2 Apache instances running with different Service Account
Hi all, I;m having trouble with on of 2 Apache instances. The VHOST seems to take well the HTTP.keytab and Server Principal configuration at the startup of the Apache Service.But when the first web...
View ArticleQAS and NTLMV2
We're getting ready to switch over to NTLMv2 exclusively in the AD world ... are there any negatie implications for a mixed deployment of mostly QAS 4X - with a few 3X stragglers in the mix?
View ArticleVAS User Group Membership Issues
Hello everybody, I have been working on this issue for awhile now, and I am having no luck.I am having an issue with Quest (VAS) authentication as user groups. I am having an issue where a user can log...
View Articlevastool flush - Loading user cache error
Does anyone have a list of the Loading User cache errors? I did a vastool flush and received the following error: Loading users cache: ..... Error while loading user cache: 16 I found some of the...
View Articlev4.1 or 4.0.3
I have a quick question. I would like to upgrade our UNIX components to QAS v4.1 from 3.5.2.12. While the company is considering upgrading to 4.1, we are currently at 4.0.3 in AD. If i go ahead to do...
View ArticleUnlock AD Entry via Vastool & Keytab
I have a number of lightly used systems which periodically get locked out of Active Directory (I'm not certain the cause, perhaps they're not changing their password quick enough). Anyways, I was...
View ArticleUsing VAS Apache Module on Multiple Apache instances
Hi all, - I have a Web Server configured with 2 Apache Instances, each instance running as different user and port. - I configured the VAS module for Active Directory Authentication on both instances...
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleNot seeing correct AD group membership using vastool
We have an AD group 'foo'. User Abe is added to it using AD tools. I cannot see this user in the group using vastool on Solaris. And of course the user cannot login. $ vastool list groups | grep...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleKerberos SSO with 1 way Trust
I had configured a Kerberos SSO with 1way trust between two domain... But on logging in i am getting the following exception...[DEBUG] Thu Oct 25 02:56:04 PDT 2012 jcsi.kerberos: resetting...
View Articleusing vastool to perform LDAP queries
Pardon me if there is another subject related to this question already./I am a recent QAS/VAS customer, and am performing discovery and preperation to convert all AIX/Linux boxes in our environment to...
View ArticleQAS uidnumber generation
We use ActiveRoles and Authentication Services to administer UNIX user attributes and our UNIX admins are having troubles with uidnumber re-use. For example a uidnumber assigned to a previous user that...
View Articlevas library upgrade caused sshd to dump core
We build our ssh package using vintela supplied source package. (we do apply a small patch on top of the vas patch to openssh, but I don't think this is related here). Our sshd package was built...
View ArticleHTTP Status 500 - com.wedgetail.idm.sso.ntlm.NtlmException: NTLM token is T
removedMessage was edited by: MarkBarc
View ArticleKerberos Error: Message Stream modified
Hi,I'm using SSO with BOXIR2 that use VSJ,the SSO is working fine until someday SSO is stop with below error messages:So how to fix this kinda error?5609 http-8080-Processor25 ERROR...
View ArticleLocal/Remote user issue with db2_sys-auth
If I connect to DB2 without specifying "user <username>", I can connect to DB2 successfully. If I connect with "user <username>", I am getting "PASSWORD EXPIRED". See...
View Article2 Apache instances running with different Service Account
Hi all, I;m having trouble with on of 2 Apache instances. The VHOST seems to take well the HTTP.keytab and Server Principal configuration at the startup of the Apache Service.But when the first web...
View Article