VMware Cloud Community
dimwoo
Contributor
Contributor

Permission error with set-vmguestnetworkinterface

Hi,

When running  Set-VMGuestNetworkInterface  -VMGuestNetworkInterface $nictest -GuestUser pool\userid -GuestPassword password  -Ip 10.1.80.99

I get a a permissions error:

"Error occured while configuring the network:'The requested operation requires el
evation (Run as administrator).

Access is denied."
I've kind of been round the houses with this problem. In this discussion - http://communities.vmware.com/message/2121373#2121373 - I found out I needed to use powercli 5.1 and update our ESX server to 4.0 update 4 to be able to run the get\set vmguestnetworkinterface commands without using ESX host credentials. I did this and no longer got the permission errors with get-VMGuestNetworkInterface. But as soon as I reached a point where I tried touse the Set-VMGuestNetworkInterface command I'm being prompted for permissions again.
The guest os account I am using with the Set-VMGuestNetworkInterface command is a domain admin and allows me to manually change ip without any security prompts or errors.
I am using Windows XP SP3, powershell 2.0, powercli 5.1.0.4977 (the latest) with VIX 1.10.0.12331. There are six ESX 4.0 servers, only the one that is hosting my VM has been updated to update 4  (v4.0.0 787047), the rest are still on update 3. (v4.0.0 294855).
I've got all the .Net frameworks installed: 1.1, 2.0 with SP2, 3.0 with SP2, 3.5 with SP1, 4 client profile & 4 extended.
Guest OS is Windows 2008 Standard R2, VMTools is running as local service account.
What can I do to make this work? As far as I can tell I'm on the correct versions to allow this to happen without supplying ESX host credentials. But still it insolently defies my authority!!!!
If it's any use, the Vmware-VIX log for this request is below (note powercli is set to ignore certificate errors):

