Can't add entitlement to a virtual desktop

[itechno]

Hi,

I finally succeeded in installing VDM Connection Server and adding a virtual desktop to it's inventory, but I failed to entitle users to this desktop. The list of users in the Entitlement box is desperatly empty.

In the Infrastructure Client, I granted "Virtual Machine User permission" to the virtual desktop for some users of the domain but it's obviously not enough.

What did I miss ?

Thanks

Manu

[mittim12]

When you open the entitlment box and click add you have the option to search for users in AD. Do you not return any results when searching?

If you found this or any other post helpful please consider the use of the Helpfull/Correct buttons to award points

[itechno]

No, the search tool returns nothing. Even when I search for the correct name of a known user.

The problem may be in AD. Is there something special to do in AD, such as creating a group or granting permission ? Or is it in the ADAM ADSI Edit tool ?

Manu

[dougdavis22]

I don't think you will find any problem with AD, or will you find ADAM ADSI Edit of any help.

As long as your VDM Server is a member of the AD domain that you are searching against (or trusted domains), you should have no problem in finding users using the search facility. The only other thing could be connectivity between the VDM Server and AD DCs - are there any firewalls in between that could be blocking domain traffic?

Doug.

[mittim12]

No, the search tool returns nothing. Even when I search for the correct name of a known user.

The problem may be in AD. Is there something special to do in AD, such as creating a group or granting permission ? Or is it in the ADAM ADSI Edit tool ?

Manu

My installation worked out of the box will all of the defaults. There was no extra configuration for AD that was needed. Is your VDM server joined to the domain?

If you found this or any other post helpful please consider the use of the Helpfull/Correct buttons to award points

[itechno]

The VDM Server joined the domain. The firewalls on all the servers involved (VDM Server, AD DC, VMware Infrastructure Management) are deactivated.

Each time I try to find a user, 3 errors appear in the Events :

Error 1:

Active Directory query resulted in an error. com.vmware.vdi.admin.ui.AddEntitlementBean.find(SourceFile:183)
com.vmware.vdi.ob.admin.cz: AD Query: error executing LDAP AD Query
at com.vmware.vdi.ob.admin.bc.a(SourceFile:275)
at com.vmware.vdi.ob.admin.bc.a(SourceFile:346)
at com.vmware.vdi.admin.ui.AddEntitlementBean.find(SourceFile:171)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.el.parser.AstValue.invoke(AstValue.java:151)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:283)
at com.sun.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:68)
at com.sun.facelets.el.LegacyMethodBinding.invoke(LegacyMethodBinding.java:69)
at javax.faces.component.UICommand.broadcast(UICommand.java:305)
at org.ajax4jsf.framework.ajax.AjaxActionComponent.broadcast(AjaxActionComponent.java:55)
at org.ajax4jsf.ajax.UIInclude.broadcast(UIInclude.java:141)
at org.ajax4jsf.framework.ajax.AjaxViewRoot.processEvents(AjaxViewRoot.java:180)
at org.ajax4jsf.framework.ajax.AjaxViewRoot.broadcastEvents(AjaxViewRoot.java:158)
at org.ajax4jsf.framework.ajax.AjaxViewRoot.processApplication(AjaxViewRoot.java:346)
at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:75)
at com.sun.faces.lifecycle.LifecycleImpl.phase(LifecycleImpl.java:200)
at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:90)
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:197)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.ajax4jsf.framework.ajax.xmlfilter.BaseXMLFilter.doXmlFilter(BaseXMLFilter.java:127)
at org.ajax4jsf.framework.ajax.xmlfilter.BaseFilter.doFilter(BaseFilter.java:277)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at com.vmware.vdi.admin.be.filters.FileUploadFilter.doFilter(SourceFile:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at com.vmware.vdi.admin.be.filters.LoginFilter.doFilter(SourceFile:52)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
at java.lang.Thread.run(Unknown Source)
Caused by: com.vmware.vdi.common.winauth.WinAuthCodifiedException: Failed to list users: Could not execute directory query with filter (&(objectCategory=user)(objectClass=user)(|(cn=ET)(sAMAccountName=ET)))
AD Query error occurred, HRESULT: 80004003
at com.vmware.vdi.common.winauth.WinAuthCodifiedException.fromResponse(SourceFile:103)
at com.vmware.vdi.common.winauth.ad.WinAuthADUtils.baseADQuery(SourceFile:76)
at com.vmware.vdi.ob.admin.bc.a(SourceFile:266)
... 45 more

