FAILURE: 608 Pam <switchable-auth><auth> not configured for SAS. (4384144)

After installing or upgrading to Safeguard Authentication Services 7.0, the following message may be displayed when running vastool status:

FAILURE: 608 Pam <switchable-auth><auth> not configured for SAS.

The behavior has been reproduced with SAS 7.0 on RHEL10. However, the message may occur in other SAS 7.0 environments depending on the operating system PAM and authselect profile configuration.

The operating system PAM configuration contains a switchable-auth service, but the Safeguard Authentication Services AuthenticationServices vendor profile does not contain the corresponding switchable-auth profile file.

For example, Red Hat Enterprise Linux 10.2 introduced the with-switchable-auth feature in its default authselect profiles. When vastool status detects the associated PAM service but does not find it configured in the SAS vendor profile, it reports the FAILURE 608 message.

This is a PAM profile detection issue tracked as product defect 725856.

The message can be safely ignored when the switchable-auth PAM service is not required for Active Directory authentication.

The warning itself does not affect standard SAS authentication functionality.

Product defect 725856 has been raised and is expected to be fixed in a future version of SAS.