QAS and NTLMV2
We're getting ready to switch over to NTLMv2 exclusively in the AD world ... are there any negatie implications for a mixed deployment of mostly QAS 4X - with a few 3X stragglers in the mix?
View ArticleVAS User Group Membership Issues
Hello everybody, I have been working on this issue for awhile now, and I am having no luck.I am having an issue with Quest (VAS) authentication as user groups. I am having an issue where a user can log...
View Articleusing vastool to perform LDAP queries
Pardon me if there is another subject related to this question already./I am a recent QAS/VAS customer, and am performing discovery and preperation to convert all AIX/Linux boxes in our environment to...
View ArticleSegmentation fault when mod_auth_vas finds no matches
Hello,We are using mod_auth_vas.so 3.6.7 with Oracle HTTP Server which is effectively Apache 2.0. Recently, we have noticed that an Apache process is terminated with a segmentation fault in case of...
View Article4.0.3 bug fixed in 4.1?
Was the bug defect 25868 resolved in QAS 4.1? error: vasd: Fixed sefgault in LDAP handler on certain group updates
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleSupport for apache httpd 2.4?
Do you know if mod_auth_vas will work with Apache httpd 2.4? Or if there is any intention to support this, and if so what time frame this version is likely to be supported in?Thanks,Paul
View ArticleQuest SUDO with VAS V3.1 fails
Quest sudo fails with errorsudo: relocation error: sudo: undefined symbol: closefromwhen upgraded to VAS V3.1
View ArticleQAS uidnumber generation
We use ActiveRoles and Authentication Services to administer UNIX user attributes and our UNIX admins are having troubles with uidnumber re-use. For example a uidnumber assigned to a previous user that...
View ArticleDB2_sys-auth local vs AD users
This may be a simple question, but I'm not able to find the answer thus far... We are running VAS on our DB2 servers (AIX). We are going to be installing the db2_sys-auth for authentication with VAS....
View ArticleUnlock AD Entry via Vastool & Keytab
I have a number of lightly used systems which periodically get locked out of Active Directory (I'm not certain the cause, perhaps they're not changing their password quick enough). Anyways, I was...
View ArticleError: Cannot set user credentials when using rsh
I'm getting the following error:rshd 0826-828 Cannot set user credentialsWhen using rsh <host> <command> with QAS version 4.0.1 on AIX 6.1The host is patched with AIX 6100-04-00-0943Any...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View ArticleWindows SSH clients that interoperate with Quest OpenSSH
Besides PuTTY I was wondering if OpenSSH has been tested with any other windows SSH clients, and which of these support Kerberos authentication, and (if any) GSS-KEX.Specifically I am interested in...
View ArticleMultiple running processes after running vas-samba-conf
Is this normal to see after running vas-samba-conf…the multiple processes running?[root@fedora5 ~]# ps -ef | grep questroot 2789 1 0 16:04 pts/1 00:00:00 /opt/quest/sbin/vasidmapd -Froot...
View ArticleUnlock AD Entry via Vastool & Keytab
I have a number of lightly used systems which periodically get locked out of Active Directory (I'm not certain the cause, perhaps they're not changing their password quick enough). Anyways, I was...
View ArticleConfigure VAS / Kerberos for multihomed machines and/or Veritas Clusters
A client's site protects critical application servers and databases with Veritas Cluster in an active-standby setting. To access the active node with ssh, the Administrator typically uses the service...
View ArticleNeed automatic changing of HTTP service account password every X days
Hi All,The Apache mod_auth_vas module is working great for me except that every X days I have to recreate the service account because of our password expiration policy enforces that all passwords...
View ArticleSupport for apache httpd 2.4?
Do you know if mod_auth_vas will work with Apache httpd 2.4? Or if there is any intention to support this, and if so what time frame this version is likely to be supported in?Thanks,Paul
View ArticleQuest Equivalent Product
Is there a Quest product that is equivalent to CF engine? Thanks Steve
View Article