Oct 09 10:50:55.750: app-7040| VixHost_ConnectEx: version -1, hostType 1, hostName https://lsnoap027.contopronto.com/sdk, hostPort 902, options 128
Oct 09 10:50:59.562: app-7124| WSAEventSelect() on closed socket, ignoring.
Oct 09 10:51:00.328: app-7124| Vix: [7124 vixVIMProxy.c:3417]: VixVIMVmRequestTicketImpl: requesting new guestControl ticket for VM '[Data1] AS01.pool.local-Pool8/AS01.pool.local-Pool8.vmx'
Oct 09 10:51:01.015: app-6068| Encountered other certificate error: 27
Oct 09 10:51:01.015: app-6068| SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
Oct 09 10:51:01.015: app-6068|
Oct 09 10:51:01.015: app-6068| * A certificate in the host's chain is based on an untrusted root.
Oct 09 10:51:01.015: app-6068|
Oct 09 10:51:01.015: app-6068| * Other certificate trust error.
Oct 09 10:51:01.015: app-6068| SSLVerifyIsEnabled: failed to read registry value. Falling back to default behavior: verification off. LastError = 0
Oct 09 10:51:01.015: app-6068| SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the error
Oct 09 10:51:01.453: app-6068| Encountered other certificate error: 27
Oct 09 10:51:01.453: app-6068| SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
Oct 09 10:51:01.453: app-6068|
Oct 09 10:51:01.453: app-6068| * A certificate in the host's chain is based on an untrusted root.
Oct 09 10:51:01.453: app-6068|
Oct 09 10:51:01.453: app-6068| * Other certificate trust error.
Oct 09 10:51:01.453: app-6068| SSLVerifyIsEnabled: failed to read registry value. Falling back to default behavior: verification off. LastError = 0
Oct 09 10:51:01.453: app-6068| SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the error
Oct 09 10:51:01.609: app-7124| Vix: [7124 foundryVMPowerOps.c:3769]: FoundryVMFinishGetNonceFromVMX: Failed to get nonce from VMX, err = 3001.
Oct 09 10:51:27.265: app-7124| VixVM_FinalRelease: Close VM socket.
Oct 09 10:51:27.609: app-7124| WSAEventSelect() on closed socket, ignoring.
Oct 09 10:53:36.000: app-6168| VixHost_ConnectEx: version -1, hostType 1, hostName https://lsnoap027.contopronto.com/sdk, hostPort 902, options 128
Oct 09 10:53:39.593: app-7124| WSAEventSelect() on closed socket, ignoring.
Oct 09 10:53:40.343: app-7124| Vix: [7124 vixVIMProxy.c:3417]: VixVIMVmRequestTicketImpl: requesting new guestControl ticket for VM '[Data1] AS01.pool.local-Pool8/AS01.pool.local-Pool8.vmx'
Oct 09 10:53:40.984: app-7372| Encountered other certificate error: 27
Oct 09 10:53:40.984: app-7372| SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
Oct 09 10:53:40.984: app-7372|
Oct 09 10:53:40.984: app-7372| * A certificate in the host's chain is based on an untrusted root.
Oct 09 10:53:40.984: app-7372|
Oct 09 10:53:40.984: app-7372| * Other certificate trust error.
Oct 09 10:53:40.984: app-7372| SSLVerifyIsEnabled: failed to read registry value. Falling back to default behavior: verification off. LastError = 0
Oct 09 10:53:40.984: app-7372| SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the error
Oct 09 10:53:41.468: app-7372| Encountered other certificate error: 27
Oct 09 10:53:41.468: app-7372| SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
Oct 09 10:53:41.468: app-7372|
Oct 09 10:53:41.468: app-7372| * A certificate in the host's chain is based on an untrusted root.
Oct 09 10:53:41.468: app-7372|
Oct 09 10:53:41.468: app-7372| * Other certificate trust error.
Oct 09 10:53:41.468: app-7372| SSLVerifyIsEnabled: failed to read registry value. Falling back to default behavior: verification off. LastError = 0
Oct 09 10:53:41.468: app-7372| SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the error
Oct 09 10:53:41.640: app-7124| Vix: [7124 foundryVMPowerOps.c:3769]: FoundryVMFinishGetNonceFromVMX: Failed to get nonce from VMX, err = 3001.
Oct 09 10:54:06.437: app-7124| VixVM_FinalRelease: Close VM socket.
Oct 09 10:54:06.687: app-7124| WSAEventSelect() on closed socket, ignoring.
Oct 09 10:54:06.750: app-7124| WSAEventSelect() on closed socket, ignoring.
Oct 09 10:54:10.250: app-6168| VixHost_ConnectEx: version -1, hostType 1, hostName https://lsnoap027.contopronto.com/sdk, hostPort 902, options 128
Oct 09 10:54:13.890: app-7124| WSAEventSelect() on closed socket, ignoring.
Oct 09 10:54:14.796: app-7124| Vix: [7124 vixVIMProxy.c:3417]: VixVIMVmRequestTicketImpl: requesting new guestControl ticket for VM '[Data1] AS01.pool.local-Pool8/AS01.pool.local-Pool8.vmx'
Oct 09 10:54:15.437: app-5176| Encountered other certificate error: 27
Oct 09 10:54:15.437: app-5176| SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
Oct 09 10:54:15.437: app-5176|
Oct 09 10:54:15.437: app-5176| * A certificate in the host's chain is based on an untrusted root.
Oct 09 10:54:15.437: app-5176|
Oct 09 10:54:15.437: app-5176| * Other certificate trust error.
Oct 09 10:54:15.437: app-5176| SSLVerifyIsEnabled: failed to read registry value. Falling back to default behavior: verification off. LastError = 0
Oct 09 10:54:15.437: app-5176| SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the error
Oct 09 10:54:15.953: app-5176| Encountered other certificate error: 27
Oct 09 10:54:15.953: app-5176| SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
Oct 09 10:54:15.953: app-5176|
Oct 09 10:54:15.953: app-5176| * A certificate in the host's chain is based on an untrusted root.
Oct 09 10:54:15.953: app-5176|
Oct 09 10:54:15.953: app-5176| * Other certificate trust error.
Oct 09 10:54:15.953: app-5176| SSLVerifyIsEnabled: failed to read registry value. Falling back to default behavior: verification off. LastError = 0
Oct 09 10:54:15.953: app-5176| SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the error
Oct 09 10:54:16.125: app-7124| Vix: [7124 foundryVMPowerOps.c:3769]: FoundryVMFinishGetNonceFromVMX: Failed to get nonce from VMX, err = 3001.
Oct 09 10:54:21.203: app-7124| VixVM_FinalRelease: Close VM socket.

0 Kudos
0 Replies