Disconnected from Active Directory (AD). /opt/quest/bin/vastool status reports: WARNING: 231 QAS daemon is operating in a disconnected state. (4290517)

Disconnected from Active Directory (AD).  

Authentication Services enters into disconnected mode.

Running /opt/quest/bin/vastool status command reports  WARNING: 231 QAS daemon is operating in a disconnected state.

CAUSE 1: QAS cannot reach a domain controller due to an environmental issue such as network issue, dns server down, domain controller went down.
 

RESOLUTION 1:

1 - Check to ensure the domain controllers are reachable.

a) /opt/quest/bin/vastool info cldap  yourdomain.com

b)This command will check for a SRV record for your domain.

 #nslookup
> set type=srv
> _ldap._tcp.dc._msdcs.yourdomain.com

For example:  > _ldap._tcp.dc._msdcs.LG.TS.HAL.CA.QSFT

Server:         10.4.64.23
Address:        10.4.64.23#53

Non-authoritative answer:
_ldap._tcp.dc._msdcs.LG.TS.HAL.CA.QSFT  service = 0 100 389 dc-plg2.lg.ts.hal.ca.qsft.

Authoritative answers can be found from:
dc-plg2.lg.ts.hal.ca.qsft       internet address = 10.5.84.114

2 - If domain controller are available, try restarting vasd to see if another server is picked up. Then re-run the vastool status command to check if it  reports healthy.

3 -   Note the information reported by this command : /opt/quest/bin/vastool info servers   Rejoin the server to AD :  /opt/quest/bin/vastool -u ADUSER  join -f  YOURDOMAIN.com 

Do the vastool status and vastool  info servers commands again and compare output.  Sometimes there is a problem with what AD site the clients are contacting.
 

Remove the /var/opt/quest/vas/vasd/.force_disconnected_mode file and restart the vasd process