VDI 3.1 fails to authenticate on different nodes
807578Nov 26 2009 — edited Jan 11 2010I have Sun Vdi 3.1 on
3 sunfire T1000
1 sunfire X4600
1 7310 unified storage
I install the vdi 3.1 with no problem at all, the 3 servers can see the dns names and when i authenticate through mi windows domain ( kinit -V user@DOMAIN) successfully authenticate.
I connect the Active directory with vdi and works fine on the node I create the connection but when y click on specific user logs me out and gives this error """You have been logged out because a consistent response could not be guaranteed""" and if i try to retrieve the users from the second node gives the error ""Unable to Retrieve Users Information Connect operation failed"""
I try to authenticate through CLI with this command "" /opt/SUNWvda/lib/vda-client -a query -u (user)""
on AD connected node gives this answer
root@margay # /opt/SUNWvda/lib/vda-client -a query -u (user)
Password:
Personal_pools,,,User,true
pool,,,User,true
but in the other I get this
root@ocelot # /opt/SUNWvda/lib/vda-client -a query -u vdiadmin
Password:
Authentication failed.
I all ready check ALL my configuration files and are the same I EVEN copy the configuration files from the working node to the other, restart cacao and restart vdi services.
here is my krb5.conf
[libdefaults]
default_realm = AA.NET
default_checksum = rsa-md5
[realms]
AA.NET = {
kdc = ad.aa.net
#kdc2 = ad2.aa.net
#kdc3 = ad3.aa.net
}
[domain_realm]
.aa.net = AA.NET
aa.net = AA.NET
[logging]
default = FILE:/var/krb5/kdc.log
kdc = FILE:/var/krb5/kdc.log
kdc_rotate = {
# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.
period = 1d
# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)
versions = 10
}
[appdefaults]
kinit = {
renewable = true
forwardable= true
}
gkadmin = {
help_url = http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageView/1195
}
when I connect my sunray's on one I can see my domain on the drop down and I can't see it on the second one and I cant login to any desktop what so ever.
Please advise