Applies to: All versions of Centrify Infrastructure Services


Problem: 
All the Centrify related lines have been removed from /etc/pam.d/sasauth, this impacts all SAS users to login though SAS client. 

Cause: 
There is a chance adleave has been performed. On adleave, adclient will remove Centrify lines out from the files under /etc/pam.d if any. While on adjoin, adclient does not add the lines back to sasauth file. 


Workaround:
Add below line into /etc/centrifydc/centrifydc.conf and restart adclient. 

pam.config.program.check: ftp,pure-ftpd,vsftpd,wu-ftpd,dzdo,sasauth

This tells PAM autoedit script to check if /etc/pam.d/sasauth is found, adclient will add Centrify lines on adjoin and revert the changes on adleave.
* The autoedit only takes place on adclient start.


Resolution:
Centrify will enhance this in the future release.