brianwatrous Tracker

Pages, not steps

brianwatrous — Thu, 28 Oct 2021 15:58:49 GMT

Finally realized why my students keep calling pages in the VLP lab manuals "steps". It is because the VLP manual calls pages steps. Sigh...

(See attachment)

In the attached screenshot, the top of the lab manual says "Step 70".

In my lingo, 70 isn't a step number. It is a "page" number.

I'll suggest to the VLP team that they change the UI to say "page" number.

${backToLoginLabel}

brianwatrous — Thu, 16 Jan 2020 20:00:26 GMT

Running standalone vRO appliance, version 8.0.1.

Attempting to log in to http://vro_fqdn/orchestration-ui, received the following error:

The issue appears to be related to the standalone vRO appliance date/time not being properly time sync'ed.

Re: help with finding action gethostfolder

brianwatrous — Fri, 18 Jan 2013 22:12:35 GMT

Hi. I'm Brian (from the Orchestrator videos). Thanks for watching. Glad to hear how excited you are about demoing Orchestrator!

Jörg is correct that some of the actions in the video come from a package that was created for the Orchestrator course (http://mylearn.vmware.com/mgrreg/courses.cfm?ui=www_edu&a=one&id_subject=38842). I am so accustomed to having those actions at my disposal that I didn't stop to realize that viewers like you don't have them. The error is mine.

As Jörg said in his reply to your post, we are working to make the package available. Thank you for your patience.

Orchestrator video tutorials online

brianwatrous — Thu, 13 Dec 2012 00:59:11 GMT

vCenter Orchestrator video tutorials are now available online at http://vmwarelearning.com.

Re: WebService / Workflow ID / find

brianwatrous — Wed, 07 Nov 2012 20:55:52 GMT

Christophe Decanini wrote:
Or if you have a wf workflow attribute : wf.id

That's what I assumed the code would be, but before I typed in the code, I checked the API Explorer. The API Explorer doc for the workflow object doesn't list a property called "id". Went with the doc instead of my intuition.

Bolstered by your post, I did a "wf.id" in my workflow, and it worked as expected.

Thanks, Christophe.

Re: WebService / Workflow ID / find

brianwatrous — Wed, 07 Nov 2012 20:27:44 GMT

Thanks for all the preceding tips, but...

Given a workflow object, is there a way to programatically get that workflow's Id? I expected there to be a property in the workflow object called id, but there is no such property.

Configuring the Microsoft plug-in

brianwatrous — Tue, 18 May 2010 20:59:10 GMT

Is there a document which explains how to configure the Microsoft plug-in? I don't see any info in the Orchestrator docs:

vCenter Orchestrator Administration Guide (vCenter Orchestrator 4.0.1)

vCenter Orchestrator Installation and Configuration Guide (vCenter Orchestrator 4.0.1)

vCenter Orchestrator Developer's Guide (vCenter Orchestrator 4.0.1)

I am aware of that Active Directory requires the username DN to be specified in the form CN=vmoadmin,CN=Users,DC=example,DC=com (as discussed in this post).

The error I'm receiving occurs when I configure the MS plug-in in the Orchestrator Configuration tool. The error message is "User or password or default domain is not correct.".

The file I've attached illustrates my AD structure and the values I'm using in the configuration of the MS plug-in.

Thanks in advance.

P.S. The following is quite possibly irrelevant, but I've noticed that if I attempt to log in as EXAMPE\vmoadmin at the console of my AD server, I receive the error "The local policy of this system does not permit you to logon interactively". I don't expect the error is related, but I figured I should offer that tidbit of info just in case.

Re: Configuring SSH plug-in

brianwatrous — Sun, 16 May 2010 12:58:37 GMT

I've made progress following your suggestion, Stuart. Thanks so far.

Previously I couldn't get the SSH plugin to do anything at all because it couldn't authenticate.

Now I can get the SSH plugin working partially, but now when I try to set an SSH:Folder variable, I can open the SSH plugin, and I can open the host. But when I try to see what's in the root folders on the host, I end up with the following error:

java.net.ConnectException: Connection refused: connect

Anyone have any suggestions why I can't see the contents of the root folders?

Thanks in advance.

Configuring SSH plug-in

brianwatrous — Thu, 13 May 2010 15:32:26 GMT

Could someone elaborate on what the 'note' (see below) means in the section titled Configure the SSH Plug-In in the vCenter Orchestrator Installation and Configuration Guide? I'm trying to get the SSH plug-in working, but it appears to fail during authentication.

Thanks for any insight you can provide.

Configure the SSH Plug-In

You can set up the SSH plug-in to ensure encrypted connections.

Procedure

1. Log in to the Orchestrator configuration interface as vmware.

2. Click SSH.

3. Click New connection.

4. In the Host name text box, enter the host to access with SSH through Orchestrator.

NOTE: The username and password are not required because Orchestrator uses

the credentials of the currently logged-in user to run SSH commands. You must

reproduce the accounts you want to work on SSH on target hosts from the LDAP

server.

