Configuring network authentication

[tafountain]

I am using Vault 3.1.8 build 3771. We are running on a trial license while we evaluate the product. Now that I have all the data migrated from VSS, I am configuring the product to use network authentication instead of Vault credentials. I have it working finally, but I wanted to pass this by you. We have 3 domains in our organization as we are geographically separated. 2 of those domains can contain users that have access to Vault and our Active Directory is split into a parent/child with the parent being on DOMAIN1 and the child on DOMAIN2. Most of the users that will access Vault are in DOMAIN2 in the child node of the A/D, so I configured the Admin Tool for DOMAIN2 and everyone here can access Vault just fine. However, how can I access Vault to allow users from the parent node from the A/D on DOMAIN1? Everytime I configure DOMAIN1 in the Admin Tool, I get an error saying that the username/password is incorrect.

Please advise.

[lbauer]

When you configured Domain1 for the Active Directory Domain in the Vault Admin Tool, did you change the custom account used by Vault? The domain user used for impersonation must have access to the Active Directory domain.

This means if you wanted to authenticate against Domain1, use Domain1\User instead of Domain2\User for the custom account. You can easily make this change with the Identity Switcher:

http://support.sourcegear.com/viewtopic.php?t=2953

If you continue to get login errors, check the sgvault.log (%windir%\temp\sgvault) to see if there's additional information about the failed login.

[tafountain]

Linda,

Thanks for the response. The site is configured for impersonation correctly. I'll verify that user has access to the other domain.