Return
-
Title
Users can't log in with AD account. -
Description
Users can't log in with AD account.
vastool user checkaccess <username> should denied message
-
Cause
user was not in users.allow file.
-
Resolution
1 - edit the /etc/opt/quest/vas/user.allow file
add the user upn (user@example.com) or a group the user is a member of in the file
You can also edit the group policy if you are running VGP to make this change.
-
Additional Information
Troubleshooting commands to do when user can not login
1) as root su - <username> then do another su - <username> and enter in the password.
2) id3) vastool list user <username>4) vastool nss getpwnam < user name>5) vastool -u <user> kinit6) vastool user checkaccess <user>7) vastool user checkconflict <user>8) vastool -u host/ attrs <username