I'm setting up my vCD-Environment. Except for the following stumbling blocks everything went fine, until now...
- You can skip this part -
enable-password hash $hash
user passwordreset password hash $hash
ntp server 0.de.pool.ntp.org
ip name server <ip>
ip address $ip/net
ip route 0.0.0.0/0 $gw
Looks pretty normal, I guess... The vSM web interface is reachable so I configured the lookup service URL, configured the DNS servers, the NTP server and registered vSM in my vCenter. The vSM Admin user is the builtin admin. For the connection to the vCenter server I used a service account that is vCenter admin as well as vSM enterprise admin.
Then I started the vCD quick start wizard. It first asks me to connect to vSM, so I gave it the same account that I used to connect to the VC and also is enterprise admin in vSM.
The wizard tells me: vCD: Network connection to vShield Manager failed.
After I saw in the cell.log that the cell started fine I looked in the logs (/opt/vmware/vcloud-director/logs) and found in vcloud-container-info.log the following exception that is being thrown every time i try to register vSM in vCD:
2013-01-23 18:08:02,563 | INFO | pool-jetty-52 | ShieldSessionManager | Test connection to vsm:$ip vsmManager.loginToVSM(). |
2013-01-23 18:08:02,564 | INFO | pool-jetty-52 | CapabilityManager | VSMCLIENT-2.0.0 getVsmVersion; URI :https://$ip:443/api/1.0/global/heartbeat |
2013-01-23 18:09:05,565 | INFO | pool-jetty-52 | ShieldSessionManager | Test connection with vsm:$ip failed to establish. |
com.vmware.vshield.vsmclient.exceptions.VSMNotReachableException: Network connection to vShield Manager failed
I couldn't believe the vSM machine wasn't reachable since the VC plugin worked just fine.
I then tried to ping the vSM from the vCD RHEL console: no echo reply. I was not sure whether the vSM is supposed to be pingable at all, so I tried a ping from my VC: success! Wait, what? The VC, the vSM and the vCD machine are on the same dvPortgroup in the same subnet and share the same VLAN... and just to be sure I put them on the same Host! The vCD RHEL has its iptables firewall completely turned off so I don't see any chanche that it blocks this echo requests or replys.
I'm running out of ideas here. Can you please help?
Thanks & kind regards,