"Unable to login." Failed to create device in Active Directory...
Hello, We recently had to re-establish the cloud connector, as two of the machines it was running on had to be removed from our environment. Since then, when we try to enroll new devices, we get an...
View ArticleRe: "Unable to login." Failed to create device in Active Directory...
Hi Bruce and welcome back to the Centrify Community! You are absolutely correct we have made several changes over the last year (and more) related to device management. In early versions of Centrify,...
View ArticleRe: "Unable to login." Failed to create device in Active Directory...
Hi Tony,Thanks for you very detailed explanation. I’ll look into the serviceaccount privilege requirement document in more detail. As a work-around toget the devices added, I am running the Cloud...
View ArticleRe: "Unable to login." Failed to create device in Active Directory...
Hi Bruce and thanks for helping confirm the issue seems to be permissions related. While you can certainly use a service account to run the connector service, using Local System (recommended) might...
View ArticleLooking for an OSX SSH client.
Is there a Centrify openssh client for Mac OSX? Looking for a "centrified" version of openssh that will use smart card authentication to connect to a Tectia SSH server...
View ArticleRe: Looking for an OSX SSH client.
, Welcome to the forums.No such thing as a "Centrify OS X SSH client" At the end of the day, when you sign-in with your smartcard to a mac, you are getting a Kerberos TGT.If your SSH client and Server...
View ArticleRe: Looking for an OSX SSH client.
Consider the situation where one doesn't authenticate into the Macwith a smartcard -- just a normal user/pass combo. They then want touse the certificate on the smartcard to authenticate to a...
View ArticleRe: Looking for an OSX SSH client.
, We have reached out to someone from your field team who should be contacting you shortly. R.P
View Articleadclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName for...
Hello, I'm having an issue where adclient was taking about 80% of one CPU on an Oracle Linux server. When I stop the centrifydc service, the adclient's usage, predictably, falls off until it goes away....
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
, Welcome to the Centrify Express forums. Remember that the current community-supported Centrify Express vesion is the latest 5.3.xVersion 5.2.1 (released in 2014) is currently supported for...
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
Thanks for the quick reply. I fat fingered my version. I'm currently running 5.3.1-398 on both nodes. It looks like each call for the adclient has the name of a script, kept under /var/spool/cron,...
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
Is there any way to verify what process or executable the adclient is being called by?Not without a trace or the log. Tip:The application name or PID is typically in the call:Aug 11 17:00:46 engcen6...
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
Thanks again for the help! So a few things: I've verified A, B, and C, as well as checking AD size. We're a very small AD (60 or so objects, totoal). Also, I'm not seeing any network traffic to either...
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
, This is great information; yes! you are making progress. I have a recommendation for you. Since you know that oracle and grid are local users and will always be, add them to the...
View ArticleWhy does ADClient always go to disconnected mode
I have several Centos 7 servers for which I want ad authentication. When I install the centrify package, and join the domain during installation, I am, for a brief period, able to log in successfully....
View ArticleRe: Why does ADClient always go to disconnected mode
, Welcome to the Centrify Express forums. Please always make sure that you provide the version of Centrify. The current community version is 5.3.x. The problem you're having here is thisAug 12...
View ArticleRe: Why does ADClient always go to disconnected mode
Thanks for the quick response. Unfortunately, it would appear ssh is not the culprit, or at least use "su -" did NOT allow me to log in. I see no issues with the user account nor the password. Note...
View ArticleRe: Why does ADClient always go to disconnected mode
Hah, I provided you with the wrong guidance. Please provide the output of adinfo -T If you don't have connectivity, place yourself in a network that has AD connectivity. Only users that have logged in...
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
So I've excluded the applicable local users that were making requests in the users.ignore file. This leaves the following log snippit running over and over again, just with different scripts (again,...
View ArticleRe: adclient taking lots of CPU and debug log shows an NSSGetPasswdDataByName...
Without a trace it would be a bit hard to find out what's going on. I can offer you 2 alternatives: a) Switch the NSS order (query files first, then AD)This will make sure that the NSS layer checks...
View Article