Welcome, we are now Quest! Learn more about Support at Quest

Authentication Services - Knowledge Base

Filter Your Results
Search All Products

Self Service Tools
Knowledge Base
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
Featured Content
Slow Authentication with Solaris 10
QAS-VAS 4.1 Maintenance Release
Authentication Services 4.1 - Platform Support
User Cannot Login Troubleshooting
DROWN attack and MCU
Host Password Sync Issue
Support Technical Training
Contact Support
Contact Support

Search Knowledge Base by keyword

(Choose different product)



Sort By Last Updated
Displaying 1-25 of 2160
Users who are members of non-UNIX enabled groups, which are listed in the users.allow file, do not appear users-allowed list. (22867)

After performing a flush or joining VAS to the domain, if there are two groups in the /etc/opt/quest/vas/users.allow file, one UNIX-enabled and one not, "/opt/quest/bin/vastool list users-allowed" shows only the users in the Unix-enabled group. ...

Product(s): Authentication Services
Last Updated On: 3/30/2017
(0 Ratings) 1676 views
How do I get newer Group Policy Templates for Mac OSX? (114910)

How do you get newer Group Policy Templates for Mac OSX? QAS also includes support for Preference Manifest files. Preference Manifest files describe application settings you can manage centrally. Many standard Mac OS ...

Product(s): Authentication Services
Last Updated On: 3/27/2017
(0 Ratings) 1401 views
User override by group failing. ERROR: Failed, returned or signalled 3. build_useroverride_db: Unable to find user/group from entry (126722)

User override by group failing ERROR: Failed, returned or signalled 3. In the messages or syslog file you will see entries like this: build_useroverride_db: Unable to find user/group from entry GROUP will re-process in 30 seconds. CAUSE 1: ...

Product(s): Authentication Services
Last Updated On: 3/16/2017
(0 Ratings) 2478 views
How to backup Management Console for Unix (MCU) data ? (95993)

How to backup Management Console for Unix (MCU) previously known as Identity Manager for Unix (IMU) data ? We recommend you backup the Management Console for Unix (MCU) previously known as Identity Manager ...

Product(s): Privilege Manager for Unix, Authentication Services, Privilege Manager...
Last Updated On: 3/8/2017
(0 Ratings) 4053 views
vastool manpage for QAS 4 (85924)

Reference article for the vastool manpage. Name vastool — The QAS command line administration utility. Synopsis vastool [-v] [-s] [-q] [-h [command]] [-u username] [-w password] [-k keytab] [-d level] [-e level] {command [arguments] }. ...

Product(s): Authentication Services
Last Updated On: 3/6/2017
(2 Ratings) 53588 views
Existing Samba service fails after QAS is joined to Active Directory (134802)

Samba had been running without problems on a system until QAS was installed. After QAS was joined to AD the Samba service was no longer able to authenticate against AD. In their default configuration both Samba and QAS ...

Product(s): Authentication Services
Last Updated On: 3/2/2017
(0 Ratings) 1321 views
Sudo is rejecting passwords without user intervention. (63263)

Receiving the following after issuing sudo command: We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. ...

Product(s): Authentication Services, Privilege Manager for Sudo
Last Updated On: 2/24/2017
(0 Ratings) 3481 views
FAILURE: 235 Orphaned NUDN key(s), flush needed (130871)

Running a '/opt/quest/bin/vastool flush' reports the following error: FAILURE: 235 Orphaned NUDN key(s), flush needed 1) This is likely being caused by a very busy disk. When vasd writes out it calls fsync or fdatasync and if ...

Product(s): Authentication Services
Last Updated On: 2/22/2017
(0 Ratings) 2531 views
vastool join command will overwrite any settings in vas.conf that it has a flag for (98439)

vastool join command will overwrite any settings in vas.conf that it has a flag option for. Here is the list of settings that the vastool join command could override current vas.conf settings: 1 - workstation-mode load-users-from- gc. 2 - load-groups-from-gc. 3 - user-search-path. ...

Product(s): Authentication Services
Last Updated On: 2/16/2017
(0 Ratings) 2195 views
Does Quest Authentication Services (QAS) support Windows 2008 R2? (59375)

Does QAS support Windows 2008 R2? Yes, Windows 2008 R2 is supported from 3.5.1.15 onwards. GA QAS 3.5.1-9 does NOT work with Windows 2008 R2.

Product(s): Authentication Services
Last Updated On: 2/15/2017
(0 Ratings) 1317 views
Confirmation of Windows 2008 R2 upgrade requirements (77914)

We are upgrading our global Active Directory schema from Windows 2003 R2 to Windows 2008 R2 and retaining the domain controllers with version Windows 2003 standard. We want to confirm if there are prerequisites or tasks ...

Product(s): Authentication Services
Last Updated On: 2/15/2017
(0 Ratings) 324 views
Unix Account tab not appearing in ActiveRoles Server (ARS) MMC. (44398)

The Quest Authentication Services (QAS) Unix ("Unix Account") tab is not appearing when viewing user account properties in the ActiveRoles Server MMC. The tab does appear in Active Directory Users and Computers. QAS ...

