-
Title
Join to domain fails with error message "Network is unreachable" due to environment issues when using ipv4 over ipv6 network -
Description
Join to domain fails with error message "Network is unreachable" due to environment issues when using ipv4 over ipv6 network
A join debug shows the client successfully connecting to the domain controllers on port 389, however it then fails when trying to connect on port 88.
The Domain controller is then marked as unreachable.
The join debug shows an ip address starting with [::ffff:
Example of error message:-------------------------------------------
2021-06-07 11:44:26 [debug] (142034) vas_tcp_connect_addrs: Failed to connect to [::ffff:ip-address]:88: Network is unreachable-------------------------------------------
The ::ffff:: means that it is routing ipv4 traffic over the ipv6 network.
Note that it is still using the ipv4 address ( XXX.XXX.XXX.XXX ) however over ipv6. -
Cause
Environment issue preventing ipv4 working over ipv6 network. -
Resolution
Force the use of ipv4 only for Safeguard Authentication services with the following steps:
1. Create the following touch file:
# touch /var/opt/quest/vas/vasd/.vasd_ipv42. Add the 'force-ipv = 4' option in the vas.conf file using the following command:
# /opt/quest/bin/vastool configure vas libvas force-ipv 43. Try the join again
-
Additional Information
The join debug can be created by adding -d5 and an output capture.
For example, if the join was previously:
# /opt/quest/bin/vastool -u admin_user join -f domain
Modify it with the additional commands as follows:
# /opt/quest/bin/vastool -d5 -u admin_user join -f domain 2>&1 | tee /tmp/join_debug.out
Note that the above is just a simple example, please add the -d5 and output redirection to your specific join command.