Authentication Services - Knowledge Base

Reset
  • Please select
    • More...
  • Please select
  • Please select
    • More...
Displaying 1-25 of 2004 Sort By Last Updated
Does PM for Sudo Support Cross Forest Trusts (157811)

Does PM for Sudo support cross forest one and two way trusts? PM for Sudo uses local nss. It isn't AD aware at all and therefore does not support trusts. Authentication Services handles all of the cross forest trusts. Then it's a matter of users matching the sudoers entry. ...

Product(s): Privilege Manager for Sudo, Authentication Services
Last Updated On: 9/1/2015
(0 Ratings)
Cron not working with AD user.Cron job no longer runs (14925)

The cron job no longer runs. The cron job is not working with AD user. The cron job was using a local user but then was migrated into Active Directory as a VAS user. Ensure that the cron is configured to use pam by issuing the ...

Product(s): Authentication Services
Last Updated On: 8/28/2015
(0 Ratings) 909 views
ldapsearch command is unable to perform LDAP queries against vasproxy (157699)

After setting up vasproxy on a system the ldapsearch command is unable to perform LDAP queries. The following error message is reported: # ldapsearch -x -h 127.0.0.1:10000 -b "dc=domain,dc=com". Failed to obtain a bound ...

Product(s): Authentication Services
Last Updated On: 8/28/2015
(0 Ratings)
Creating a Keytab and account for mod_auth_vas without using a priviledged AD account on Linux/Unix (77306)

Creating a Keytab and account for mod_auth_vas without using a priviledged AD account on Linux/Unix. METHOD 1 1. Ask the AD Administrator to create a user account similar to the one below. Replacing yourdomain, and yourhostname. ...

Product(s): Authentication Services
Last Updated On: 8/26/2015
(0 Ratings) 2569 views
vastool status reports FAILURE: 702 QAS does not have any valid licenses available. How to install or add Authentication Services' licenses. License expired. (104286)

vastool status reports FAILURE: 702 QAS does not have any valid licenses available or no license installed. The below article describes how to install an Authentication Services ' license. vastool license -q reports: All licenses expired. ...

Product(s): Authentication Services
Last Updated On: 8/21/2015
(1 Ratings) 1828 views
Authentication Services enabled AD accounts cannot be put in AIX local groups (90952)

Authentication Services enabled AD accounts cannot be put in AIX local groups. Product Defect: 28308. * LAM: LAM module now uses the same interface as the getgrset. This means group. memberships through lsuser -a groupsids ...

Product(s): Authentication Services
Last Updated On: 8/20/2015
(0 Ratings) 1152 views
Mac OS X Yosemite support (134909)

Mac OS X Yosemite 10.10 was released mid October 2014, when will there be support for Authentication Services? Yes, MAC 10.10 is supported on Authentication Services 4.1.0.21518 and up. Please see the following link ...

Product(s): Authentication Services
Last Updated On: 8/19/2015
(0 Ratings) 1347 views
Vastool status error "FAILURE: 721 In-consistent access control ALLOW cache (92364)

When running vastool status you receive the error: FAILURE: 721 In-consistent access control ALLOW cache, check syslog for exact entry". The failure 721 means the number of users.allow enteries and the number of access_control database entries do not match. ...

Product(s): Authentication Services
Last Updated On: 8/19/2015
(0 Ratings) 6669 views
Where is the supported version timeline for Authentication Services? When is the end of life or end of support for Authentication Services? (129236)

This article is to point you to the product lifecycle. What is the date when support for a particular version of the product will end? When is the end of life for Authentication Services? When is the end of support date for Authentication Services? ...

Product(s): Authentication Services
Last Updated On: 8/18/2015
(1 Ratings) 656 views
Group policy does not change screensaver in Mac OS 10.9 (126070)

The Mac OS X group policy for setting the client's screen saver no longer works in Mac OS 10.9. In Mac OS 10.9 some of the group polices no longer work, defect ID 362850 has been created to track the progress of this issue. STATUS. ...

Product(s): Authentication Services
Last Updated On: 8/14/2015
(0 Ratings) 64 views
Video - How to setup access control ? (103890)

How to setup access control ? 480 X 270 player for the Support Link Solution pages.

Product(s): Authentication Services
Last Updated On: 8/11/2015
(2 Ratings) 1056 views
FAQs on Authentication Services time synchronization or clock skew too great message (31756)

How does time synchronization work? What does vasd check to make sure that the unix host is in time sync? The system clock of a client machine should be roughly synchronized with the system clock of the Active Directory (AD) Domain Controller. ...

Product(s): Authentication Services
Last Updated On: 8/7/2015
(0 Ratings) 1790 views
How to troubleshoot user cannot login ? Authentication fails. Unable to login. (106769)

This article is to provide commands to help diagnose problems with AD authentication on the QAS client. User is unable to login. Authentication fails for users. User or users cannot login or logon. Won't allow login. 1 - Can you list the user ? ...

