The Apache mod_auth_vas module is not authenticating. When it is fixed by resetting the password on the HTTP service account, QAS authentication stops working
Both HTTP.keytab and host.keytab are pointing to the same account. This can be caused by manually creating the HTTP.keytab rather than allowing the setup-mod_auth_vas script to create the required entries.
Also, the keytab file may have been created incorrectly.
1) mv /etc/opt/quest/vas/HTTP.keytab /etc/opt/quest/vas/HTTP.keytab.sav
2) /opt/quest/sbin/setup-mod_auth_vas
These steps will create a new MAV keytab and associated service account.
---
MAV and all One Identity open source projects are supported through One Identity GitHub issues and the One Identity Community. For assistance with any One Identity GitHub project, please raise a new Issue on the One Identity GitHub project page. You may also visit the One Identity Community to ask questions. Requests for assistance made through official One Identity Support will be referred back to GitHub and the One Identity Community forums where those requests can benefit all users.
Main MAV GitHub page:
https://github.com/OneIdentity/mod_auth_vas
Latest MAV Packages:
https://github.com/OneIdentity/mod_auth_vas/releases
Open a MAV Issue:
https://github.com/OneIdentity/mod_auth_vas/issues
MAV Wiki:
https://github.com/OneIdentity/mod_auth_vas/wiki
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center