Hello,
I've been working on setting up my first lab to study for VCP and having some trouble getting AD authentication to work within vcenter. This is a brand new AD server, Win server 2019 and domain functional level 2016 which is supported in 6.7u1 and after. I've successfully joined the VCSA to the domain, added the identity source, and am able to add users via global permissions from the AD server. When I attempt to login with AD credentials I get an Audit Success from the AD server, but over in VCSA it just says "Invalid Credentials". From what I can tell it's not a time skew issue because both systems receive time from pool.ntp.org. Any help would be appreciated, I've been beating my head against this issue for a week or two now, and pretty much exhausted what I can find online. I've tried multiple times to leave/join the domain via cli per the 6.5 AD issue, but that doesn't seem to help. I've dug around in the logs quite a bit, and these are the two entries that stand out to me.
/var/log/vmware/sso/websso.log
/var/log/audit/sso-events/audit_events.log 2019-11-05T18:45:17.724Z {"user":"administrator@butte.local","client":"192.168.1.25","timestamp":"11/05/2019 18:45:17 UTC","description":"User administrator@butte.local@192.168.1.25 failed to log in with response code 401","eventSeverity":"INFO","type":"com.vmware.sso.LoginFailure"}