Why is a user or users not showing up in the Quest Authentication Services (QAS) client cache? (4289700)

'vastool list users' does not list users.

There can be many causes for users not appearing in the cache.  Below are a few to check:

1) Attribute not set.  Check that the user has a 'userPrincipalName' (UPN) attribute value such as user@example.com.

To check please do one of the following:

- On the Windows side:

Go to Active Directory Users and Computers (ADUC), right-click the account that cannot login, select "Properties".  Click the "Account" tab.  Ensure User logon name is filled out and the domain is selected.

Or

From Unix/Linux:

vastool -u host/ attrs <username> userPrincipalName - will list just the UPN of the specified username

vastool -u host/ attrs <username> - will list all the attributes of the specified username

2) Ensure that the /var filesystem is not full.

3) Ensure you install the correct QAS client for the operating system.  For example, you could have installed the Linux 32-bit version of vasclnt instead of the 64-bit version.

4) Check the permissions on /etc/opt/quest are set to 755.

5) Check Active Directory (AD): vastool -u host/ list -l users (list users from AD, doesn't work with UPM mode).

6) Unix attributes are not present.  Run vastool list -a users (list non-enabled users in the cache).

7) 'user-hide-if-denied' is set, and QAS > 3.1.1.49, and users have access through nesting.