Quantcast
Channel: VMware Communities : All Content - vCenter™ Server
Viewing all 5185 articles
Browse latest View live

ESXi host disconnects intermittently from vCenter Server Appliance

$
0
0

In "cluster" VMware enable HA with DRS, constantly experience disconnection of the "hosts" of vcenter servers appliance

 

 

Versions of Vsphere 6.5 8294253

vcenter appliance 6.5.0.13000

 

 

Add the parameter

config.vpxd.heartbeat.notRespondingTimeout = 120

 

 

Restart the vcenter services, considering this link

 

 

https://kb.vmware.com/s/article/1005757

 

 

However, you continue to experience the disconnection of the hosts of vcenter servers

Attached picture that our Server Calfaquen disconnection, but the event occurs with all servers

 

I would appreciate your support

Sincerely,

Paul


Changing Active Directory Trusts

$
0
0

Hi folks,

 

we are talking about an envirinment with more than ten vCenter Servers (on Windows and VCSA as well). All vCenters are member of an AD domain partly the same and partly in different domains. All vCenter are installed with version 6.0 ore later The newst ist version 6.5 Update 1.

The AD structure is very complex but there are two way trusts between the ADs. Installing a new VCSA, bringing it up to a domain and configuring the identity source shows me all AD and I'm able to use different AD accounts for permissions. Older vCenter are not able to see the new trusted domains.

 

Searching the internet and having a deeper look at the vcsa brings up some information. There are some files with the initial structure of the ad tree maybe from the time adding the vcsa to the ad or configuring the identity source. You can find the files at /etc/krb5.conf, /etc/vmware/service-state/likewise/krb4.conf and /var/lib/likewise/krb5_affinity.conf. Making any changes to that files don't change anything at the behavior.

Im my test environment I can delete the identity source, all permissions are still visible, but the affected user are not able to login. After reconnecting everything works fine again. But I don't want to do that in an productive environment.

 

Does anyone know a way to syncronize the vCenter with the domain to find the new trusted domains or removed domains?

 

Cheers,

 

Bertram

vcsa 6.5 update - VAMI not working (SOLVED)

$
0
0

I updated vcsa 6.5 to build 4944578 (released 2/2/2017) and the management interface was not working after the update.  Poking around I found that the vami-lighttp service startup was failing.  Looking further it was complaining it couldn't bind to an IPv6 address.  hmmm...   Further checking found there were complaints being spit out about the config file.  So I checked /opt/vmware/etc/lighttpd/lighttpd.conf and there was a duplicate entry for server.use-ipv6 = "disable", with the 2nd occurrence coming on the last line of the file.  I commented this last line out and restarted the service.  Bingo, it works.

 

Including here so anyone else that hits this problem can find my solution.

VCSA 6.7 ISO cannot boot. I have tried it on multiple system and it just doesn't boot even though all other .iso's do.

$
0
0

Does anyone have a solution to the non-boot issue of the .iso?

Is it safe to upgrade virtual hardware on VCSA?

$
0
0

Since VMware Knowledge Base states Virtual Hardware Version 9 is minimum requirement for Hypervisor-Assisted Guest Mitigation for branch target injection (CVE-2017-5715), Is it safe to upgrade virtual hardware on VCSA?

vCenter 6 'Empty Inventory' due to permissions

$
0
0

I have a fully functional, completely working vCenter 6 environment. Admin users can log in and see the entire inventory, as they're supposed to.

 

However, I have a number of business users that need restricted permissions in a subfolder in the inventory. I have added a new role to vCenter with the permissions they need, and applied that role for that user to the specific subfolder.

Now: those users are not supposed to see any other folders in the inventory tree above of on the same level in the tree, just their own folder.

Before I upgraded to vCenter 6 (appliance), I had it working fine. With vCenter 6, this model broke: the users only see the 'empty inventory' text in the 'VMs and Templates' view.

