objects with vastool instead of being forced to log in to a windows server, run a vbs, and then drag'n'drop the object to the correct OU (OU varies alot).It...
View ArticleQAS and FileVault on OS X
Is there a way to use FileVault on OS X Mountain Lion with QAS? I mean so that the AD user can be selected during boot for the FileVault authentication.Thanks,Nils
View ArticleSupport for apache httpd 2.4?
Do you know if mod_auth_vas will work with Apache httpd 2.4? Or if there is any intention to support this, and if so what time frame this version is likely to be supported in?Thanks,Paul
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View Articlewhy?
HTTP Status 500 - com.wedgetail.idm.sso.ntlm.NtlmException: No servers available in AD domain example.com for NTLM authentication
View ArticleVAS error "Unknown error 851968"
Hi.I configured Oracle iAS apache to use mod_auth_vasI have added to httpd.conf:LoadModule auth_vas_module libexec/mod_auth_vas.soAuthVasServerPrincipal...
View ArticleUsing secondary groups for sudo roles in AIX
Hi, We are using AIX 5.3 and using QAS 3.5. We have not tested "Quest SUDO" and so we are NOT using that as of now. We are finding that we cannot use sudo rules for secondary unix groups. It...
View ArticleStuck with kerberos authentication to Sharepoint
I have to connect to MS IIS server using SPNEGO token with Kerberos ticket inside, exactly as Internet Explorer does it.If I use java GSSManager.initiateContext() it does request tickets with incorrect...
View ArticleUsing vendor SSH tools with QAS 4.0.3
Hi,Since Jul. 17 2012, Quest-OpenSSH is no longer being maintained by Quest Software. I have followed the instructions on how to configure AD SSO on Linux but SSO does not work, I keep getting prompted...
View Articlequest-openssh-4.7p1_q1.217-1.rhel5.x86_64.rpm
there appears not to be a quest-openssh-4.7p1_q1.217-1.rhel5.x86_64.rpm although ther appears to be a quest-openssh-4.7p1_q1.217-1.rhel5.i386.rpm. was unable to crete rpm's from source.
View Article