Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-14334: adcdiag utility will get a CLDINST error when using anyauth for proxy server which is configured to use Negotiate & NTLM & Digest & Basic

Authentication Service ,  

10 May,19 at 07:50 AM

Problem:
When using "anyauth" authentication type for a proxy server that has been configured to use Negotiate&NTLM&Digest&Basic the adcdiag utility will produce an CLDINST error stating that it failed to connect to Centrify Identity Platform.

Cause:
The issue is due to a bug in the stock curl library and how it handles the above configuration (in the problem section). This issue does not affect the operation of the actual adclient process.

Workaround:
Use anyauth with the proxy server configured to use Negotiate only, Basic only, NTLM only or Digest only.

Resolution:
This issue has been fixed in release 18.11 where we changed the code to detect the authorization type supported by the  proxy server and simply use that supported authtype instead of "anyauth".

 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleKB-10143: adcdiag shows "CLDINST" error when multiple DNS servers are set in /etc/resolv.conf articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-6041: How to show current license type in use by adclient article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part I articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part III articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-6056: How to report the group policy settings that are in effect for the local computer? article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part II