Return
-
Title
During start of SSH session VASD on target host requests new password and it should not as the password is not expired. -
Description
After upgrade from VASD 4.0.3 to 4.1.3 (CentOS 6.7 -> 6.9).... During start of SSH session VASD on target host accepts existing password and then immediately requests new password
Running /opt/quest/bin/vastool -u host/ attrs testuser pwdlastsetResults in the following error:ERROR: The following attributes were not found: pwdlastsetERROR: VAS_ERR_NOT_FOUND: Not foundNot found -
Cause
Due to AD permissions the pwdLastSet cannot be read.
4.1.4.23149
Product defect 730816* auth: During a password login cache the user's pwdLastSet from their PAC. Thiswill prevent the user being asked to change their password when vasd can'tread the correct pwdLastSet value from AD. -
Resolution
Fixed in version 4.1.5. of Authentication Services.
-
Change Request
730816