Mi è capitato un paio di volte questo errore: cercando di loggarsi al vcenter tramite il vsphere client con l’opzione “Use Windows session credentials” viene restituito un errore di user/password errata anche se le credenziali sono ovviamente corrette.
In numerosi blog (http://vinfrastructure.it/it/2014/01/problemi-nellautenticazione-in-vsphere-con-credenziali-di-dominio/) e sulle kb di vmware (http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2035510) dicono che l’errore si risolve ricreando l’active directory identity source ma in nessuno dei miei casi ho risolto in questo modo.
La soluzione, nel mio caso, è stata semplicemente quella di create un record PTR nella zona inversa per la risoluzione dell’ip del vcenter!
Try closing all vsphere C+ client windows, locking / unlocking your windows session and try again.
[…] dicas que pude encontrar no blog ITXPerience era criar, na zona reversa do DNS, um registro PTR para o IP do servidor ESXi. Esta dica não […]
In my case, the “Use Windows session credentials” checkbox was not allowing me to login, but leaving that checkbox unchecked and then entering my AD credentials manually was working fine.
I had the proper records in both my Forward and Reverse Lookup Zones and was still having issues. So the PTR record wasn’t going to be the fix for me.
I left the domain, re-joined it, rebooted the server, still couldn’t login with that checkbox.
My issue was much simpler. I was missing the domain name in the Host Identification section of DNS and Routing Configuration. Ironically, the ESXi server won’t let you configure this if you are currently joined to a domain. So I had to Leave Domain again, configure the domain name in Host Identification, and then re-join the domain. After that, I was able to login using either the checkbox or with manual credentials without any issues.
vSphere Client > Configuration tab > Software > DNS and Routing > Properties > DNS Configuration tab > Host Identification > Domain
[…] dicas que pude encontrar no blog ITXPerience era criar, na zona reversa do DNS, um registro PTR para o IP do servidor ESXi. Esta dica não […]