Product(s): Authentication Services
Last Updated On: 8/5/2015
(5 Ratings) 6031 views
How does Quest Authentication Services encrypt data?  What encryption does QAS use? (57421)

How does QAS encrypt data on the network? What encryption does QAS use? Authentication QAS uses the same high-security Kerberos authentication that Windows clients use. QAS use the highest encryption that is available from the Domain Controllers. ...

Product(s): Authentication Services
Last Updated On: 7/23/2015
(0 Ratings) 1549 views
How to configure kerberos applications with Authentication Services ? (107378)

How to configure kerberos app with Authentication Services ? RESOLUTION 1: Directly symlink /etc/krb5.conf to /etc/opt/quest/ vas/vas.conf. # mv /etc/krb5.conf /etc/krb5.conf.orig. # ln -s /etc/opt/quest/vas/vas.conf /etc/krb5.conf. RESOLUTION 2: ...

Product(s): Authentication Services
Last Updated On: 7/23/2015
(0 Ratings) 713 views
What does "vastool merge" do? (30827)

Sometimes, applications (mostly legacy ones) will require the existence of user or group entries in the local files (/etc/passwd and /etc/group) in order to properly grant access or permissions to users. In order to assist users in such scenarios, you can use "vastool merge". ...

Product(s): Authentication Services
Last Updated On: 7/22/2015
(0 Ratings) 1434 views
What to provide when opening a new Service Request for Authentication Services? (138529)

This article is about what to collect and include when opening up a support case or Service Request (SR) for Authentication Services. When opening a new SR for Authentication Services what preliminary data can be collected to aid in the early investigation of the issue? ...

Product(s): Authentication Services
Last Updated On: 7/10/2015
(0 Ratings) 624 views
Can MMC snapin extensions for ADUC be installed without installing QAS Control Center? (135423)

The server used by Active Directory administrators does not have QAS Control Center installed so they cannot see the "Unix" tabs in Active Directory Users and Computers (ADUC). Can the MMC snapin extensions for ADUC be installed without installing QAS Control Center? ...

Product(s): Authentication Services
Last Updated On: 7/10/2015
(0 Ratings) 827 views
How to set minimum UID to be assigned ? or Is there a parameter or setting to alter the start UID? (17845)

When using the "Generate Unique ID" on the UNIX tab (from the "Properties" of a user account within Active Directory Users and Computers), how to set a minimum UID. Is there a parameter to set somewhere that would alter the starting UID number for all AD logins? ...

Product(s): Authentication Services
Last Updated On: 7/10/2015
(0 Ratings) 1248 views
vastool join or create fails: "Insufficent access to complete operation" Or What right or permission are required to join the domain or create a group? (128214)

What rights are required in Active Directory in order to join the client host to the domain? Doing one of the below example commands results in the below error: /opt/quest/bin/vastool -u user1 join -f yourdomain.com. /opt/quest ...

Product(s): Authentication Services
Last Updated On: 7/9/2015
(0 Ratings) 943 views
Authentication Services 4.1 Maintenance Fix changelog and download link. 4.1 Latest Release (116643)

----- Authentication Services 4.1 Maintenance Fix Release Notes -----. This is a Maintenance Fix Release for Authentication Services 4.1. ...

Product(s): Authentication Services
Last Updated On: 7/9/2015
(1 Ratings) 6539 views
MCU error: could not run id as another user (111647)

Installing QAS client through MCU, receiving error: could not run 'id' as another user. Verfy the elevation command, username and password and try again. /tmp directory is not executable. It is mounted with the nosuid and noexec flag. ...

Product(s): Authentication Services
Last Updated On: 7/7/2015
(0 Ratings) 981 views
Connection timed out - intermittent failures authenticating on high load system (131638)

On a busy system there are intermittent login failures. Syslog may show messages such as the following from vas_ipc_recv: "Failed to receive request, result=78, error=Connection timed out". or. "connection bailed during recv ...

Product(s): Authentication Services
Last Updated On: 7/3/2015
(0 Ratings) 699 views
What does a vastool flush do? (98229)

What does a vastool flush do? What happens during a flush? How does Authentication Services interact with Active Directory? How does the cache work? vastool flush goes out to Active Directory and reloads the cache. It caches ...

Product(s): Authentication Services
Last Updated On: 7/3/2015
(0 Ratings) 5251 views
How to enable debug on Quest One Management Console for Unix (MCU) ? (87741)

How to enable debug on Managament Console for Unix (MCU) ? Troubleshooting MCU problems or errors, how to capture more information about what is happening? To enable the debug log. 1. Stop the Quest One Management Console for Unix service. ...

Product(s): Authentication Services, Privilege Manager for Unix, Privilege Manager...
Last Updated On: 7/3/2015
(0 Ratings) 3374 views
1 2 3 4 5 6 7 8 9 10 Next
Request or Create a KB Article »