In QAS 4.1 attempts to reset the QAS host objects password in AD fail with the following error:
/opt/quest/bin/vastool -u administrator passwd -rk /etc/opt/quest/vas/host.keytab host/
ERROR: Failed to change host password.
The recommended workaround for when the host password needs to be reset in QAS 4.1 is to unjoin the server from AD and then rejoin. This will result in a new password for the host.
.Issue fixed in version 220.127.116.1141. The latest version of Authentication Services can be downloaded here