Information does not display in the console
If you are expecting to see information for a host that the mangement console is not showing, perhaps you have not selected to view those columns.
Use the Columns menu in the View panel of the task bar to display information related to either Privilege Manager or Authentication Services in the mangement console.
To display the One Identity product-related information
- Open the Columns menu and choose either Privilege Manager or Authentication Services or both.
By choosing Privilege Manager, the Privilege Manager-related columns display in the mangement console; that is, the Installed, Version and Status columns. By choosing Authentication Services, the Authentication Services-related columns display in the mangement console; that is, the Authentication Services state column, represented with the icon, the Version, and Joined to Domain columns.
Note: All columns show by default. Once you have opened (or closed) a column group, the mangement console remembers the setting from session to session. However, if you reinstall Management Console for Unix, it reverts back to the default of showing all columns.
License information in report is not accurate
The pmloadcheck daemon runs on each configured policy server to verify its status. It controls load balancing and failover for connections made from the host to the configured policy servers, and, on secondary servers, it sends license data to the primary server.
The Product License Usage report is only accurate up to the last synchronization interval which by default runs every 60 minutes.
Note: The Product License Usage report does not include trial license information.
Out of memory error
If you see java.lang.OutOfMemoryError in the logs then may need to adjust your JVM memory allocation. See JVM memory tuning suggestions for details.
Post install configuration fails on Unix or Mac
If you installed Management Console for Unix on a Unix or Linux computer that has Authentication Services installed and is joined to an Active Directory domain and encountered the following error message when running the post installation configuration of the mangement console: "Can't find domain controller for <domain>", verify your installation configuration.
To verify the installation configuration
- Verify that DNS is valid and that the server can connect to the domain.
- Verify that you are configured for a domain in the same forest to which you are joined.
Note: If the computer is not joined to a domain, you could have configured the mangement console for any domain reachable by DNS.
- If you have Authentication Services installed, verify that the host.keytab file is valid by running the following command without error:
/opt/quest/bin/vastool -u host/ -k <path_to_keytab> info id
Note: Typically, the host.keytab file is located at: /etc/opt/quest/vas/host.keytab.
- If you recently joined or rejoined and there are multiple domain controllers in the domain, wait for the computer object to be replicated to all domain controllers in the forest.
- Verify that the clocks for the Management Console for Unix server and the Active Directory domain controller are synchronized.
Kerberos requires that the Management Console for Unix server and Active Directory domain controller clocks are within five minutes of each other.