VMware Cloud Community
BaghdadIT
Contributor
Contributor

Can no longer log into VSphere Client or Web Portal with AD credentials

I was able to, But after some maintenance and storage issues, I can only log in now with the local admin username and password. when I use the Client I get the following

pastedImage_0.png

If I try the WEB portal for VSphere I get logged in but the all the "Inventories say "Empty Inventory" When I look at the disks in VCente rI see one at 100 percent

pastedImage_4.png

Filesystem                                           Size                        Used                 Avail                    Use%                       Mounted on

rootfs                                                          11G                 5.1G                  5.1G                     51%                              /

udev                                                           4.0G               164K                  4.0G                     1%                                 /dev

tmpfs                                                           4.0G              176K                  4.0G                     1%                                 /dev/shm

/dev/sda3                                                    11G                5.1G                  5.1G                     51%                                /

/dev/sda1                                                    128M             41M                   81M                      34%                                   /boot

/dev/mapper/core_vg-core                          25G               337M                 24G                      2%                                  /storage/core

/dev/mapper/log_vg-log                              9.9G              9.9G                    0                         100%                               /storage/log

/dev/mapper/db_vg-db                                 9.9G             261M                 9.1G                      3%                                /storage/db

/dev/mapper/dblog_vg-dblog                      5.0G              219M                 4.5G                       5%                                /storage/dblog

/dev/mapper/seat_vg-seat                          9.9G              588M                 8.8G                       7%                                  /storage/seat

/dev/mapper/netdump_vg-netdump           1001M           18M                   932M                     2%                                   /storage/netdump

/dev/mapper/autodeploy_vg-autodeploy    9.9G              151M                 9.2G                       2%                                    /storage/autodeploy

/dev/mapper/invsvc_vg-invsvc                   5.0G               279M                4.4G                       6%                                    /storage/invsvc

Reply
0 Kudos
10 Replies
sjesse
Leadership
Leadership

Can you try administrator@vsphere.local, if that doesn't work you may need to logon to the host. Follow these steps and increase the space

VMware Knowledge Base

Reply
0 Kudos
BaghdadIT
Contributor
Contributor

Sorry Sjesse

I forgot to mention I CAN log in using the local administrator account!

Reply
0 Kudos
ChrisFD2
VMware Employee
VMware Employee

What version?

You need to clear out the the log partition.

It may be that the appliance root password has expired and it can't run the cron job to clear log files.

Knowing which version you're using will help us point you at the correct KB article.

Regards,
Chris
VCIX-DCV 2023 | VCIX-NV 2023 | vExpert *** | CCNA R&S
Reply
0 Kudos
BaghdadIT
Contributor
Contributor

Hello Chris

VMware vCenter Server Appliance 6.0.0.10200

Reply
0 Kudos
ChrisFD2
VMware Employee
VMware Employee

Please follow this KB are post the outcome.

vCenter Appliance root Partition 100% full due to Audit.log files not being rotated (2149278)

If you have support it may be worth logging a call if you're not sure on what you're doing.

Regards,
Chris
VCIX-DCV 2023 | VCIX-NV 2023 | vExpert *** | CCNA R&S
Reply
0 Kudos
BaghdadIT
Contributor
Contributor

total 12M

drwx------ 2 root root 4.0K Jan 16 18:21 audispd

-rw------- 1 root root 3.0M Jan 16 18:47 audit.log

-rw------- 1 root root 601K Jan  2 15:30 audit.log-20190102.bz2

-rw------- 1 root root 605K Jan  3 15:30 audit.log-20190103.bz2

-rw------- 1 root root 604K Jan  4 15:30 audit.log-20190104.bz2

-rw------- 1 root root 604K Jan  5 15:30 audit.log-20190105.bz2

-rw------- 1 root root 604K Jan  6 15:30 audit.log-20190106.bz2

-rw------- 1 root root 606K Jan  7 15:30 audit.log-20190107.bz2

-rw------- 1 root root 606K Jan  8 15:30 audit.log-20190108.bz2

-rw------- 1 root root 607K Jan  9 15:30 audit.log-20190109.bz2

-rw------- 1 root root 606K Jan 10 15:30 audit.log-20190110.bz2

-rw------- 1 root root 605K Jan 11 15:30 audit.log-20190111.bz2

-rw------- 1 root root 608K Jan 12 15:30 audit.log-20190112.bz2

-rw------- 1 root root 611K Jan 13 15:30 audit.log-20190113.bz2

-rw------- 1 root root 611K Jan 14 15:30 audit.log-20190114.bz2

-rw------- 1 root root 610K Jan 15 15:30 audit.log-20190115.bz2

-rw------- 1 root root 613K Jan 16 15:30 audit.log-20190116.bz2

drwx------ 2 root root 4.0K Sep  1  2017 auditd

vcapp:/var/log/audit # rm -rf audit.log

vcapp:/var/log/audit # ls -l /var/spool/cron/lastrun/

total 0

-rw------- 1 root root 0 Jan 16 15:30 cron.daily

-rw------- 1 root root 0 Jan 16 18:45 cron.hourly

-rw------- 1 root root 0 Jan 11 15:45 cron.weekly

vcapp:/var/log/audit # grep "Authentication token is no longer valid; new one re                                                                                                                                                             quired" /var/log/messages.0.log | head

2018-11-21T05:30:01.411103+00:00 vcapp /usr/sbin/cron[15851]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:30:01.411121+00:00 vcapp /usr/sbin/cron[15847]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:30:01.413488+00:00 vcapp /usr/sbin/cron[15849]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:30:01.414116+00:00 vcapp /usr/sbin/cron[15852]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:30:01.414601+00:00 vcapp /usr/sbin/cron[15848]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:35:01.417800+00:00 vcapp /usr/sbin/cron[3445]: Authentication toke                                                                                                                                                             n is no longer valid; new one required

2018-11-21T05:40:01.423631+00:00 vcapp /usr/sbin/cron[26755]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:40:01.425683+00:00 vcapp /usr/sbin/cron[26760]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:40:01.425700+00:00 vcapp /usr/sbin/cron[26761]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

2018-11-21T05:40:01.427042+00:00 vcapp /usr/sbin/cron[26756]: Authentication tok                                                                                                                                                             en is no longer valid; new one required

Reply
0 Kudos
ChrisFD2
VMware Employee
VMware Employee

Did you change root password?

What is the disk usage now?

Audit.log wasn't big so something else bust be taking it.

Regards,
Chris
VCIX-DCV 2023 | VCIX-NV 2023 | vExpert *** | CCNA R&S
Reply
0 Kudos
BaghdadIT
Contributor
Contributor

I did not change the root password, I did not feel comfortable doing that.

and the disk usage did not change, it is the same

Reply
0 Kudos
ChrisFD2
VMware Employee
VMware Employee

Do you have support?

Changing root password is fine, it doesn't affect vCenter.

cd /storage/log

du -sk * | sort -n

This will show you folder sizes. Go into the biggest one, repeat. Hunt down what's taking the space. It may be core dumps.

Regards,
Chris
VCIX-DCV 2023 | VCIX-NV 2023 | vExpert *** | CCNA R&S
Reply
0 Kudos
ChrisFD2
VMware Employee
VMware Employee

Also check this article:

VMware Knowledge Base

Regards,
Chris
VCIX-DCV 2023 | VCIX-NV 2023 | vExpert *** | CCNA R&S
Reply
0 Kudos