vCenter appliance and AD authentication

[DanieleFiore201]

Dear guys,

i'm struggling to have vcenter appliance authenticating against a DC.

I want to join the server in the domain but i get error :

Error: LW_ERROR_KRB5_REALM_CANT_RESOLVE [code 0x0000a3e1]

What does it mean ?

1st : do i need join the appliance in the AD domain?

Any help is appreciated.

Daniele

[Troy_Clavell]

have you tried joining AD through the CLI of the appliance?

http://kb.vmware.com/kb/2002626

As for if you need the vCenter appliance in the domain.  It's not a requirement

[DanieleFiore201]

hi Troy,

i used exactly this article without luck.

[herseyc]

Just a couple things you may want to check.

Make sure the appliance can resolve your domain and domain controllers through DNS.  This error is more than likely caused by the fact it cannot resolve the ip addresses.

Also, check the time on you vCenter Appliance.  Time being way off from your AD DCs can cause kerberos issues.

The vCenter appliance does not need to be a domain member but if it is not you will not be able to use domain user authentication to access vCenter with the vSphere client.

Hope this helps.

Hersey

[DanieleFiore201]

well i did that already amd it worked.

[DanieleFiore201]

feedback : just informed that our LDAP servers accept only encrypted connection.

I have to work on it now.

So long.