Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-9500: Users Authentication failure as users have partial profiles and variable (%{shell} not found)

Authentication Service ,  

27 December,17 at 05:01 PM

Applies To: All versions of Centrify DirectControl

Users unable to authenticate with error message as 

“Profile Variable %{shell}, not found for user [username], therefore this user has a partial profile” 

The filesystem was full. Centrify was unable to read /etc/centrifydc/centrifydc.conf variables while filesystem is at its capacity.

For user profile that has attributes resolved at runtime, like %{shell}, %{home}, ...etc., Centrify will need to read the configuration file /etc/centrifydc/centrifydc.conf  to find parameters with "nss.runtime.defaultvalue.var.*"  in order to replace the value. But when the  filesystem is at its full capacity, adclient will have trouble accessing the file hence not able to replace with runtime value.


Fix the filesystem capacity. 

Note: In this particular issue, customer encountered the filesystem issue on RHEL6 from multiple Java VM segfaults and core-file creation, caused by RHSA Errata to address CVE-2017-1000364.
Fix was to apply Errata RHSA-2017:1723 or later

Related Articles

No related Articles