Configuring VSJ for multiple domains for a web/stand alone JAVA client.
Back Ground:We have an existing Kerberos utility (developed using sun GSS API), which can be used by either web application/a standalone java based application to accept service ticket for a specific...
View ArticleUse of VSJ behind load balancer
Hi everyone.What is the correct use of SPN, keytab, idm.princ etc when using VSJ on a server, where the server is accessed throug a load balancer through a different URL?example:Url to app server:...
View ArticleOverwritten pam.conf and Sudo users
I had two customer questions: 1. The customer asked that in the past when they apply Sun Solaris O/S patches, sometimes the pam.conf file gets overwritten.In the case where VAS is installed and an O/S...
View ArticleExpired accounts still show in 'vastool list users-allowed'
Does anyone know how to make it so VAS doesn't show expired accounts in 'vastool list users-allowed'? I know that the user can't log on even though it shows up there, but it causes a problem for...
View ArticleFATAL ERROR: Server unexpectedly closed network connection in using Plink
Hi,Could any one please let me know why this error is occuring randomly while using Plink? Some days it works fine and suddenly it stops to work with this error message.FATAL ERROR: Server unexpectedly...
View ArticleFAILURE: 608 Pam not configured for VAS
Hi,We managed to integrate RHEL5's SAMBA with Q|VAS on a server, "all" was good, however, last Thursday (Dec 3, 2009) there have been errors logged in /var/log/messages, please see the errors below....
View ArticleQAS uidnumber generation
We use ActiveRoles and Authentication Services to administer UNIX user attributes and our UNIX admins are having troubles with uidnumber re-use. For example a uidnumber assigned to a previous user that...
View ArticleVSJ could not authorize the request
When deploying the code to the test environment, the application fails with the following error. I am not too sure what else need to be changed from the configuration to make it works.The code works...
View ArticleVAS GSSAPI Error 851968 (gss_init_sec_context)
We are getting the major error code 851968 (& minor code 0) while using the GSS API flavor of the VAS API's on Linux x64.Our Linux machine is has vas installed (including vasdev) and is joined to...
View Articleoverride file not overriding
I am trying to place an override file on one system for the group admin but when I log in I am still given the default home & shell.vas.conf:[vasd]timesync-interval = 0workstation-mode = false#...
View ArticleSamba errors with Win2008 R2
Hi,Using RHEL 5.2 64-bit, VAS 3.3.2-142+Samba 3.0.33-3.7.el5; Win 2008 R2. Can you help me?# vastool statusVAS is currently joined to: localdom.comJoin command found in:...
View ArticleQAS - Using Environment variable in GPO users.allow confilguration
Hi, We have QAS 3.5. I'm planning on using Macros to control access to Unix Systems using windows groups. This method is described in...
View Articlequest-openssh.5.2.1.13
Hello Quest support,I've downloaded the latest version (5.2.1.13) of Quest openssh for AIX 5.3, available on:http://rc.quest.com/topics/openssh/ After installing it on AIX 6.1 I cannot start the ssh...
View ArticleNTLM SMB issue - Could not get valid NTLM challenge from ........
I'm trying to debug an issue with NTLM failback, I have the filter configured correctly as per any other deployments.I'm able to authenticate users correctly using Kerberos, but I have noticed in the...
View Articleproblem of vastool user checklogin
Hi experts!I am newbie for VAS.After installation of VAS 3.5 on both server(windows server 2003) and client(redhat5.2) according to the manual,I failed to login the linux client using a Unix enabled...
View ArticleProblems with Samba after changing Root Password - Please Help
I have an installation of VAS that is running on RedHat EL 4.0. The vas portion is working ok, and with out any problems so far. I also have the Vintela version of Samba running on the system (Version...
View ArticleIntermittent NTLM 403 Error
Typically, we seeHTTP Status 403 - This server does not allow NTLM, but the client attempted NTLM anyway.as a client configuration issue. However, the client can successfully connect most of the time...
View ArticleStuck with kerberos authentication to Sharepoint
I have to connect to MS IIS server using SPNEGO token with Kerberos ticket inside, exactly as Internet Explorer does it.If I use java GSSManager.initiateContext() it does request tickets with incorrect...
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleWrong ticket encryption for W2K clients only causes VSJ to fail
Hi,I am facing the following problem.The Windows service account used for Vintela SSO is set up using "Use DES encryption for this account". The keytab is created with ktpass ... -crypto DES-CBC-MD5...
View Article