Vcenter 6.0 locking out AD account

[huzer1]

We have an issue where after a password change in AD some of our vcenter users are getting their accounts locked out because vcenter is trying to authenticate against the domain with a bad password, any ideas? I was unable to find anything useful in vpxd.log.

[scott28tt]

Moderator: Moved to vCenter Server

[ryanrpatel]

Is vCenter joined to the Domain using integrated AD authentication or you're using it as ldap auth? Is this multiple users, service account, or something else? Did the AD team determine that the source of the lockout was vCenter? Wasn't sure if they used Download Account Lockout and Management Tools from Official Microsoft Download Center to determine this.

[huzer1]

Thanks for the reply. Vcenter is using LDAP for auth. This is multiple user accounts (vcenter admins) They determined the source through a utility that basically parses logs on domain controllers.

[ryanrpatel]

Can you get a maintenance window for a vCenter reboot?

[huzer1]

So we did a reboot on vcenter last week and the issue persisted through the reboot.

[ryanrpatel]

also, do you have vRLI by chance? It might help you track something down.

[msripada]

Select vCenter server -> Monitor -> Event -> find out the failed user session and it provides and IP address

User login failed session is coming from that machine or an application installed from that IP address is trying to reach vcenter

stop one by one services like netapp, veeam, backups or monitoring tools etc and see if the requests stopped

thanks,

MS

[rshenoy]

This happens when the services is configured or cached with the old password. As per the above post the best way would be monitor the failed user session.Under initiator tab you would find the IP address. Further troubleshooting needs to be performed logging in to it.

Regards,

Ritesh