/opt/quest/bin/vastool status reports:
FAILURE: 608 Pam <authexec><account> not configured for VAS.
FAILURE: 608 Pam <authexec><auth> not configured for VAS.
FAILURE: 608 Pam <authexec><password> not configured for VAS.
The authexec command was added after enabling VAS for the server, so its PAM configuration does not include the pam_vas library.
FAILURE: 608 Pam <service> is saying that service is not configured for pam which means you will not be able to login with your active directory account to that service.
If you do not need to login to the application or service account with an AD account this message can be safely ignored. If you do need to then you can try to configure it with vastool configure pam.
To configure a pam compiled service you can do the following command:
/opt/quest/bin/vastool configure pam <service>
Enable authexec with the following command:
/opt/quest/bin/vastool configure pam authexec
If you do not want Pam message to appear when the /opt/quest/bin/vastool status command is run, there are two way to avoid seeing the Pam message:
This command can be used to enable VAS for any PAM service:
/opt/quest/bin/vastool configure pam <service-name>