Active Directory (AD) user not being recognized as a Unix-enabled user.
If you issue the command 'vastool list user <username>', the user is not listed.
The user's domain was not selected in the account tab.
'userPrincipalName' (UPN) must be filled out:
Go to Active Directory Users and Computers (ADUC), go to the properties of the account, select "Account" tab and ensure the "User logon name" field is filled in. Select the domain from the drop down provided.
To list the attributes of an account run the following command:
vastool -u host/ attrs <username>