In this case the server is RHEL 7.2. Authentication Services was installed and then the HP SPP bundle 04.2016 to upgrade firmware and drivers was installed. After the server rebooted users can no longer login using AD accounts.
#vastool user checkaccess <user>
WARNING: NSS lookup (getpwnam) for user failed.
The HP SPP bundle is creating the directory /lib/i386-linux-gnu, which is breaking the nss configure code.
* vastool: When configuring nss, if the directory /lib/i386-linux-gnu, exists, make sure it contains *nss_files* before deciding to place nss library links there.