InfoScale Availability/Veritas Cluster Server Single Signon fails to authenticate user access

book

Article ID: 100048246

calendar_today

Updated On:

Cause

The vxat services used for Single Sign-on authentication in a InfoScale Availability or Veritas Cluster Server environment and it can have problems after upgrade or after a disruption to normal operations such as a BSOD or other unforeseen disruption. This can result in access denied or other access related errors by users who would otherwise have access to the cluster via command prompt, Cluster Manager or other applications.

Resolution

Perform the following steps to reconfigure the Single Signon services (vxat) in an InfoScale Availability/Veritas Cluster Server environment.

NOTE: these steps will stop the running cluster.  It will do so with the -force switch which will leave all service groups in a running state.  The only exception is the ClusterService group used for Global Cluster Heartbeats and cluster Notification services will be stopped. 

Steps to reconfigure Single Sign-on in a VCS cluster.

  1. Log into one of the cluster nodes with Administrator level access.
  2. Run the Veritas Cluster Server Configuration Wizard (VCW.exe)
  3. Click "Next" on the welcome screen.
  4. Enter the needed domain details if not already pre-populated and click "Next" to continue.
  5. Select the nodes in the cluster that is having authentication issues.
  6. Click "Next" on the System Report screen.
  7. Select the "Edit Existing Cluster" option and click "Next".
  8. Confirm that the cluster in question is listed and click "Next"
  9. Select the "Recofigure" option and click "Next"
  10. Select the "Configure/Reconfigure Single Sign-on" option and click "Next"
  11. Answer "Yes" to "Are you sure you want to continue" popup.
  12. Click "Reconfigure" to reconfigure the cluster.
  13. Click "Finish" to close the VCW wizard.
  14. Test that Single Sign-on authentication is working as expected with the command prompt, Cluster Manager or other application that connects to the cluster.

Issue/Introduction

InfoScale Availability/Veritas Cluster Server Single Sign-on fails to authenticate user access