Configuring VSJ for multiple domains for a web/stand alone JAVA client.
Back Ground:We have an existing Kerberos utility (developed using sun GSS API), which can be used by either web application/a standalone java based application to accept service ticket for a specific...
View ArticleVAS GSSAPI Error 851968 (gss_init_sec_context)
We are getting the major error code 851968 (& minor code 0) while using the GSS API flavor of the VAS API's on Linux x64.Our Linux machine is has vas installed (including vasdev) and is joined to...
View Articlewhy 'require' doesn't accept primary group
Hi,I having trouble allocating primary group into require field. <Directory "/here/there/"> Options Indexes FollowSymLinks AllowOverride All Order allow,deny...
View ArticleNTLM SMB issue - Could not get valid NTLM challenge from ........
I'm trying to debug an issue with NTLM failback, I have the filter configured correctly as per any other deployments.I'm able to authenticate users correctly using Kerberos, but I have noticed in the...
View Articlecross-forest authentication - failed to get ldap/ service ticket
Hi all,I'm struggling with a weird problem, I hope you can help ...We have two forests, which are trusted both ways:A.DOM (4x DC's dc1/dc2/dc3/dc4.a.dom)B.NET (4x DC's dc1/dc2/dc3/dc4.b.net)UNIX User:...
View ArticleSamba errors with Win2008 R2
Hi,Using RHEL 5.2 64-bit, VAS 3.3.2-142+Samba 3.0.33-3.7.el5; Win 2008 R2. Can you help me?# vastool statusVAS is currently joined to: localdom.comJoin command found in:...
View ArticleQAS , NFS, KRB5, SSH
Going back to previous posts where our unix admin has exported the homedirs from our netapp filer with krb security, I have picked back up the lab image, and implemented src=krb5 in the fstab.Now, when...
View ArticleNot seeing correct AD group membership using vastool
We have an AD group 'foo'. User Abe is added to it using AD tools. I cannot see this user in the group using vastool on Solaris. And of course the user cannot login. $ vastool list groups | grep...
View ArticleVAS User Group Membership Issues
Hello everybody, I have been working on this issue for awhile now, and I am having no luck.I am having an issue with Quest (VAS) authentication as user groups. I am having an issue where a user can log...
View Articlev4.1 or 4.0.3
I have a quick question. I would like to upgrade our UNIX components to QAS v4.1 from 3.5.2.12. While the company is considering upgrading to 4.1, we are currently at 4.0.3 in AD. If i go ahead to do...
View ArticleQAS Mac Integration - Drive Mapping Question
Hello Have a potential customer (University of Alberta) that wants to buy QAS for integrating MAC's to Active Directory and using it as SSO. But they also want to configure drive mappings as the user...
View Articleproblem of vastool user checklogin
Hi experts!I am newbie for VAS.After installation of VAS 3.5 on both server(windows server 2003) and client(redhat5.2) according to the manual,I failed to login the linux client using a Unix enabled...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View ArticleAccount Validation Failed - Rejecting User
I have installed the quest-samba-3.0.25a_q213 rpm's under fedora core 7, followed the installation instructions running and ran the /opt/quest/bin/vas-samba-config , all worked fine.#...
View ArticleClient-LDAP-Authentification onto AD via VASPROXYD
Hello I´m new here. I have serveral problems to configure the vasproxyd.It should be used to authenticate Ubuntu-Clients via this proxy onto Windows AD.And there are a few questions:DoI have to install...
View ArticleUnlock AD Entry via Vastool & Keytab
I have a number of lightly used systems which periodically get locked out of Active Directory (I'm not certain the cause, perhaps they're not changing their password quick enough). Anyways, I was...
View Article4.0.3 bug fixed in 4.1?
Was the bug defect 25868 resolved in QAS 4.1? error: vasd: Fixed sefgault in LDAP handler on certain group updates
View ArticleSudo - unable to pkgadd on solaris 8
Greetings,I'm trying to install the quest sudo package on a few solaris 8 severs and get the following error message:# pkgadd -d QSFTsudo-1.6.8p12q93-sol26-sparc.pkg The following packages are...
View ArticleQAS uidnumber generation
We use ActiveRoles and Authentication Services to administer UNIX user attributes and our UNIX admins are having troubles with uidnumber re-use. For example a uidnumber assigned to a previous user that...
View ArticleCould not resolve KDC error
I am very new to the QSJ. Below is part of my web.xml and the error I got.Could anyone please tell me where I have it...
View Article