-
Title
How to disable the creation of the .vas_logon_server file -
Description
When a VAS enabled user logs in to a Unix machine a file is created in the users ${HOME.EN} directory called .vas_logon_server. Some administrators may not want this file to be created.
-
Cause
The creation of the file is expected behavior. This file is created on a VAS users login. It is for information purposes only, and is useful to determine which DC (Domain Controller) the user was authenticated against.
-
Resolution
To prevent this file from being created if desired place the line 'no_advertise_auth_server' after the 'pam_vas3.so' lines in your pam.conf file. This disables the creation of the ${HOME.EN}/.vas_logon_server file, which contains the name of the server used to perform the authentication.
-
Additional Information
It also disables pam_vas from setting the environment variable VAS_LOGONSERVER in the users environment.