Return
-
Title
MCU not validating AD credentials -
Description
Users can log into the Managment Console for Unix (MCU) with their AD accounts and can perform all the functions that do not require AD credentials (such as profiling systems and installing QAS). However anything that does require AD permissions (such as joining a system to a domain) fails.
Users can still SSH to the system and join via the command line, it is just joining/unjoining via the MCU GUI that fails. This problem started after upgrading the MCU from version 2.0.1 to 2.5.1
-
Cause
The problem is that the MCU is using just a single domain in a much larger forest. The whole forest contains 127 domains. Although we only care about a single domain, the MCU attempts find out information for all DC's in the whole forest. This is causing timeout errors preventing authentication of credentials. -
Resolution
WORKAROUND
noneSTATUS
Defect ID #28609 has been created to track this problem. Waiting for fix in a future release -
Change Request
28609