VMware Horizon Community
gpeck29adv
Contributor
Contributor
‎07-13-2015 09:53 AM

Multiple Domains

Trying to configure App Volumes in a multiple domain environment, where the domain (DOMAIN1) that the App Volumes Managers are installed has a 2 way direct trust with the other domain (DOMAIN2). Issue that we are having is when a user in DOMAIN2 logs into View, the AppStack isn't mounted.

Setup

AppStack (BASE_Applications_v1.0) is created and works for local users

AppStack Group (G_APPVOL_Base_Apps) is created in DOMAIN1

AppStack is assigned to DOMAIN1\G_APPVOL_Base_Apps

DOMAIN1\User1 added to the G_APPVOL_Base_Apps) group

DOMAIN2\User2 added to the G_APPVOL_Base_Apps) group

Domain1\User1 logs in without issue and gets AppStack loaded

Domain2\User2 lobs in and AppStack is NOT loaded.

MODIFIED SETUP

Save as above, except:

AppStack is assigned to DOMAIN2\User2

In Modified Setup, DOMAIN2\User2 gets the AppStack

The goal is 1 group assignment, and users/groups added to that 1 group for AppStack assignment without regard to the domain of the user or group added to the group.

LOG Information for User2 login in original setup:

2015-07-13 14:57:25 UTC] P2892R3496  INFO Started GET "/user-login?name=svservice&uuid=423a7f6e-d0e5-0628-a47e-45b1b0506998&status=0&osver=6.1.7601&sp=1.0&suite=256&product=1&arch=9&proc=2&agentver=2.9.0.839U&username=User2&domain=DOMAIN1&userdomain=DOMAIN2&workstation=COETEST002&machinesid=S-1-5-21-2519256555-1071686382-2677787016" for 127.0.0.1 at 2015-07-13 10:57:25 -0400

[2015-07-13 14:57:25 UTC] P2892R3496  INFO (NTLM) Authenticating URL "/user-login"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO (NTLM) Received NTLM authentication to /user-login (type 3)

[2015-07-13 14:57:25 UTC] P2892R3496  INFO (NTLM) User: "User2"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO (NTLM) Workstation: "COETEST002"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO (NTLM) Domain: "DOMAIN2"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO (NTLM) Authenticating user User2 on domain DOMAIN2

[2015-07-13 14:57:25 UTC] P2892R3496  INFO      RADIR: Connection to AD domain2.com succeeded - Took 109ms

[2015-07-13 14:57:25 UTC] P2892R3496  INFO Processing by Agent::UsersController#login as HTML

[2015-07-13 14:57:25 UTC] P2892R3496  INFO   Parameters: {"name"=>"svservice", "uuid"=>"423a7f6e-d0e5-0628-a47e-45b1b0506998", "status"=>"0", "osver"=>"6.1.7601", "sp"=>"1.0", "suite"=>"256", "product"=>"1", "arch"=>"9", "proc"=>"2", "agentver"=>"2.9.0.839U", "username"=>"User2", "domain"=>"DOMAIN1", "userdomain"=>"DOMAIN2", "workstation"=>"COETEST002", "machinesid"=>"S-1-5-21-2519256555-1071686382-2677787016"}

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Manager version: "2.9.0.23" - Running as “SRVAPPVOL01$@DOMAIN1"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO    Manager: User Login: upn=DOMAIN2\User2 account=User2 (domain)

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Loaded existing record for "Computer <DOMAIN1\COETEST002$>"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Found existing user "User <DOMAIN2\User2>"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Re-using "#<Cvo::Hypervisor::VcentersAdapter:0x517d1d8>" - 435806 secs old - Not yet connected

[2015-07-13 14:57:25 UTC] P2892R3496  INFO   RvSphere: Error while pinging VMware connection to root@esx_host1.DOMAIN1.local: end of file reached

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Unable to ping "#<Cvo::Hypervisor::EsxAdapter:0x50c14e0>" - 7249 secs old - Ping took 31ms

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Connecting directly to "esx_host1.DOMAIN1.local" for "Machine <coetest002> (503a4f5e-8c77-9c64-e6e9-4e883bea7bba)"

[2015-07-13 14:57:25 UTC] P2892R3496  INFO   RvSphere: Connection to VMware root@esx_host1.DOMAIN1.local succeeded - Took 94ms

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Preparing for login of "User <DOMAIN2\User2>" - previous logins: 3, last login: 2015-07-10 15:37:27 UTC

[2015-07-13 14:57:25 UTC] P2892R3496  INFO        Cvo: Saved login of "User <DOMAIN2\User2>" into "Computer <DOMAIN1\COETEST002$>"

[2015-07-13 14:57:26 UTC] P2892R3496  INFO        Cvo: Attaching 0 volumes for "User <DOMAIN2\User2>"

[2015-07-13 14:57:26 UTC] P2892R3496  INFO   Rendered text template (0.0ms)

[2015-07-13 14:57:26 UTC] P2892R3496  INFO Completed 200 OK in 514.8ms (Views: 0.0ms | ActiveRecord: 109.2ms)

[2015-07-13 14:57:26 UTC] P2892R3496  INFO

Log Info from Modified Setup

[2015-07-13 16:14:31 UTC] P2364R3585  INFO Started GET "/view_broker/sessions/start?vcenter_url=https://vcenter_server.DOMAIN1.local:443/sdk&server_dn=cn=934b3370-c149-4d1a-8787-a2bca71c0bd6,ou=se..." for 127.0.0.1 at 2015-07-13 12:14:31 -0400