 

Weird thing is: when that same user browses to 'vCenter Inventory Lists', clicks 'Virtual Machines', he sees his own (and only his own) VM and can interact with it in accordance with his permissions.

So it seems there's a new permission needed in vCenter to see only that part of the Inventory tree applicable to a specific user, but I (1) haven't found that permission yet and (2) wouldn't even know to which object in the tree to assign the permission

 

Any thoughts?

deploying vm from content library - no customization template option?

$
0
0

How do I customize my vm with a customization template when using the content library? I do not see the option where to select a customization template

How to Export List of VM Inventory from Web Client 5.5

$
0
0

Hey Everyone,

 

In the windows client we can click on a cluster, goto VM tab and then export CSV / excel format.

 

Is there a way to accomplish this same task in the Web Client?

 

Thank you for your help, points awarded.


migrating 5 windows vcenters 6.5 in single SSO domain to 6.7 appliances

$
0
0

I got 5 windows vcenters currently in a single SSO domain

 

total is 10 windows servers all have external PSC and external SQL

 

I am planning to move to vsphere 6.7 appliances.

 

any idea how to plan this?

 

Should i do a built in PSC/vcenter appliance or external PSC appliance and separate vcsa for each vcenter?

 

PLan to use single SSO domain for single pane access to all vcenters

permissions for users to manage their own folders

$
0
0

I'd like to give some users the ability to organize their vms in vcenter but I can't seem to get the permissions I want. I have a folder structure something like this:

 

Datacenter

|

|- Group A

|- Group B

|--Sub group 1

|--Sub group 2

 

Permissions are set at the group level so group A can only see their stuff and people in group B can see anything in their two subgroups.

 

If I grant the ability to create/rename/move folders and the group level (with propagate to children), I seem to get what I want but with one problem: users can rename that parent folder (ie. Group A, Group B, sub group 1 and sub group 2). Renaming  those folders (or moving in the case of sub groups) will result in failures in our deployment workflows since we look for those folder names for where to place the vms. I would also like to ensure I have unique folder names but I think I might need to give up on that idea.

 

As a possible workaround I looked into tags (never used them before) and while it seems like it might be a possible workaround, the way it works in the HTML client to filter, get to a list of vms from a tag, etc seems inferior or just doesn't work compared to the the flash client (which is disappointing since users can fully use the HTML client as it supports the limited permissions they have)

 

Does anyone have any suggestions or ideas on how to accomplish what I want?

 

Right now I think there's only 3 options:

 

1) Grant the folder permissions and hope users don't mess things up (Since they don't have delete permissions, any damage can technically be undone)

2) Use tags but then people are back to using the flash client

3) Try to use vRealize Orchestrator to allow people to do option 1 but I can try to write all kinds of validation (a lot more work for me and probably not worth the effort)

 

Thanks

vSphere Web Client 6.0U3b shows blank events tab when opened using german locale

$
0
0

Since we updated our vCenter Server (running on Windows) from 6.0U2 to 6.0U3b, we cannot see any events in vSphere Web Client. The Events tab tells us that there are no events.

 

We already found out that the problem is limited to the german view of web client. We tested opening web client using English or French locale and see all events displayed correctly. Also no problem in classical vSphere client.

 

Is there anyone who experienced a similar effect?

Monitoring vCenter Aplliance 6.5 API User Pemissions

$
0
0

I want to monitor my 6.5 Appliance with Health REST API. I want use following APIs:

 

GET https://{server}/rest/appliance/health/applmgmt

GET https://{server}/rest/appliance/health/database-storage

GET https://{server}/rest/appliance/health/load

GET https://{server}/rest/appliance/health/mem

GET https://{server}/rest/appliance/health/software-packages

GET https://{server}/rest/appliance/health/storage

GET https://{server}/rest/appliance/health/swap

GET https://{server}/rest/appliance/health/system

 

I tested it at my LAB and it works only with vsphere.local user and User permission:

 

vCenter Permission: Global.Health

Groups:  SystemConfiguration.BashShellAdministrator 

 

But Group SystemConfiguration.BashShellAdministrator has to much privileges. Which permission should monitoring user have?

