VMware

This Question is Possibly Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (6 pts)
7 Replies Last post: Nov 13, 2009 3:10 AM by Smoggy  

SRM pairing posted: Nov 6, 2009 9:22 AM

Click to view cef2lion's profile Enthusiast 94 posts since
Feb 20, 2007

I have installed SRM into our Vsphere environment. I used credential authentication. SRM installed and started ok at both sites. I created a pairing between both sites. Each time I start VI and select SRM I get prompted for pairing credentials. I entered that information and the pairing switches to port 443. I have a case open with vmware on this issue. They looked at the logs and said the issue might be using FQDN and IP addresses on the SRM install. I uninstalled SRM and installed using just IP addresses for hosts. No luck. I uninstalled and used just FQDN. Same results. Waiting back to hear from support but wanted to put it out here as well.

Craig

Re: SRM pairing

1. Nov 10, 2009 9:23 AM in response to: cef2lion
Click to view Smoggy's profile Hot Shot 187 posts since
Nov 9, 2005
Hi,
can you paste a screenshot that shows what you mean by this:

"Each time I start VI and select SRM I get prompted for pairing credentials. I entered that information and the pairing switches to port 443. I have a case open with vmware on this issue."

do you mean you get asked username/password on every login to SRM and you didn't expect to see that? is that the question?

best regards,
Lee

Re: SRM pairing

3. Nov 10, 2009 10:06 AM in response to: cef2lion
Click to view Smoggy's profile Hot Shot 187 posts since
Nov 9, 2005
Hi Craig
Each time you open a new VI/vSphere client session you will always (on the first navigation to the SRM UI) be challenged for the username/password for your SRM user account as SRM does not assume this is the same user account you have used to login to vCenter, it could in many cases be different.

Once you have logged in then for the duration of that VI/vSphere client session you can move around the vCenter framework as much as you like and you won't have to re-enter the details again unless you either logout of the client or someone restarted the SRM server underneath you :)

If you are talking about something else...like constantly having to accepted the certificate warning then let me know...you should be able to get rid of that buy simply accepting/installing the unsigned default certificate into your local windows certificate store.

cheers
Lee

Re: SRM pairing

5. Nov 11, 2009 9:34 AM in response to: cef2lion
Click to view Smoggy's profile Hot Shot 187 posts since
Nov 9, 2005
????

well you've still not shown exactly what is appearing that you think shouldn't be, where's the screenshot?

also if you can cut n paste the section of the admin guide along with the screenshot then it might all make sense.

at the moment your problem description isn't complete.

I want to help you but you need to help me understand what your problem description means. at the moment its not clear.

attached is a screenshot of me logging into one of my lab setups....i would expect to go through this process everytime i login at the start of each day if its a new client session. Note I am using a shared site setup so you won't see the first pop-up that lists the available sites.....

login1.JPG

http://communities.vmware.com/servlet/JiveServlet/downloadImage/2-1414581-7600/login2.JPG

you will see the last login box regardless of whether you use credentials or ceritifcate based authentication the reason for this is that when you login to SRM you provide user level credentials which are used in conjunction with our permissions model to determine what you can/cannot do. There is an administrative session which SRM uses for server to server communication, but cannot be used for user level operations. If it was, there would be no way to limit access for specific users.


cheers
Lee

Re: SRM pairing

7. Nov 13, 2009 3:10 AM in response to: cef2lion
Click to view Smoggy's profile Hot Shot 187 posts since
Nov 9, 2005
thanks for the screenshots craig.

hopefully after my previous reply you now understand how this is working.

basically the SRM permissions model is separate from VC to allow you to have say some logging in as VC admin but still lock them out of SRM. In production deployments the reality would be that once SRM was running and you were deploying VM's using your BAU VM deployment / provisioning model you wouldn't want any/all users having access to the SRM layer at all. Keeping things separate allows you to do this. Equally you could have a granular model that allowed you to grant one set of permissions/privileges in SRM at one site but deny those at the other if that fitted your needs.

hope this has helped,

Cheers
Lee

VMware Developer

SDKs, APIs, Videos, Learn and much more in the Developer community.

Learn More

Developer Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

VMware vSphere

Come witness the next giant leap in virtualization.

Register Today

Communities