Support for apache httpd 2.4?
Do you know if mod_auth_vas will work with Apache httpd 2.4? Or if there is any intention to support this, and if so what time frame this version is likely to be supported in?Thanks,Paul
View ArticleVSJ could not authorize the request
When deploying the code to the test environment, the application fails with the following error. I am not too sure what else need to be changed from the configuration to make it works.The code works...
View ArticleSingle Sign-On for Java 7 Not working
Hi, We have been using winSSPI.dll on client side from 3.2 package. This dll is not working anymore in JDK 7. The exception trace as follows : [DEBUG] Mon Aug 26 14:30:10 CEST 2013 jcsi.kerberos:...
View ArticleCannot load license
HelloWe configured the license file as classpath variable:%WLS_HOME%\server\ext\vsj_32\vsj-license.jarIf we try to test VSJ by calling the SimpleServlets "hello" or "auth" Url we get this...
View ArticleQAS uidnumber generation
We use ActiveRoles and Authentication Services to administer UNIX user attributes and our UNIX admins are having troubles with uidnumber re-use. For example a uidnumber assigned to a previous user that...
View ArticleConfiguring VSJ for multiple domains for a web/stand alone JAVA client.
Back Ground:We have an existing Kerberos utility (developed using sun GSS API), which can be used by either web application/a standalone java based application to accept service ticket for a specific...
View ArticleQAS and NTLMV2
We're getting ready to switch over to NTLMv2 exclusively in the AD world ... are there any negatie implications for a mixed deployment of mostly QAS 4X - with a few 3X stragglers in the mix?
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleInvalid AD Groups
All, we have experienced where bad or no longer valid AD groups are in users.allow, this negates authentication across the board. Version 4.1 QAS. Is this by design? Is there a stanza in vas.conf...
View ArticleActive Directory Attributes that Unix Clients Care About
Is there a document around attributes in active directoery that the unix client cares about? IE uses memberUid but not msSFU30PosixMember for groups...
View Article4.0.3 bug fixed in 4.1?
Was the bug defect 25868 resolved in QAS 4.1? error: vasd: Fixed sefgault in LDAP handler on certain group updates
View ArticleVAS+RHEL5+NFS
Hey all -As the subject suggests, I'm trying to use VAS+RHEL5+NFS, and I'm running into an issues with rpcsvcgssd on the NFS server. It fails to start with the following error:Starting RPC svcgssd:...
View ArticleNFSv4 with KRB5 via VAS on Linux
I've followed the the Solaris guide "http://rc.quest.com/topics/howto/nfs/solaris.php".I've got two hosts nfsserver.domain.com and nfsclient.domain.com. Both running RHEL5.5 x86_64.I've exported my...
View ArticleUsing VAS Apache Module on Multiple Apache instances
Hi all, - I have a Web Server configured with 2 Apache Instances, each instance running as different user and port. - I configured the VAS module for Active Directory Authentication on both instances...
View Articlevastool flush - Loading user cache error
Does anyone have a list of the Loading User cache errors? I did a vastool flush and received the following error: Loading users cache: ..... Error while loading user cache: 16 I found some of the...
View ArticleWrong principal in request
Hi, I am having problems with MAV for only some users. All users in the same domain and accessing the same server with the same URL. For these problem users, hey receive a 401 error and "Wrong...
View ArticleQAS and NTLMV2
We're getting ready to switch over to NTLMv2 exclusively in the AD world ... are there any negatie implications for a mixed deployment of mostly QAS 4X - with a few 3X stragglers in the mix?
View ArticleVAS and NFS
If you want Unix machines to access Windows servers, you're best bet is going to be Samba. Samba clients allow unix machines to "see" NTFS shares, and Samba servers (on unix) allow windows machines to...
View ArticleUsing Active Directory aliases - CNAME
I have a machine with a NetBIOS name of devmgr02. It has a name resolvable to devmgr02.example.com. I also have a host alias for this machine called dev.example.com. This is being handled by Active...
View Article