Connectivity issues to hosts over MPLS

$
0
0

Hello,

 

We have been troubleshooting an issue that prevents our vCenter server from connecting to some of our remote hosts. This has impacted 2 different vCenter servers running 5.1 and 5.5 on Windows Server 2008 R2 and 2012 R2.

 

Process leading to the error

  • We are able to add hosts to a data center after a host reboot or fresh vCenter install
  • If our primary data center MPLS goes down (maintenance or otherwise) we lose connectivity to all remote hosts
  • One data center is able to reconnect without issue. This particular data center is our secondary data center
  • No other remote sites are able to reconnect

 

Troubleshooting

  • Disabled IPv6 across VMware infrastructure (Windows Servers, ESXi hosts)
  • Increased handshakeTimeoutMs to 120000
  • Restarted management network
  • Cleared ARP table
  • Lockdown mode is disabled

 

Notes

  • We have a single ESX 4.1 host that is able to reconnect without issue (has only experienced one disconnect, but came back without issue unlike the 5.5 counterpart)
  • We're able to connect to the hosts via vSphere console and SSH without issue
  • The network team is troubleshooting the issue as well, but we've not been able to rule out VMware as the culprit

 

Logs


vpxd

2014-09-24T14:00:14.785-05:00 [05920 warning 'Default'] Failed to connect socket; <io_obj p:0x000000000d10a128, h:3876, <TCP '0.0.0.0:0'>, <TCP '10.x.x.16:443'>>, e: system:10060(A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond)

2014-09-24T14:00:14.785-05:00 [05920 error 'HttpConnectionPool-000001'] [ConnectComplete] Connect failed to <cs p:000000000ee4c730, TCP:xxxesxi01.xxx.com:443>; cnx: (null), error: class Vmacore::SystemException(A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond)

2014-09-24T14:00:14.785-05:00 [05852 error 'httphttpUtil' opID=6159800D-000000AB-d6] [HttpUtil::ExecuteRequest] Error in sending request - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond

2014-09-24T14:00:14.785-05:00 [05852 error 'vpxdvpxdHostAccess' opID=6159800D-000000AB-d6] [VpxdHostAccess::Connect] Failed to discover version: vim.fault.HttpFault

2014-09-24T14:00:14.786-05:00 [05852 info 'commonvpxLro' opID=6159800D-000000AB-d6] [VpxLRO] -- FINISH task-internal-5070 -- datacenter-31 -- vim.Datacenter.queryConnectionInfo --

2014-09-24T14:00:14.786-05:00 [05852 info 'Default' opID=6159800D-000000AB-d6] [VpxLRO] -- ERROR task-internal-5070 -- datacenter-31 -- vim.Datacenter.queryConnectionInfo: vim.fault.NoHost:

--> Result:

--> (vim.fault.NoHost) {

-->    dynamicType = <unset>,

-->    faultCause = (vmodl.MethodFault) null,

-->    name = "xxxesxi01.xxx.com",

-->    msg = "",

--> }

--> Args:

-->

 

Connection error

Call "Datacenter.QueryConnectionInfo" for object "XXX" on vCenter Server "VCENTER" failed.

 

Thanks

 

Removed network details Message was edited by: OptimalZ06

Upgrade query

$
0
0

Dear Team,

 

Currently we are running below version of software/products in our environment. We are planning to upgrade our vCenter Server environment to "vCenter Server Appliance 6.0 U3f - Build Number – 8874691."

