Error Message

During login, the VCS Cluster Manager shows the following error:  

Screenshot:

 

The following error is logged in the /var/VRTSvcs/log/vcsauthserver.log:

Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) ############################################
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) New thread spawned to handle the client request.
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) PAM auth failed for vcsuser1; (9; Authentication failed)
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) Authentication failed for [vcsuser1]: invalid password.
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) retrieved [xxxxxxxxxxxxx], computed [yyyyyyyyyyyyyy]
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) UserName invalid for user vcsuser1 in authnis.cpp(188)
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) AuthNisPlus::generateServerContext cannot authenticate user vcsuser1, domain
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) Finished handling client request.Thread exiting.
Dec 06 11:21:32 2013:50826,18,0,4035,24,debug,AT,8: (4035|24) ############################################

This may be caused by a system password algorithm change.

When the system password algorithm is changed, this does not automatically change the algorithm for existing passwords.

As long as the password is not deleted, the password's original algorithm will be applied during a password change. If the password is first deleted, then recreated, it will be created using the current system-defined algorithm.

As the user:

When Veritas Cluster Server (VCS) is running insecure mode, VCS does not store user passwords in the main.cf file. Instead, it uses platform-base authentication. On the Solaris platform, the system administrator can choose the user password encryption algorithm by settings that are contained within the /etc/security/policy.conf file.

As the Veritas Cluster Manager will use the algorithm that is specified in the above file for encryption, the authentication will fail if this algorithm does not match with the current user password algorithm.