steveschofield
Enthusiast
Enthusiast

krb5.conf, vCO, multiple domains and powershell hosts?

I'm looking to have a single vCO (vcenter orchestrator) appliance connect to multiple powershell hosts, each domain will have it's own powershell host.  I got one working after some tinkering with one domain.  I'm trying multiple domains on a single vCO appliance and came across this article?  Is this a typo?  It's missing the closing } bracket on the multiple domains article?  I'm not Kerberos guru...

I'm getting an error of

"No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: Fail to create credential. (63) - No service creds)) (Dynamic Script Module name : addPowerShellHost#16)"

http://www.fnal.gov/docs/strongauth/krb5conf.html

Sorry for the formatting...

FNAL.GOV = {

kdc = krb-fnal-1.fnal.gov:88

kdc = krb-fnal-2.fnal.gov:88

kdc = krb-fnal-3.fnal.gov:88

kdc = krb-fnal-4.fnal.gov:88

kdc = krb-fnal-5.fnal.gov:88

kdc = krb-fnal-6.fnal.gov:88

admin_server = krb-fnal-admin.fnal.gov

master_kdc = krb-fnal-admin.fnal.gov:88

default_domain = fnal.gov

Should there a closing }?

WIN.FNAL.GOV = {

kdc = littlebird.win.fnal.gov:88

kdc = bigbird.win.fnal.gov:88

default_domain = fnal.gov

}

Tags (2)
0 Kudos
3 Replies
igaydajiev
VMware Employee
VMware Employee

0 Kudos
chrisheartland
Enthusiast
Enthusiast

Did you ever figure this out? I'm trying to do the exact same thing and am getting the same credential 63 error:

Mechanism level: Fail to create credential. (63) - No service creds)

thanks

EDIT: Two minutes after posting this I came across a post that said the powershell plugin version must be 1.0.6. I had 1.0.5. I upgraded and it worked.

0 Kudos
igaydajiev
VMware Employee
VMware Employee

thanks for the feedback.

Yes suport for multiple domains is added in version 1.0.6 of the plugin

and here is a link where you can download 1.0.6 preview tech preview version (Technical preview version of VMware vCenter Powershell Plug-in 1.0.x)

0 Kudos