How can I forward tgt to Server
Hi, I can forward tgt for current logon user using DelegateCredentials setto true. How can I forward the tgts for other username and password.Thanks,Megha
View ArticleVAS cache stopped updates - Solaris 10 running VAS Version 3.3.2.133
Dear UNIX-VAS colleagues,The password database of one of my VAS client machines is out of date. If I add a new user in A.D. thisnew account do not appear to this client machine (ypmatch <userid>...
View ArticleSSO with native Solaris 10 sshd
Has anybody managed to propertly set this up?I got everything working except SSO.Any pointers to docs etc. would be apreciated.Regardserwin
View ArticleQAS , NFS, KRB5, SSH
Going back to previous posts where our unix admin has exported the homedirs from our netapp filer with krb security, I have picked back up the lab image, and implemented src=krb5 in the fstab.Now, when...
View ArticlePAM error: PAM unable to dlopen(/lib/security/pam_vas3.so)
Hello,In recent days, a server is installed QAS will not let me login.checking logs in /var/log/messages, the following appears:Sep 7 9:54:22 mutis2 su: PAM Unable to dlopen (/...
View ArticleKerberos SSO with 1 way Trust
I had configured a Kerberos SSO with 1way trust between two domain... But on logging in i am getting the following exception...[DEBUG] Thu Oct 25 02:56:04 PDT 2012 jcsi.kerberos: resetting...
View ArticleVAS-Authentication without HTTP/ -Service-Account?
Hi everybody!I am trying to bring up VAS authentication for one of our webservers. The machine has been joined to our AD previously and unix user authentication is working fine.Unfortunately our rights...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View Article2 Apache instances running with different Service Account
Hi all, I;m having trouble with on of 2 Apache instances. The VHOST seems to take well the HTTP.keytab and Server Principal configuration at the startup of the Apache Service.But when the first web...
View ArticleQAS and NTLMV2
We're getting ready to switch over to NTLMv2 exclusively in the AD world ... are there any negatie implications for a mixed deployment of mostly QAS 4X - with a few 3X stragglers in the mix?
View ArticleVAS User Group Membership Issues
Hello everybody, I have been working on this issue for awhile now, and I am having no luck.I am having an issue with Quest (VAS) authentication as user groups. I am having an issue where a user can log...
View Articlev4.1 or 4.0.3
I have a quick question. I would like to upgrade our UNIX components to QAS v4.1 from 3.5.2.12. While the company is considering upgrading to 4.1, we are currently at 4.0.3 in AD. If i go ahead to do...
View ArticleIBM DB2 LDAP Plugin and Vintela DB2 Security Plugin
What is the difference between the DB2 LDAP Plug in provided by IBM and DB2 Security Plug in for LDAP from Vintela? Are they the same product? We just converted our IBM SP MPP server from NIS to VAS...
View Articlevastool flush - Loading user cache error
Does anyone have a list of the Loading User cache errors? I did a vastool flush and received the following error: Loading users cache: ..... Error while loading user cache: 16 I found some of the...
View ArticleAccount Validation Failed - Rejecting User
I have installed the quest-samba-3.0.25a_q213 rpm's under fedora core 7, followed the installation instructions running and ran the /opt/quest/bin/vas-samba-config , all worked fine.#...
View ArticleNTLM SMB issue - Could not get valid NTLM challenge from ........
I'm trying to debug an issue with NTLM failback, I have the filter configured correctly as per any other deployments.I'm able to authenticate users correctly using Kerberos, but I have noticed in the...
View ArticleCrash when authenticating
I'm seeing the following crash during authentication:glibc detected *** /usr/java/jdk1.6.0_25/bin/java: free(): invalid pointer: 0x0000000041e33450 ***======= Backtrace:...
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleVintela cache and username lookup
We've got a student user who is now temporary staff and has had her AD account moved into a different OU. In doing so she now cannot access the MAV protected website.I understand that the Vintela cache...
View Article