-
Titolo
Timesync issue is not reported correctly in ‘vastool status’ output -
Descrizione
When client time is out of sync with Active Directory, the following error message is shown in the 'vastool status' command output:
+++++++++++++++FAILURE: 505 Unrecognized auth result/error <2><ERROR: VAS_ERR_KRB5: Kerberos error Failed to obtain credentials. Client: SERVER1$@EXAMPLE.COM, Service: SERVER1$@EXAMPLE.COM, Server: control.example.ad Caused by: KRB5KDC_ERR_PATH_NOT_ACCEPTED (-1765328356): KDC Policy rejects transited path Reason: Matching credential (SERVER1$@EXAMPLE.COM) not found>.+++++++++++++++
Management Console for Unix is unable to report on this status message and produces the error below:
+++++++++++++++Running QAS status on host (Failed)com.quest.bullseye.common.model.posix.QasStatusResult+++++++++++++++
However no timesync error message is shown, despite it being the cause of the 505 error message. -
Causa
Product defect. -
Risoluzione
This defect has been confirmed and change request #273371 has been raised for tracking of the issue.
There is no ETA on when the fix will be implemented in a future release as of yet.
Please review the list of Resolved Issues and Enhancement Requests published within the product release notes to determine if this specific Change Request is included in an upcoming release. Release notes are available at support.oneidentity.com under the technical documentation section of our website. We do not guarantee that all Change Requests will be implemented in future releases. For more information on our Product Enhancements and Defects policy, please consult the One Identity Global Support Guide https://support.oneidentity.com/essentials/support-guide
Workaround:
When encountered with the error messages shown in the 'Problem description' section, please check if the time on your system is accurate. If a time resync is needed, please perform it using the command:
# /opt/quest/bin/vastool timesync
-
Richiesta di modifica
273371