Error 2:

Could not execute directory query with filter (&(objectCategory=user)(objectClass=user)(|(cn=ET)(sAMAccountName=ET)))
AD Query error occurred, HRESULT: 80004003

Error 3:

AD Query: error executing LDAP AD Query com.vmware.vdi.ob.admin.bc.a(SourceFile:274)
com.vmware.vdi.common.winauth.WinAuthCodifiedException: Failed to list users: Could not execute directory query with filter (&(objectCategory=user)(objectClass=user)(|(cn=ET)(sAMAccountName=ET)))
AD Query error occurred, HRESULT: 80004003
at com.vmware.vdi.common.winauth.WinAuthCodifiedException.fromResponse(SourceFile:103)
at com.vmware.vdi.common.winauth.ad.WinAuthADUtils.baseADQuery(SourceFile:76)
at com.vmware.vdi.ob.admin.bc.a(SourceFile:266)
at com.vmware.vdi.ob.admin.bc.a(SourceFile:346)
at com.vmware.vdi.admin.ui.AddEntitlementBean.find(SourceFile:171)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.el.parser.AstValue.invoke(AstValue.java:151)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:283)
at com.sun.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:68)
at com.sun.facelets.el.LegacyMethodBinding.invoke(LegacyMethodBinding.java:69)
at javax.faces.component.UICommand.broadcast(UICommand.java:305)
at org.ajax4jsf.framework.ajax.AjaxActionComponent.broadcast(AjaxActionComponent.java:55)
at org.ajax4jsf.ajax.UIInclude.broadcast(UIInclude.java:141)
at org.ajax4jsf.framework.ajax.AjaxViewRoot.processEvents(AjaxViewRoot.java:180)
at org.ajax4jsf.framework.ajax.AjaxViewRoot.broadcastEvents(AjaxViewRoot.java:158)
at org.ajax4jsf.framework.ajax.AjaxViewRoot.processApplication(AjaxViewRoot.java:346)
at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:75)
at com.sun.faces.lifecycle.LifecycleImpl.phase(LifecycleImpl.java:200)
at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:90)
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:197)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.ajax4jsf.framework.ajax.xmlfilter.BaseXMLFilter.doXmlFilter(BaseXMLFilter.java:127)
at org.ajax4jsf.framework.ajax.xmlfilter.BaseFilter.doFilter(BaseFilter.java:277)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at com.vmware.vdi.admin.be.filters.FileUploadFilter.doFilter(SourceFile:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at com.vmware.vdi.admin.be.filters.LoginFilter.doFilter(SourceFile:52)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
at java.lang.Thread.run(Unknown Source)

I'm not a java specialist, but meybe it can help

[mittim12]

Was this a fresh install of VDM and the server OS?

[markbenson]

I think you have a problem with the relationship between you member server and the domain controller. Can you unjoin the server from the domain and re-join it. At VDM Connection Server installation these things are checked.

Can you succesfully do a Windows login to the VDM Connection Server using a domain account? Can you also check the Windows Event Logs to see if there are errors reported.

Thanks.

Mark.

[itechno]

Yes the server OS and the VDM Server are fresh install

[itechno]

I think you have a problem with the relationship between you member server and the domain controller. Can you unjoin the server from the domain and re-join it. At VDM Connection Server installation these things are checked.

Can you succesfully do a Windows login to the VDM Connection Server using a domain account? Can you also check the Windows Event Logs to see if there are errors reported.

Thanks.

Mark.

I can succesfully log in to the VDM Connection Server using a domain account.

The Windows Event Viewer says the same messages as the Events from VDM Server, with this additional one : "No domain controller is available for the specified domain "RETD" or the domain does not exist".

So I agree with you : thers is a problem between the Domain controller and the VDM Server.

Manu

[itechno]

I finally found where the problem was. The DNS and WINS server was incorrectly configured, it had nothing to do with VDM Connection Server. Sorry for that.

Thanks to all of you who spent time on my little problem.

Manu

[markbenson]

I'm glad you've sorted it out. Thanks for posting back.

Mark.

[chida_bshss]

Hi,

I have installed VDm connection server successfully, but i am getting the same problem which you have described ie entitlement of virtual desktops.

You have told that you solved your problem,Would you please describe me the fault which you had done during configuration of DNS and WINS server.

please help me,

i have got strucked...

Thanks in Advance...