Configuring VSJ for multiple domains for a web/stand alone JAVA client.
Back Ground:We have an existing Kerberos utility (developed using sun GSS API), which can be used by either web application/a standalone java based application to accept service ticket for a specific...
View ArticleSSO breaks when users come in via VPN
Hi,We're running into another issue in production. SSO (Vintela, Tomcat, AD 2003 authentication) works just fine if users access the website within their own desktops in the network. Now, when they...
View ArticleUsing VAS Apache Module on Multiple Apache instances
Hi all, - I have a Web Server configured with 2 Apache Instances, each instance running as different user and port. - I configured the VAS module for Active Directory Authentication on both instances...
View ArticleSolaris secondary group limitations (16 groups) .....
Hi,Can someone help me understand secondary-group limitations and using VAS/Samba on a Solaris host.UNIX: VAS with RC SambaNo kernel tweaks (so group limit set to 16 for NFS compat)AD:User with 64+...
View ArticleVAS login failed
Hello everyone,One of my solaris server quite often can't login. Even I had run "vastool flush", user still can't login via VAS. Some time it had prompt error when flushingvasd stoppedFlushing auth...
View ArticleAuth Services and Domain Trusts
Hi, Looking for some help and advice. I have a Active Directory that I administer and can install Auth Services into. Within this AD I have some admin users that need access to Redhat machines, all no...
View ArticleLogin using VAS only possible with userid in capital letters
Hi, I have pretty new to VAS and we have an issue on one system where we are only able to log in using our userid in capital letters. On other systems we are perfectly able to login in using small cap....
View ArticleActive Directory Attributes that Unix Clients Care About
Is there a document around attributes in active directoery that the unix client cares about? IE uses memberUid but not msSFU30PosixMember for groups...
View ArticleQAS Mac Integration - Drive Mapping Question
Hello Have a potential customer (University of Alberta) that wants to buy QAS for integrating MAC's to Active Directory and using it as SSO. But they also want to configure drive mappings as the user...
View Articlevastool flush - Loading user cache error
Does anyone have a list of the Loading User cache errors? I did a vastool flush and received the following error: Loading users cache: ..... Error while loading user cache: 16 I found some of the...
View ArticleSSO breaks when users come in via VPN
Hi,We're running into another issue in production. SSO (Vintela, Tomcat, AD 2003 authentication) works just fine if users access the website within their own desktops in the network. Now, when they...
View ArticleVASD Errors
When running vas_status.sh, I am getting this alot with version 4.1.20185:FAILURE: 721 In-consistent access control ALLOW cache What does this mean and is it fatal?Would it also be possible to get a...
View ArticleInvalid AD Groups
All, we have experienced where bad or no longer valid AD groups are in users.allow, this negates authentication across the board. Version 4.1 QAS. Is this by design? Is there a stanza in vas.conf...
View Article4.0.3 bug fixed in 4.1?
Was the bug defect 25868 resolved in QAS 4.1? error: vasd: Fixed sefgault in LDAP handler on certain group updates
View ArticleVAS & Smart Cards
does anyone here have experience with VAS and smartcards?I am going to be testing Linux with PIV CAC cards and an Omnikey reader.So far I have only gotten the Coolkey drivers to work. Maybe they are...
View Articlemod_vas_auth compilation problem
HI all,I've been trying to compile mod_auth_vas in solaris 10.It came up with the error.configure: error: vas-config not found; is vasdev installed?Googled the error,and found the solution which says...
View Articleusing vastool to perform LDAP queries
Pardon me if there is another subject related to this question already./I am a recent QAS/VAS customer, and am performing discovery and preperation to convert all AIX/Linux boxes in our environment to...
View ArticleNot seeing correct AD group membership using vastool
We have an AD group 'foo'. User Abe is added to it using AD tools. I cannot see this user in the group using vastool on Solaris. And of course the user cannot login. $ vastool list groups | grep...
View ArticleUsing VAS Apache Module on Multiple Apache instances
Hi all, - I have a Web Server configured with 2 Apache Instances, each instance running as different user and port. - I configured the VAS module for Active Directory Authentication on both instances...
View Article