-
Title
vgptool ERROR: Unable to open GPT.INI created from network file -
Description
The following error is reported when running
# /opt/quest/bin/vgptool apply
+++++++++++++++++++
Updating VGP From Policy
------------------------
ERROR: Unable to open GPT.INI created from network file
Unable to copy file from CIFS: \\SERVER.DOMAIN.COM\sysvol\ SERVER.DOMAIN.COM \Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\GPT.INI
Could not connect to any server: NT_STATUS_CONNECTION_REFUSED
Caused By:
Server address fd9e:62c2:429d:53:fc08:d4a7:5535:64e6
WARNING: GPT: /var/opt/quest/vgp/gpt/31B2F340-016D-11D2-945F-00C04FB984F9
has been marked for redownload because of refresh failure++++++++++++++++++++
-
Cause
Product Defect: 198166- vgp does not work with smb3
-
Resolution
Workaround:
Disable SMB3 Encryption as follows.
# /opt/quest/bin/vastool -u host/ configure vas libvas enable-smb3-encryption false
From vas.conf man pages
++++++++++++++++++++++++
enable-smb3-encryption = <true | false>
Default value: true
If dialect 3 or above is enabled by [libvas] smb-dialect-range and dialect 3 or above is also negotiated, VGP will encrypt file copies by default. If this option is disabled, no encryption will be performed.
[libvas]
enable-smb3-encryption = false
++++++++++++++++++++++++
To reverse this setting (Enable SMB3 Encryption), run
# /opt/quest/bin/vastool -u host/ configure vas libvas enable-smb3-encryption
-
Change Request
198166 -
Additional Information
A fix has been implemented in Authentication Services 4.2.3 (https://support.oneidentity.com/authentication-services/4.2.3/download-new-releases)