-
Titre
Not able to elevate with powerbroker due to missing memberships -
Description
Not able to elevate with powerbroker due to missing group memberships
-
Cause
The system was configured to use netgroups vas ( in /etc/irs.conf ).And vas was configured to use them, but in a location that didn't exist in AD. So for every request vasd tries to go to AD, tries to delete and create the DB. This is very slow and caused the system disk to be too busy. After a while or something kicks off, vasd is looking up netgroups so much it can't handle anything else. The system is so far behind all requests time out.
-
Résolution
1 - Remove the configuration manually or run the following command:
# /opt/quest/bin/vastool unconfigure irs netgroup
The above command will take vas off the netgroup line in the /etc/irs.conf file.
2 - Set netgroup-mode = OFF in vas.conf file by running the following command:
# /opt/quest/bin/vastool configure vas vasd netgroup-mode OFF