How to configure QAS user and group objects to use different schema attributes for login and group name.
How to setup a different AD attribute to use for login.
What AD attribute is being used for login?
How to change login information.
It is possible to configure alternate Active Directory (AD) attributes for user login names and group names. For group names, there are only two acceptable values for this attribute: cn (Common Name) and samaccountname.
To change the groupname attribute for one client machine run:
# /opt/quest/bin/vastool configure vas vasd groupname-attr-name cn
# /opt/quest/bin/vastool flush
While for user objects, any string attribute can be used for the user logon name value. If you set the username-attr-name=vas.conf option, QAS users will need to logon with the contents of .
For example to change the login value for one machine, to change the username logon to the samaccountname attribute run the following commands (vastool configure will create the correct entry in the /etc/opt/quest/vas/vas.conf file):
# /opt/quest/bin/vastool configure vas vasd username-attr-name samaccountname
# /opt/quest/bin/vastool flush
NOTE: Even when not using userPrincipalname for the username attribute, QAS users still need to have a populated UPN, otherwise the user will not be cached.
To find out what the Schema attribute is that is used for username-attr-name:
$ /opt/quest/bin/vastool schema list | grep "UserName attribute name:"
To change the login value globally for all machines you will need to edit the "User Login Name" value in the QAS Control Center.
1. Click the Preferences navigation button on the left panel of the QAS Control Center
2. Expand the Custom Unix Attributes and then click the blue Customize link to change the "User Login Name" value to another AD attribute.
More information on these options is available from man vas.conf
# man vas.conf
The vas.conf man is also available in HTML format in the docs folder of the product download. Please note there are changes to the default values based on what version of the product you are using.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center