-
Title
PAM changes flagged by 'vastool status' / authselect as errors -
Description
After updating the PAM configuration files used by QAS the following messages are reported by the "vastool status" command:[error] [/etc/authselect/password-auth] has unexpected content!INFO: 628 authselect check of setup: <AuthenticationServices> failed: <Current configuration is not valid. It was probably modified outside authselect.>or[error] [/etc/authselect/nsswitch.conf] has unexpected content!<Current configuration is not valid. It was probably modified outside authselect.> -
Cause
the configuration files mentioned in the error are not equal to the template files Authentication Services has. So it reports these differences as errors.
-
Resolution
To avoid getting this error message
*Note: We install to /opt/quest/libexec/vas/authselect/, but then copy that over to /usr/share/authselect/vendor/AuthenticationServices/, where it can now be used by authselect.
1) mkdir /usr/share/authselect/vendor/AuthenticationServices/
Note: This dir likely already exists, if so skip step one and go to two, make sure to do step two so that the dir gets the fresh files in case you have updated the Authentication Services Software.
2) cp /opt/quest/libexec/vas/authselect/* /usr/share/authselect/vendor/AuthenticationServices/
3) /opt/quest/bin/vastool unconfigure authselect
4) /opt/quest/bin/vastool configure authselect
5) Run the status again to check. The error should be gone.
-
Additional Information
Please also check KB article 338353 - Authselect errors when no previous profile is configured