VMware Cloud Community
Naineyess
Enthusiast
Enthusiast

Error while adding a powershell host..

Hi,

I am trying to add PowerShell host (following http://pubs.vmware.com/vsphere-55/index.jsp#com.vmware.vsphere.vco_use_plugins.doc/GUID-88A9A9A1-CF0... ) and I am getting error as "Client not found in Kerberos database (6) (Dynamic Script Module name : addPowerShellHost#16)" , I am not sure what is wrong, please help me to resolve this issue..

Thanks !!

http://pubs.vmware.com/vsphere-55/index.jsp#com.vmware.vsphere.vco_use_plugins.doc/GUID-88A9A9A1-CF0...

Reply
0 Kudos
4 Replies
igaydajiev
VMware Employee
VMware Employee

This means krb5.conf miss configuration. Could you provide your krb5.conf file
The above error is not vCO specific so you can google for it and for possible causes.

Reply
0 Kudos
Naineyess
Enthusiast
Enthusiast

I have configured krb5.conf file as per it is mentioned in the document...

[libdefaults]

default_realm = mydomainname.com

udp_preferences_limit = 1 [realms]

mydomainname.com = {

kdc = kdc.yourdomain.com

default_domain = yourdomain.com

}  [domain_realms]

.yourdomain.com=mydomainname.com

yourdomain.com=mydomainname.com

please check and let me know if I missed something or what is wrong ?

Reply
0 Kudos
igaydajiev
VMware Employee
VMware Employee

Note that case and formating and letter case matters.

Usually the realm name names are all capital letters and domains are small one

Also mydomain and yourdomain are provided as example values and need to be replaced with real REALM name and domain names.

kdc.yourdomain.com is also provided as example and need to point to actuall ip/host name of your kdc server (key distibution center)

You can check here [vCO PowerShell plugin] How to set up and use Kerberos authentication | VMware vCenter Orchestrator ...

krb5.conf is not specific to vCO and you can read more what different section means here :krb5.conf — MIT Kerberos Documentation

Reply
0 Kudos
SpasKaloferov
VMware Employee
VMware Employee

HI ,

for one is should be [domain_realm] and not [domain_realms]

Check the "Edit the Kerberos Domain Realm on the vCO Appliance (Optional/Scenario specific)" chapter from the following article:

http://kaloferov.com/blog/using-credssp-with-the-vco-powershell-plugin/

Best regards,

Spas Kaloferov

Reply
0 Kudos