[2015-07-13 16:14:31 UTC] P2364R3585  INFO Processing by ViewBroker::SessionsController#start as HTML

[2015-07-13 16:14:31 UTC] P2364R3585  INFO   Parameters: {"vcenter_url"=>"https://vcenter_server.DOMAIN1.local:443/sdk", "server_dn"=>"cn=934b3370-c149-4d1a-8787-a2bca71c0bd6,ou=servers,dc=vdi,dc=vmware,dc=int", "server_dns_name"=>"coetest003.DOMAIN1.local", "rdsh"=>"false", "vm_ref"=>"vm-7004", "username"=>"User2", "user_domain"=>"DOMAIN2", "guid"=>"a5619084-92f2-4159-a1f7-c0860295f994", "av_broker_version"=>"2.6.0.6"}

[2015-07-13 16:14:31 UTC] P2364R3585  INFO        Cvo: Manager version: "2.9.0.23" - Running as "APPVOL01$@DOMAIN1"

[2015-07-13 16:14:31 UTC] P2364R3585  INFO    Manager: ViewBroker Session Start: vCenterURL: https://vcenter_server.DOMAIN1.local:443/sdk

[2015-07-13 16:14:31 UTC] P2364R3585  INFO    Manager: Requested by true

[2015-07-13 16:14:31 UTC] P2364R3585  INFO   RvSphere: Connection to VMware svc_vcenter_account@DOMAIN1.local@vcenter_server.DOMAIN1.local succeeded - Took 250ms

[2015-07-13 16:14:31 UTC] P2364R3585  INFO        Cvo: Eliminating old session found during Session Start:

[2015-07-13 16:14:31 UTC] P2364R3585  INFO        Cvo: ViewBroker <2dd20929-a03e-477e-8c80-cf8e330485e9> "" on "Computer <DOMAIN1\coetest003$>" (pending)

[2015-07-13 16:14:31 UTC] P2364R3585  INFO        Cvo: Configuration has changed, disconnecting cached AD adapter from

[2015-07-13 16:14:31 UTC] P2364R3585  INFO      RADIR: Connection to AD DOMAIN1.local succeeded - Took 109ms

[2015-07-13 16:14:31 UTC] P2364R3585  INFO        Cvo: Found existing user "User <DOMAIN2\User2>"

[2015-07-13 16:14:31 UTC] P2364R3585  INFO        Cvo: Using trust account “trust_user” to connect to "domain2.com" for "domain2.com"

[2015-07-13 16:14:32 UTC] P2364R3585  INFO      RADIR: Connection to AD domain2.com succeeded - Took 109ms

[2015-07-13 16:14:32 UTC] P2364R3585  INFO        Cvo: Re-using "#<Cvo::Hypervisor::VcentersAdapter:0x756ffa8>" - 504 secs old - Not yet connected

[2015-07-13 16:14:32 UTC] P2364R3585  INFO   RvSphere: Connection to VMware svc_vcenter_account@DOMAIN1.local@vcenter_server.DOMAIN1.local succeeded - Took 250ms

[2015-07-13 16:14:32 UTC] P2364R3585  INFO        Cvo: Attaching 1 volumes for "User <DOMAIN2\User2>"

[2015-07-13 16:14:32 UTC] P2364R3585  INFO        Cvo: Mounting volumes for "User <DOMAIN2\User2>" to "Computer <DOMAIN1\coetest003$>" on "Windows Desktop OS"

[2015-07-13 16:14:32 UTC] P2364R3585  INFO   RvSphere: Connection to VMware svc_vcenter_account@DOMAIN1.local@vcenter_server.DOMAIN1.local succeeded - Took 265ms

[2015-07-13 16:14:33 UTC] P2364R3585  INFO        Cvo: Acquiring mount lock for "Machine <coetest003> (503a1d13-b431-0d6c-b5c5-2de1f5d13670)" - Currently: available

[2015-07-13 16:14:33 UTC] P2364R3585  INFO   RvSphere: Connection to VMware svc_vcenter_account@DOMAIN1.local@vcenter_server.DOMAIN1.local succeeded - Took 265ms

[2015-07-13 16:14:33 UTC] P2364R3585  INFO   RvSphere: Mounting 1 volume(s) in VM "coetest003" (503a1d13-b431-0d6c-b5c5-2de1f5d13670) on VMware "svc_vcenter_account@DOMAIN1.local@vcenter_server.DOMAIN1.local"

[2015-07-13 16:14:33 UTC] P2364R3585  INFO   RvSphere: Attaching read-only volume "[appvol01] cloudvolumes/apps/Applications_Base_v1.1.vmdk" to VM "coetest003"

[2015-07-13 16:14:33 UTC] P2364R3585  INFO   RvSphere: Preparing to reconfigure VM  coetest003" (503a1d13-b431-0d6c-b5c5-2de1f5d13670) <running>

[2015-07-13 16:14:35 UTC] P2364R3585  INFO        Cvo: Volume "Applications_Base_v1.1" now has 1 current attachment(s) and 5 total attachment(s)

[2015-07-13 16:14:35 UTC] P2364R3585  INFO        Cvo: Successful mount actions for 1 volume(s) appended to response

[2015-07-13 16:14:35 UTC] P2364R3585  INFO   Rendered text template (0.0ms)

[2015-07-13 16:14:35 UTC] P2364R3585  INFO Completed 200 OK in 4040.5ms (Views: 0.0ms | ActiveRecord: 358.8ms)

Reply
0 Kudos
0 Replies