Exceed on Demand uses SSH to authenticate. Users are unable to authenticate via Exceed on Demand with QAS enabled users.
Example of debug output for this issue:
pam_vas***: pam_vas_do_conversation: done with conversation function
pam_vas***: pam_vas_do_conversation: Empty response from conversation, NULL authtoken disallowed
This means that we asked for the password and did not get it.
This is known to be caused when custom prompts are in use in vas.conf. '/etc/opt/quest/vas/vas.conf'
For example:
prompt-vas-ad-pw =
prompt-vas-ad-disauth-pwcache =
prompt-vas-ad-disauth-ticket =
Remove or comment out the custom prompts to resolve this issue.
This is an is with Exceed on Demand.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center