command works on windows, but fails on linux po... |VMware Communities

1 2 3 Previous Next 44 Replies Latest reply on Jul 1, 2019 1:01 AM by dalo Go to original post

30. Re: command works on windows, but fails on linux powercli (version issue)

LucD Apr 23, 2019 11:39 PM (in response to dalo)

Are you saying that when you logon to the Flex or H5 client with an AD account that doesn't hold the System.Read privilege on the vCenter, you don't get this error?
or
Like Show 0 Likes(0)

Actions
31. Re: command works on windows, but fails on linux powercli (version issue)

dalo Apr 23, 2019 11:51 PM (in response to LucD)

I'm saying, that if I login with the same (restricted) user as I tried above with the powercli into the H5/flash client it works.
The login worked also a few powercli versions before.
And I can create a VM in the ressource pool the user is assigned to.
Like Show 0 Likes(0)

Actions
32. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 10, 2019 10:56 PM (in response to dalo)

After waiting a long time I got an answer back from vmware engineering:

" user needs ReadOnly permission on the VC level. This is required for other PowerCLI functionalities like Tagging,ContentLibrary etc."

In my opinion, this really makes no sense, because as I told them: it works with an older PCLI Version, with REST and the with the GUI.
And we would and could not give everyone Permission on VC Level.

I will keep this updated.
Like Show 0 Likes(0)

Actions
33. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 21, 2019 12:59 AM (in response to dalo)

The login Issue is now fixed in 11.3.0.
The primary issue (create vm) is still not fixed.
Like Show 0 Likes(0)

Actions
34. Re: command works on windows, but fails on linux powercli (version issue)

LucD Jun 21, 2019 1:05 AM (in response to dalo)

Since many tests have been performed, when exactly is the New-VM not working?
Platform, account type, error message...
Like Show 0 Likes(0)

Actions
35. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 21, 2019 1:18 AM (in response to LucD)

Windows 10
new-vm version 11.3.0
user is a restricted user

new-vm -name blah -ResourcePool mypool -Location myfolder
new-vm : 21.06.2019 10:04:47    New-VM
At line:1 char:1
+ new-vm -name blah -ResourcePool mypool -Location myfolder
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [New-VM], VimException
    + FullyQualifiedErrorId : Core_BaseCmdlet_UnknownError,VMware.VimAutomation.ViCore.Cmdlets.Commands.NewVM
Like Show 0 Likes(0)

Actions
36. Re: command works on windows, but fails on linux powercli (version issue)

LucD Jun 21, 2019 2:00 AM (in response to dalo)

If I understand this correctly and taking into account your previous tests, you can now do less than before?
Before you were able to create a VM with that account on a Windows platform.
We are talking about PowerShell v5.1 I assume?
Like Show 0 Likes(0)

Actions
37. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 21, 2019 2:07 AM (in response to LucD)

I can do less then with version 10 (new-vm), but more then with 11.2 (login)
powershell is: 5.1.17134.765

Create a VM with this user is still possible in the Web or with REST.
Like Show 0 Likes(0)

Actions
38. Re: command works on windows, but fails on linux powercli (version issue)

LucD Jun 21, 2019 2:20 AM (in response to dalo)

Then I would suggest to re-open your SR (if it was already closed), and pass this new info (11.3.0) along.
Since I can't reproduce the issue you are seeing, it's hard for me to diagnose the the cause of the issue.
Like Show 0 Likes(0)

Actions
39. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 21, 2019 2:52 AM (in response to LucD)

The SR is still open, they provided me the workaround with setting RO permission on VC Level, but I hope the issue is fixed in a future release, because I could not give all users RO on toplevel.

Did you set the same restricted permissions to the user?
Our VC is 6.5, maybe that's the difference.
Like Show 0 Likes(0)

Actions
40. Re: command works on windows, but fails on linux powercli (version issue)

LucD Jun 21, 2019 2:53 AM (in response to dalo)

No, I'm on VC 6.7U1.
But I did test with the same privileges.
Like Show 0 Likes(0)

Actions
41. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 21, 2019 4:47 AM (in response to LucD)

That's interesting, I tried now on a VC 6.7 too, and I get a exception too.
Like Show 0 Likes(0)

Actions
42. Re: command works on windows, but fails on linux powercli (version issue)

LucD Jun 21, 2019 12:22 PM (in response to dalo)

I just checked again, and my test account had the System.Read privilege on the rootfolder, through a group membership.
So no, without System.Read on the rootfolder, it doesn't work.
Like Show 0 Likes(0)

Actions
43. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jun 23, 2019 11:10 PM (in response to LucD)

Thank you for re-checking, so I'm not completly wrong with this.

I will update if I get some news from the SR.
Like Show 0 Likes(0)

Actions
44. Re: command works on windows, but fails on linux powercli (version issue)

dalo Jul 1, 2019 1:01 AM (in response to dalo)

Finally I got an answer from VMware Engineering, they will fix this Issue in 11.5:

"[SR] Running new-vm cmdlet throws Core_BaseCmdlet_UnknownError after update to Powercli Version 11.1.0.
This happens because encryption feature has been added in 11.1. Now while preparing VmConfigSpec it tries to initialize CryptoManager which fails if user doesn't have appropriate permission to view CryptoManager. To fix this we will initialize CryptoManager on need basis."
Like Show 0 Likes(0)

Actions