User cannot log in, message states there is a UID conflict. (4345541)

User cannot log in. Message states there is a UID conflict:

# /opt/quest/bin/vastool user checkaccess <username>
User has a UID conflict
Access check failed, check user account.

A conflict exist in one of these places:

1. A user in the local /etc/passwd file with the same UID as an Active Directory (AD) account.
   
2. In AD another user has the same uid.
   The following command can be run to search for duplicate UIDs in AD:
   # /opt/quest/bin/vastool -u host/ search "(uidnumber=<UID of the denied user>)" name
   
3. This error can also be produced by multiple entries in user-override for the same user where the user name is specified in both user@domain and domain\user. For example the following user-override entries will cause a UID conflict message:
   # cat /etc/opt/quest/vas/user-override
   DOMAIN\user1::::Gecos Override::
   user1@domain::::Gecos Override::
   

In the first two cases a user-override can be used to change the UID of one or both accounts.

By default, the file is located at /etc/opt/quest/user-override.

The following is an example of overriding the jdoe account's UID and Login shell from his actual UID of 1000 and actual home directory of /home/jdoe.

In the user-override file:

jdoe@example.com::345:::/home/jdoe-home:

If a user's UID is changed they will no longer own any existing files or directories, so use this with caution.

In the third case, two override entries for the same user should not exist and could result in unexpected behaviour in other ways as well. Consolidating the overrides into a single entry for each user will correct this error and assure that the correct override entries are applied to the user.