5. Click Apply changes.

The host is added to the list of SSH connections.

6. (Optional) Configure an entry path on the server.

a. Click New root folder.

b. Enter the new path and click Apply changes.

The SSH host is available in the Inventory view of the Orchestrator smart client.

Re: Configuring VMO to use OpenLDAP

brianwatrous — Sun, 09 May 2010 20:38:26 GMT

The formatting of the LDIF file in the example above is incorrect.

You need a blank line before each dn: entry.

Re: Configuring VMO to use OpenLDAP

brianwatrous — Mon, 03 Nov 2008 18:39:29 GMT

I'm configuring VMO to use OpenLDAP (running on RedHat Enterprise Linux 3). I was experiencing failures in my attempts to configure the LDAP and Plugins tabs within the VMware Orchestrator Configuration utility. Specifically, the failures were occuring when attempting to use the "Test Login" capability (of the LDAP tab) and when attempting to authenticate to LDAP from the Plugins tab.

I fixed the problem by adding the "uid" line to my ldif file.

I've included my ldap.conf, slapd.conf, and ldif files below to provide another sample OpenLDAP configuration for others in the future.

Also, it wasn't clear to me during my attempts to get VMO and OpenLDAP configured to work together it wasn't clear to me what credentials that I needed to supply on the LDAP and Plugins tabs. What ultimately worked was using "vmoAdmin" (the short name for my LDAP user account).

ldap.conf

# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.4.8.6 2000/09/05 17:54:38 kurt Exp $
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
#BASE dc=example, dc=com
#URI ldap://ldap.example.com ldap://ldap-master.example.com:666
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
HOST 127.0.0.1
BASE dc=example,dc=com
URI ldap://localhost
TLS_REQCERT

slapd.conf

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27 20:00:31 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/redhat/autofs.schema
include /etc/openldap/schema/redhat/kerberosobject.schema
password-hash
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
#pidfile //var/run/slapd.pid
#argsfile //var/run/slapd.args
# Create a replication log in /var/lib/ldap for use by slurpd.
#replogfile /var/lib/ldap/master-slapd.replog
# Load dynamic backend modules:
# modulepath /usr/sbin/openldap
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
#
# The next three lines allow use of TLS for connections using a dummy test
# certificate, but you should generate a proper certificate by changing to
# /usr/share/ssl/certs, running "make slapd.pem", and fixing permissions on
# slapd.pem so that the ldap user or group can read it.
# TLSCertificateFile /usr/share/ssl/certs/slapd.pem
# TLSCertificateKeyFile /usr/share/ssl/certs/slapd.pem
# TLSCACertificateFile /usr/share/ssl/certs/ca-bundle.crt
#
# Sample Access Control
# Allow read access of root DSE
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
#
#access to dn="" by * read
#access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default is:
# Allow read by all
#
# rootdn can always write!
#######################################################################
# ldbm database definitions
#######################################################################
database ldbm
suffix "dc=example,dc=com"
#suffix "o=My Organization Name,c=US"
rootdn "cn=ldapadmin,dc=example,dc=com"
#rootdn "cn=Manager,o=My Organization Name,c=US"
# Cleartext passwords, especially for the rootdn, should
# be avoided. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
# rootpw vmware
# The MD5 password below is 'vmware'
rootpw cXICgynhE87XFanNV9bOA+EYBlY=
# rootpw secret
# rootpw ijFYNcSNctBYg
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory /var/lib/ldap
# Indices to maintain
index objectClass,uid,uidNumber,gidNumber,memberUid eq
index cn,mail,surname,givenname eq,subinitial
# Replicas to which we should propagate changes
#replica host=ldap-1.example.com:389 tls=yes
# bindmethod=sasl saslmech=GSSAPI
# authcId=host/ldap-master.example.com@EXAMPLE.COM ldif
dn: dc=example,dc=com
dc: example
description: This is an example company.
objectClass: dcObject
objectClass: organization
o: Example
dn: ou=Employees,dc=example,dc=com
ou: Employees
description: All the employees in Example, Inc.
objectClass: organizationalUnit
dn: ou=Groups,dc=example,dc=com
ou: Groups
description: Groups in Example, Inc.
objectClass: organizationalUnit
dn: cn=vmoAdmin,ou=Employees,dc=example,dc=com
objectClass: person
objectClass: OrganizationalPerson
objectClass: inetOrgPerson
cn: vmoAdmin
sn: vmoAdmin
uid: vmoAdmin
userpassword:
cXICgynhE87XFanNV9bOA+EYBlY=
dn: cn=vmoAdmins,ou=Groups,dc=example,dc=com
objectClass: groupOfNames
cn: vmoAdmins
member: cn=vmoAdmin,ou=Employees,dc=example,dc=com

Re: Online Training - Phone issue

brianwatrous — Fri, 24 Oct 2008 23:08:16 GMT

I've been using Skype with great success this week to attend a live online delivery of the I&C course. And my Skype balance hasn't lowered even a penny because the call is toll free.