-
Title
vastool status Or MCU message: FAILURE: 619 The default search policy is NOT configure for QAS! or WARNING 620 search policy is configured to include -
Description
The check being run is designed to ensure that OSX is configured to use QAS properly. The message is being returned on OSX from Management Console for Unix (MCU) or when the following command is run /opt/quest/bin/vastool status
FAILURE: 619 The default search policy is NOT configure for QAS!
WARNING: 620 The default search policy is configured to include $directory.
-
Cause
If OpenDirectory is configured the 620 warning appears that conflicts with Authentication Services. Only one directory service should be used.
WARNING: 620 The default search policy is configured to include $directory.
The 619 message means Authentication Services is not configured properly
FAILURE: 619 The default search policy is NOT configure for QAS!
-
Resolution
RESOLUTION:
1. Go to System Preferences
2 - Click on Users & Groups
3 - Click the lock to make changes and enter in password
4 - Click Login Options
3 - Click Join button next to Network Account Server
4 - Cick the Open Directory Utility button
5 - Click the lock to make changes and enter in admin password when asked
6 - On this screen you should see directory services for both Native Apple AD which says just Active Directory ensure this is not joined to the domain. Right below you should see Active Directory + Group Policy (QAS) this should be joined to the domain.
To Delete Native Apple AD do the following steps:
7 - Click the Search Policy Tab
8 - Delete the Active Directory search path
9 - Click the contents tab
10 - Delete the Active Direcotory Search path
11- Go to terminal and run the comman: sudo /opt/quest/bin/vastool status
Note the warning message and failure should no longer appear.
