Skip to Main Content

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

VDI 3.1 fails to authenticate on different nodes

807578Nov 26 2009 — edited Jan 11 2010
I have Sun Vdi 3.1 on
3 sunfire T1000
1 sunfire X4600
1 7310 unified storage

I install the vdi 3.1 with no problem at all, the 3 servers can see the dns names and when i authenticate through mi windows domain ( kinit -V user@DOMAIN) successfully authenticate.

I connect the Active directory with vdi and works fine on the node I create the connection but when y click on specific user logs me out and gives this error """You have been logged out because a consistent response could not be guaranteed""" and if i try to retrieve the users from the second node gives the error ""Unable to Retrieve Users Information Connect operation failed"""

I try to authenticate through CLI with this command "" /opt/SUNWvda/lib/vda-client -a query -u (user)""

on AD connected node gives this answer

root@margay # /opt/SUNWvda/lib/vda-client -a query -u (user)
Password:
Personal_pools,,,User,true
pool,,,User,true

but in the other I get this

root@ocelot # /opt/SUNWvda/lib/vda-client -a query -u vdiadmin
Password:
Authentication failed.

I all ready check ALL my configuration files and are the same I EVEN copy the configuration files from the working node to the other, restart cacao and restart vdi services.


here is my krb5.conf

[libdefaults]
default_realm = AA.NET
default_checksum = rsa-md5


[realms]
AA.NET = {
kdc = ad.aa.net
#kdc2 = ad2.aa.net
#kdc3 = ad3.aa.net
}



[domain_realm]
.aa.net = AA.NET
aa.net = AA.NET
[logging]
default = FILE:/var/krb5/kdc.log
kdc = FILE:/var/krb5/kdc.log
kdc_rotate = {

# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.

period = 1d

# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)

versions = 10
}

[appdefaults]
kinit = {
renewable = true
forwardable= true
}
gkadmin = {
help_url = http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageView/1195
}


when I connect my sunray's on one I can see my domain on the drop down and I can't see it on the second one and I cant login to any desktop what so ever.

Please advise
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Feb 8 2010
Added on Nov 26 2009
1 comment
191 views