Single Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View ArticleKerberos Support in 4.1
Can you tell us what Kerberos encryption types the QAS client supports? We would like to see the AES128-HMAC-SHA1 and AES256-HMAC-SHA1 supported. The MAN page tells us the defaults, but does not list...
View ArticleGranting access to Samba for a Windows Computer account
I have scheduled tasks on Windows domain members that operate under the LocalSystem context. My experience in having these tasks write to shares on Windows servers, is that it works correctly showing...
View ArticleAccount Validation Failed - Rejecting User
I have installed the quest-samba-3.0.25a_q213 rpm's under fedora core 7, followed the installation instructions running and ran the /opt/quest/bin/vas-samba-config , all worked fine.#...
View ArticleVSJ could not authorize the request
When deploying the code to the test environment, the application fails with the following error. I am not too sure what else need to be changed from the configuration to make it works.The code works...
View Articleorg.ietf.jgss.GSSException, Channel binding mismatch
I am getting this Exception when I am trying to do SPNEGO on IE8 over HTTPS. It works fine for CHROME of FIREFOX.com.wedgetail.idm.sso.ProtocolException:...
View ArticleConfigure VAS / Kerberos for multihomed machines and/or Veritas Clusters
A client's site protects critical application servers and databases with Veritas Cluster in an active-standby setting. To access the active node with ssh, the Administrator typically uses the service...
View ArticleNot seeing correct AD group membership using vastool
We have an AD group 'foo'. User Abe is added to it using AD tools. I cannot see this user in the group using vastool on Solaris. And of course the user cannot login. $ vastool list groups | grep...
View Articleusing vastool to perform LDAP queries
Pardon me if there is another subject related to this question already./I am a recent QAS/VAS customer, and am performing discovery and preperation to convert all AIX/Linux boxes in our environment to...
View Articleproblem of vastool user checklogin
Hi experts!I am newbie for VAS.After installation of VAS 3.5 on both server(windows server 2003) and client(redhat5.2) according to the manual,I failed to login the linux client using a Unix enabled...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View ArticleVSJ could not authorize the request
When deploying the code to the test environment, the application fails with the following error. I am not too sure what else need to be changed from the configuration to make it works.The code works...
View ArticleVAS and UID conflict
Question,What is the scope of UID conflict check.I have a requirement where uid conflict is common in AD. UID with in allowed users in a host is unique. Still vas fails on nss calls ( vastool nss...
View Articlevasd won't stop
On a couple AIX 5.3 servers (running DB2), the vasd daemons cannot be stopped by using "/etc/rc.d/init.d/vasd stop". Instead, I have to "kill" the processes in order for them to stop.vasd reports...
View Articlevas_ipc_connect: Error 13 calling connect (Permission denied)
Hi all,I'm having a strange issue with Authentication Services.The installation was apparently fine but where I enable an AD user to login on a joined Linux sistem, I log this stuffay 8 11:50:46...
View ArticleMAV - forest trusts and external trusts
Hope you can help.I am new to this subject and we have an existing system using mod_auth_vas on apache 2.2 which authenticates successfully with domain and forest trusts. However we some older AD...
View ArticleSamba errors with Win2008 R2
Hi,Using RHEL 5.2 64-bit, VAS 3.3.2-142+Samba 3.0.33-3.7.el5; Win 2008 R2. Can you help me?# vastool statusVAS is currently joined to: localdom.comJoin command found in:...
View ArticleQAS , NFS, KRB5, SSH
Going back to previous posts where our unix admin has exported the homedirs from our netapp filer with krb security, I have picked back up the lab image, and implemented src=krb5 in the fstab.Now, when...
View ArticleNIS Different than QAS
Greetings. I am running 4.0.3-91, oocaionally finding that vastool list users reflects valid user shell. Any NIS calls such as ypcat passwd same user sometimes reflects /bin/false for the shell. A...
View Article