 

- Current version of vCenter, PSC and NSX Version

VC  Version 6.0.0 Build 5318172

PSC Version 6.0.0.30200

NSX version 6.2.6 Build 4977495

 

For upgrade activity I'm referring below LINKS/URL , Just wanted to know Am I referring the right artcile

Understanding the PSC upgrade workflow in the link below:

https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.upgrade.doc/GUID-CB1C7FF6-A184-4DFF-81A3-35E2C3B5FEE0.html

 

Please find a similar link for the vCenter Server Appliance in the link below:

https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.upgrade.doc/GUID-37BB88CC-7A44-4EC9-8D7B-5D182E471654.html

 

 

Also wanted to know how to check What was the size selected when the appliance was first installed ? Request you to asisst me on the same.

 

 

Some registered login handlers didnt complete on time

$
0
0

Screen Shot 2018-07-21 at 9.19.00 AM.png

 

any idea why? I am gettting delay login to vcenter


Web Client throws Error #2032 when accessed through any sort of reverse proxy / SSL VPN

$
0
0

I've been trying to publish the Web Client through our SSL VPN which has a nice workspace to publish web links.

 

Unfortunately, something in the vSphere web client breaks very badly if you do not connect directly to the application - it loads the background image but instead of displaying the login dialog it simply bombs out with an "Error #2032" message.

 

Anyone found a fix for this?

Unable to keyword filter recent tasks in vSphere Client HTML5

$
0
0

Is it just me or are you unable to filter recent tasks by keyword any longer on the vSphere Client 6.5 HTML5 interface?

vCenter sso doesn't work

$
0
0

Hi,

 

I try to configure my vCenter and add it to domain, but correct(I think it's ok) configuration doesn't work.

 

 

I install vCenter 6.5 and now 6.7 and I have allways "Invalid credentials".

 

In first step I add my vCenter to domain:

- in 6.7 version - Administration>Single Sign On>Configuration>Active Directory Domain>Join Ad

- in 6.5 version - Administration>Deployment>System Configuration>Nodes>[vCenter address IP]>Manage>Advanced>Active Directory>Join...

When I add vCenter to domain I reboot vCenter

 

In next step I go to Administration>Single Sign On>Configuration>Identity Sources>Add identity Sources I add my domain.local and set as default it.

Next I go to Administration>Single Sign On>Users and Groups>Groups> Find I here Administartors and add my ad group to this vCenter group.

Next i Go to Administration>Access Control>Global Permissions and Add my ad group here to Administrator role.

In next step i go to Host and Clusters>Permissions I add here the same ad group where in last step and check Propagate to children.

 

I logout form administrator and try to login with ad credentials but I have error... What is wrong in my configuration? When I configurate vCenter after with this steps I don't have problems, but now I have it....

 

Please someone help me.

Error: Incompatible Version -1 (expect 2)

$
0
0

We have recently created a new cluster in our vCenter environment, which also was recently upgraded to 6.5. Upon our deployment of a VDI environment on this cluster, we were receiving an error with "incompatible version" detailed within it. What's odd is the error only seems to happen once the pool we're deploying hits ABOUT 750 virtual machines. We deployed in baby steps: 1 VM, then 100, then 300, then 500, then 750, without issue. But when we then expanded to 800, we hit the error seen below:

 

eee.png

 

I'm deploying to a 6 node cluster, with all hosts being Dell PowerEdge R740xd. They're rather beefy. On older PowerEdge R730xds, I was able to get 900 on similarly built clusters. Is there some kind of sizing limit setting I'm missing within 6.5? All VMs being deployed are linked clones from 1 parent image, so, it's not even like we're deploying a plethora of different guest VMs. They're all identical.

 

I do have a ticket open with VMware regarding the error, but, no progress as of this writing.

 

Thanks in advance.

Upgrading Windows vCenter 5.5 to Appliance 6.5

$
0
0

Hi,

I'm upgrading from Windows vcenter 5.5 server to an appliance. I've followed the guides and ran VMware-Migration-Assistant.exe on the source server, all was fine. You have to leave the Migration Window open

 

I then ran the installer.exe on the same source server and 50% through the vcenter server shuts down. Should i have run the installer on a different Windows server? Would it matter that the server shuts down with the Migration Window open?

Viewing all 5185 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>