-
Titre
FAILURE: 235 Orphaned NUDN key(s), flush needed -
Description
Running a '/opt/quest/bin/vastool status' reports the following error:
FAILURE: 235 Orphaned NUDN key(s), flush needed -
Cause
CAUSE 1:
This is likely being caused by a very busy disk. When vasd writes out it calls fsync or fdatasync and if there are a lot of pending writes it can take a long time.
CAUSE 2:
Inadequate free space in the zpool on ZFS file systems.
CAUSE 3:
Product defect 437971 could cause this error after a join when the cross-forest-domain setting was not set correctly.
-
Résolution
RESOLUTION 1:
Run a prstat to check the IO usage on the system. If there are IO contentions these will need to be corrected.WORKAROUND:Replace the vasd init script with the one attached to this article by doing the following:1 -Download the file attached to this article and gunzip it or decompress it with a compression tool.
2 - Look at the current size of /var/opt/quest/vas/:
du -sh /var/opt/quest/vas
3 - Modify vasd_init_linux, line 190, and if the size given is more than 35MB, set -o size=150m to 4 times the size. So if for example /var/opt6/quest/vas/ was 40MB, set -o size=160m. If it's smaller, keep the 150m.
4 - On the system, stop vasd.
5 - mv /etc/init.d/vasd /etc/init.d/vasd.orig
6 - cp ./vasd_init_linux /etc/init.d/vasd
7 - Start vasd.
RESOLUTION 2:Ensure no file systems are at 100% full.RESOLUTION 3:
Upgrade to a later version of Authentication Services. Please go to https://support.oneidentity.com/authentication-services/download-new-releases to download the latest software.
STATUS: Defect 437971 has been fixed in QAS 4.1.0.21650 and later
-
Pièces jointes
-
Informations supplémentaires
A rejoin to the domain with the -f option may also resolve this issue. For example, vastool -ujoin -f