View Service account getting locked

[v_balan77]

Seeking help to find the place to update my new password for service account used in view administrator.

A common service account "view_composer" is configured for vCenter and composer server operation. Unfortunately password for this account got changed in AD and new password updated in View administrator > View configuration > Servers > vCenter Servers

     1. vcenter server settings

     2. view Composer server settings

     3. domains

Though i have updated the new password, this account getting locked frequently.  i see security events in connection server .

Event ID: 4625

Task Category : Logon

Failure reason : Unknown user name or bad password.

Screenshot attached.

[vBritinUSA]

Have you used this account for system DSN for Composer DB?

[sjesse]

did you also use the user/password for the events database?

[vBritinUSA]

Events DB only supports the SQL account that I know of but has to be something like that.

[sjesse]

It works if you force it, some people do not like sql auth.

[vBritinUSA]

interesting! I didn't ever try!

Yeah, I am one of them not wanting to use SQL accounts if possible.

[BenFB]

If the service account is truly only being used for Horizon then the locations you mentioned should cover it (vCenter, Composer and Domains). We recently saw something similar where we updated the service account password and Composer continue to use the old password. We followed Restart order of the View environment to clear ADLDS (ADAM) synchronization in Horizon View (2068381... and that resolved it.

[ymagalif]

v.balan77@gmail.com,

When you remove and add the service account in View administrator > View configuration > Servers > vCenter Servers for vCenter and Composer, you should use the User Principal Name format of the account, for example:

username@domainname.com

Do not use the down-level logon name like DOMAINNAME\username.

I know this sounds ridiculous, but this tip was a recommendation from VMware support for a different issue, and helped me.

This is due to a rare bug in View 7.x.

Perhaps it can help you in this issue.

Sincerely,

Yury Magalif

[v_balan77]

Issue not resolved.

1. This account only used in Horizon view environment and new password updated in View Admin page 

2. Account used either EventDB nor Composer DB DSN.

3. Tried update user name with UPN format username@domain but issue not resolved.

4. Also tried clean reboot option but no luck

Regards,

Balan V

[BenFB]

You need to track down what is locking out the service account. From the domain controllers you should be able to identify the IP. In the interim I would configure your service account to disable it from being locked out.