Wrong ticket encryption for W2K clients only causes VSJ to fail
Hi,I am facing the following problem.The Windows service account used for Vintela SSO is set up using "Use DES encryption for this account". The keytab is created with ktpass ... -crypto DES-CBC-MD5...
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleIBM DB2 LDAP Plugin and Vintela DB2 Security Plugin
What is the difference between the DB2 LDAP Plug in provided by IBM and DB2 Security Plug in for LDAP from Vintela? Are they the same product? We just converted our IBM SP MPP server from NIS to VAS...
View ArticleUsing VAS Apache Module on Multiple Apache instances
Hi all, - I have a Web Server configured with 2 Apache Instances, each instance running as different user and port. - I configured the VAS module for Active Directory Authentication on both instances...
View ArticleQAS uidnumber generation
We use ActiveRoles and Authentication Services to administer UNIX user attributes and our UNIX admins are having troubles with uidnumber re-use. For example a uidnumber assigned to a previous user that...
View ArticleAIX VAS NIS authentication issues
Hello All- Here's my issue, we have AIX 5.3 running NIS. We are moving our environment to VAS but we need both authentication methods while we complete the process. When VAS and ypbind are...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View Article2 Apache instances running with different Service Account
Hi all, I;m having trouble with on of 2 Apache instances. The VHOST seems to take well the HTTP.keytab and Server Principal configuration at the startup of the Apache Service.But when the first web...
View ArticleQAS and NTLMV2
We're getting ready to switch over to NTLMv2 exclusively in the AD world ... are there any negatie implications for a mixed deployment of mostly QAS 4X - with a few 3X stragglers in the mix?
View Articlev4.1 or 4.0.3
I have a quick question. I would like to upgrade our UNIX components to QAS v4.1 from 3.5.2.12. While the company is considering upgrading to 4.1, we are currently at 4.0.3 in AD. If i go ahead to do...
View ArticleVAS User Group Membership Issues
Hello everybody, I have been working on this issue for awhile now, and I am having no luck.I am having an issue with Quest (VAS) authentication as user groups. I am having an issue where a user can log...
View ArticleVAS & Printing to Windows Printers - How!?
We have an active directory network with a print server sharing printers.We have linux,mac clients who need to print to these printers, in the past I have used an LPD server on the windows print...
View ArticleGSSException when launching ejb fatclient example from VSJ-WebLogic-Edition
Hi,I downloaded the vsj-weblogic-3.2 (VSJ-WebLogic-Edition-3.2_Patch-3550). I get the exception below. I saw on a forum that the 3.3 version fix this problem. Is it so? Is the 3.3 version...
View ArticleHow setup error page
I am trying to customize an error page.In the case user enter a wrong username/password, I want to point to this error page instead of kick back to the login page.Please show me how to set this upIs...
View ArticleNTLM SMB issue - Could not get valid NTLM challenge from ........
I'm trying to debug an issue with NTLM failback, I have the filter configured correctly as per any other deployments.I'm able to authenticate users correctly using Kerberos, but I have noticed in the...
View ArticleUsing Cached Kerberos Ticket to Authenticate SMB Share
I am using Quest Authentication Services to integrate my Linux systems with our lab domain. I want to use the cached kerberos tickets to authenticate without providing a password when mounting an...
View ArticleKerberos Support in 4.1
Can you tell us what Kerberos encryption types the QAS client supports? We would like to see the AES128-HMAC-SHA1 and AES256-HMAC-SHA1 supported. The MAN page tells us the defaults, but does not list...
View ArticleStuck with kerberos authentication to Sharepoint
I have to connect to MS IIS server using SPNEGO token with Kerberos ticket inside, exactly as Internet Explorer does it.If I use java GSSManager.initiateContext() it does request tickets with incorrect...
View ArticleNot seeing correct AD group membership using vastool
We have an AD group 'foo'. User Abe is added to it using AD tools. I cannot see this user in the group using vastool on Solaris. And of course the user cannot login. $ vastool list groups | grep...
View Article