Return
-
Title
Occasional kerberos disconnect. -
Description
Occasional kerberos disconnect in a 3rd party app that is integrated with Authentication Services. -
Resolution
Vas.conf file follows the standard krb5.conf format used by both the Heimdal and MIT Kerberos projects. It can be used as a krb5.conf file by other applications. All settings available are in the vas.conf man page.
RESOLUTION:1 - We edited the /etc/opt/quest/vas/vas/vas.conf and under the section [libdefaults] we add the following setting:renew_lifetime = 15dPlease note that Active Directory settings for kerberos will take precedent over vas.conf settings.USEFUL TROUBLESHOOTING KERBEROS COMMANDS:1 - After logging on as a user list the kerberos ticket with the following commands:klistklist -v2 - To obtain a ticket use the following command when logged in as user:/opt/quest/bin/vastool kinit