Zurück
-
Titel
AD Schema change causing intermittent authentication failures - Flushing caches due to detected change in schema settings -
Beschreibung
After an AD schema change, servers are experiencing intermittent login issues where users are getting access denied several times.
Seen in authlog :
vasd[#####]: directory_config_interval: Successfully flushed caches after schema changesshd: PAM: pam_authenticate: error Conversation failure -
Ursache
This is being caused because currently when a schema change is detected a basic flush is run however it's only a flush of users and groups not override processing or nested. -
Lösung
If you run a flush on the system it will clean up this issue. "/opt/quest/bin/vastool flush".
You can also set the following in "/etc/opt/quest/vas/vas.conf" to prevent this from occurring going forward:
[vasd]
configuration-refresh-interval = 0