Product(s): Active Roles, Authentication Services
Last Updated On: 2/14/2017
(1 Ratings) 5509 views
Cannot access samba share. How to troubleshoot samba connection issues? (102857)

Cannot access samba share. How to troubleshoot samba connection issues? 1 – QAS needs to be in a healthy state for authentication to take place. Use the following command to ensure QAS is in a healthy state: /opt/quest/bin/vastool status. ...

Product(s): Authentication Services
Last Updated On: 2/3/2017
(0 Ratings) 4780 views
How to integrate QAS and NFSv4? (125565)

This document is to describe steps done to set up NFSv4 on Ubuntu 12.10 and Authentications Services. The steps would be similiar on other operating systems as well. Two systems NFS server and client. In this example the ...

Product(s): Authentication Services
Last Updated On: 2/2/2017
(0 Ratings) 2108 views
How does mapping local users to Active Directory users work? (91951)

How does mapping local users to Active Directory users work? You can map local Unix user accounts to Active Directory users accounts. Local users retain all of their local Unix attributes such as UID Number and Login Shell ...

Product(s): Authentication Services
Last Updated On: 1/27/2017
(0 Ratings) 3383 views
How to disable selinux. vastool status reports INFO: SELinux enabled (105775)

How to disable selinux. vastool status reports INFO: SELinux enabled which could be preventing authentication. Temporarily switch off selinux: echo 0 >/selinux/enforce. To confirm run the following which will print a "0" or "1" for permissive or enforcing: cat /selinux/enforce. ...

Product(s): Authentication Services
Last Updated On: 1/27/2017
(0 Ratings) 230 views
34603 How can I use an existing Active Directory user account for this purpose (100149)

I am running an application that requires user account entries in the local passwd or/and shadow files. How can I use an existing Unix-enabled Active Directory user account for this purpose, thereby maintaining authentication against AD? a. Unix-un-enable the user in AD. ...

Product(s): Authentication Services
Last Updated On: 1/26/2017
(0 Ratings) 1425 views
Quest Authentication Services (QAS) still finding decommissioned domain controllers (115290)

There may be a situation where changes are being made in your Active Directory environment such as domain controller upgrades in which you no longer want QAS to communicate with decommissioned domain controllers. ...

Product(s): Authentication Services
Last Updated On: 1/24/2017
(1 Ratings) 2541 views
Can MMC snapin extensions for ADUC be installed without installing QAS Control Center? How to get the Unix account tab in Active Directory Users and Computers? (135423)

The server used by Active Directory administrators does not have QAS Control Center installed so they cannot see the "Unix" tabs in Active Directory Users and Computers (ADUC). Can the MMC snapin extensions for ADUC be installed without installing QAS Control Center? ...

Product(s): Authentication Services
Last Updated On: 1/19/2017
(0 Ratings) 2018 views
Using vendor SSH tools with Quest Authentication Services (82295)

If your company policy requires you to use your OS vendor's SSH tools, instead of Quest-OpenSSH, then this document will help you find which vendor-supplied tools work with Quest Authentication Services, and how to configure them. ...

Product(s): Authentication Services
Last Updated On: 1/16/2017
(0 Ratings) 1775 views
Vastool command to list Unix machine objects from a specified OU (54452)

How to list Unix machine objects from a specified OU using the /opt/quest/bin/vastool search command. These two commands will work to accomplish this task: The first one will list any kind of computer in a particular OU, Unix or Windows. ...

Product(s): Authentication Services
Last Updated On: 1/12/2017
(0 Ratings) 5027 views
How to install or upgrade the Group Policy Extensions. Missing Unix settings in Group Policy Management Server (138673)

How to install or upgrade Group Policy Management Extension. Do not see "Unix Settings" on the Group Policy Management Server. 1 - Download the latest version of Authentication Services by going to. https://support.quest. com/authentication-services/download-new-releases. ...

Product(s): Authentication Services
Last Updated On: 1/12/2017
(0 Ratings) 1727 views
Mac OS X Yosemite support (134909)

Mac OS X Yosemite 10.10 was released mid October 2014, when will there be support for Authentication Services? Yes, MAC 10.10 is supported on Authentication Services 4.1.0.21518 and up. Please see the following link ...

Product(s): Authentication Services
Last Updated On: 1/12/2017
(0 Ratings) 2435 views
vgptool error Cannot recv: NT_STATUS_REMOTE_DISCONNECT (130754)

vgptool -d5 apply shows a similar error to the below: ERROR: Unable to copy the network GPT.INI. Unable to copy file from CIFS: Could not connect to any server: NT_STATUS_CONNECTION_REFUSED. Caused By: Cannot ...

Product(s): Authentication Services
Last Updated On: 1/12/2017
(0 Ratings) 1582 views
Enhancement request for explicit error be logged for keytab failures (105100)

A service account password for a one way trust connection which that invalidated the keytab used to connect to the internal domain. We seen the following in the log but no mention of an account or keytab name: vasd[24583 ...

Product(s): Authentication Services
Last Updated On: 1/12/2017
(0 Ratings) 1918 views