VMware Cloud Community
fletch00
Enthusiast
Enthusiast

SSO logins failing since 5.1 upgrade

Anyone else seeing vCenter AD credenitals fail after upgrading to 5.1?

We have had to request the windows AD group to re-jigger their AD groups to regain access.

Also, we had to add DOM\ to our usual dom.username logins just to make it work

I presume there is a 5.1 upgrade section I missed on this / or ??

thanks

VCP5 VSP5 VTSP5 vExpert http://vmadmin.info
0 Kudos
7 Replies
vmfcraig
Enthusiast
Enthusiast

Have you added your permissions by going into the vSphere Client right click at top level and then add your AD Group for Authentication?

Blog - vmfocus.com Twitter - @Craig_Kilborn
0 Kudos
fletch00
Enthusiast
Enthusiast

No - why should vCenter rights be denied (only certain users?) after an upgrade? SSO new "feature" is suspected in this case

Anyone else with AD  wisdom willing to contribute?

thanks

VCP5 VSP5 VTSP5 vExpert http://vmadmin.info
0 Kudos
vmfcraig
Enthusiast
Enthusiast

OK first of all, using domain\ is a new feature of vSphere 5.1 so get used to it.

Second of all, check your AD permissions, if users are members of multiple groups with different vSphere permissions this is most likely your reason for conflict.

Blog - vmfocus.com Twitter - @Craig_Kilborn
0 Kudos
fletch00
Enthusiast
Enthusiast

thanks  - its gratifying to get a fast response

Why should an upgrade cause login failures?

I'm basically appealing to VMware to supply the 5.1 doc I missed on this upgrade

1/2 our admin team can no longer login to vCenter

thanks

VCP5 VSP5 VTSP5 vExpert http://vmadmin.info
0 Kudos
fletch00
Enthusiast
Enthusiast

"if users are members of multiple groups this is most likely your reason for conflict."

Wait what? - KB citation please?

VCP5 VSP5 VTSP5 vExpert http://vmadmin.info
0 Kudos
Rubeck
Virtuoso
Virtuoso

Hi..

Regarding the adding of DOM\ to your usual dom.username, have the  DOM been set as a  default domain within SSO?
(Sign-On and Discovery /Configuration)

Are you using Windows session credentials? If so this KB might be of interest... http://kb.vmware.com/kb/2037408

/Rubeck

0 Kudos
fletch00
Enthusiast
Enthusiast

Thanks - you were right, I needed to add and reorder another default domain

The docs were helpful for this

thanks!

VCP5 VSP5 VTSP5 vExpert http://vmadmin.info
0 Kudos