QAS users (Unix-enabled AD users) are unable to login using the GUI console on KDE, Gnome or CDE.
Oftentimes the GUI console needs to be configured separately to use PAM, and the application restarted to acknowledge VAS.
Solution 1 (for CDE - usually Solaris):
Run: vastool configure pam dtlogin
Restart the console service service or the machine.
Solution 2 (for KDE):
Run: vastool configure pam kdm
Restart the console service service or the machine.
Solution 3 (for Gnome):
Run: vastool configure pam gdm
Restart the console service or the machine.
This often affects Solaris and HP that use dtlogin.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center