Built in group membership functions are returning incorrect return codes
说明
The build in policy function vas_host_in_ADgrouplist() always returns 0 (server found at index zero), and vas_host_is_member() always returns 1 (server found in group).
原因
The problem was traced to the vas_computer_is_member function in the QAS API, that is the call that was reporting group memberships incorrectly to Privilege Manager.
This problem was caused by a known issue in the version of QAS that he was using:
Defect #635280 api: Fix an issue in an old API function that could incorrectly show a user as belonging to a group.
解决办法
STATUS
This issue was resolved as of QAS 4.1.0.22637. Upgrading to the current QAS release is recommended.