while trying to find a hint for a differnt problem I discovered tons of messages like this one in syslog.log
sfcb-CIMXML-Processor: pam_succeed_if(sfcb:auth): error retrieving information about user xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Does someone have clue where this might come from? Or how I can find it out?
I can't give you an answer but I have exactly the same problem as you.
I Have the latest version of ESXi with the latest version of VCSA but I can't figure out how to solve this problem or at least find information about the user.
i noticed the same message in esxi6u2.
do you maybe have an nfs datastore mounted on your esxi-hosts and using active directory at your site?
... maybe there is a relation to this topic: Using the ESX Admins AD group with ESX/ESXi 4.1 and ESXi 5.x/6.x domain membership and user authenti... and vmware did not update the log-messages in the kb yet .)