Quantcast
Channel: VMware Communities : All Content - vCenter™ Server
Viewing all 5185 articles
Browse latest View live

db seems corrupted

$
0
0

Hi guys hoping you can help me today

my vCenter services has stopped when i look at the vpxd.log i saw the errors

 

info 'Default'] Creating SSL Contexts

error 'vpxdvpxdDatastore'] Duplicate name (H2o1) in datastore folder

error 'vpxdvpxdMain'] [Vpxd::ServerApp::Init] Init failed: VpxdDatastore::Init(gDB)

--> Backtrace:

--> backtrace[00] rip 000000018018b7fa

--> backtrace[01] rip 0000000180104c78

--> backtrace[02] rip 0000000180105f6e

--> backtrace[03] rip 000000018008ff08

--> backtrace[04] rip 0000000001125bac

--> backtrace[05] rip 0000000001146722

 

So I open my database and try to find these duplicate ID's

 

and run a select * from vpx_entity where NAME='H2o1'

and see two duplicate id's

11305

31289

and try to delete the largest as suggested in many articles on the web  as this is more likely the latest invalid ID   running this command

DELETE FROM VPX_ENTITY WHERE ID = 31289;

 

but i get this error

The DELETE statement is in conflict with the REFERENCE constraint " FK_VPX_DS_A_REF_VPX_DATA " . The conflict occurred in database " VCDB " table " dbo.VPX_DS_ASSIGNMENT " column ' DS_ID ' .

The statement has been terminated

 

I cannot delete this entry for some reason can anyone let me know hopefully there is SQL expert among you

what i need to do to get this duplicate ID out as I have not got a back up of the database so i cannot afford to lose this one .

 

please help !

 

Thanks in advance


Mails from vCenter 6.7 base64 encoded

$
0
0

Hi all,

 

I have a question about mails sent from vCenter. (Version: 6.7.0.44000 Build number 16046470)

And we have a tool we use for capturing mails and doing actions when the subject matches a predefined regex.

 

But the mails sent from vCenter are base64 encoded and our tool can't work with that yet...

Is there a way to turn of the base64 encoding?

 

Example:

QWxhcm0gVk0gLSBNYXggVG90YWwgRGlzayBMYXRlbmN5IG9uIFZpcnR1YWwgTWFjaGluZSA6IEZBS0UtVk0gaXMgUmVk

=>

Alarm VM - Max Total Disk Latency on Virtual Machine : FAKE-VM is Red

 

I've been searching in /etc/mail/README and /etc/mail/sendmail.cf but I can't figure it out...

 

Kind regards,

Jonathan

starting authentication framework...

$
0
0

I am trying to deploy a new psc on a second site but keeps getting stuck here

 

 

Capture.PNG

 

 

dns and ips are all correct

VCSA 6.7 - vpxd doesn't start after replacing machine SSL certs

$
0
0

Creating a new VCSA 6.5.0 vm using win32 GUI.

After installation completed, I want to replace machine SSL certificates using HTML5 webgui.

I imported Terena CA and then replaced machine SSL cert (key & crt). After rebooting, all works fine.

 

 

Deleting this VM, and creating a new VCSA 6.7 VM using win32 GUI and exactly the same paramaters as before (fqdn, ip, ...). DNS entries are ok (FQDN to IP & IP to FQDN).

After installation completed, I imported the same certificate as before. After rebooting, when I try to access the web GUI, I've got the following error :

 

503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x00007f3890084700] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)

 

 

Trying to replace de certificate from CLI using certificate-manager :

Updated 34 service(s)

Status : 70% Completed [stopping services...]

Status : 85% Completed [starting services...]

Error while starting services, please see service-control log for more details

Status : 0% Completed [Operation failed, performing automatic rollback]              

Error while replacing Machine SSL Cert, please see /var/log/vmware/vmcad/certificate-manager.log for more information.

Performing rollback of Machine SSL Cert...

Get site nameus : 0% Completed [Rollback Machine SSL Cert...]    

 

This is the /var/log/vmware/vmcad/certificate-manager.log log :

 

2019-12-06T13:19:16.509Z INFO certificate-manager None

2019-12-06T13:19:26.519Z INFO certificate-manager Running command :- service-control --start  --all

2019-12-06T13:19:26.519Z INFO certificate-manager please see service-control.log for service status

Service-control failed. Error: Failed to start services in profile ALL. RC=2, stderr=Failed to start vpxd services. Error: Service crashed while starting

2019-12-06T13:25:38.27Z ERROR certificate-manager None

 

This is the vpxd.log :

 

--> [context]zKq7AVECAAAAAGC34QANdnB4ZAAA4AArbGlidm1hY29yZS5zbwAAWCUbAP6dGACeQCIAaXEiABtFIgDTSSIAOaIjAHFvIwA6ciMAnVYrAdRzAGxpYnB0aHJlYWQuc28uMAAC3Y4ObGliYy5zby42AA==[/context]

2019-12-06T13:23:09.269Z error vpxd[59800] [Originator@6876 sub=AuthzStorageProvider] [AuthzStorageProvider::CreateAuthzMgr] Failed to connect to IS: <N5Vmomi5Fault17HostCommunication9ExceptionE(Fault cause: vmodl.fault.HostCommunication

--> )

--> [context]zKq7AVECAAAAAGC34QASdnB4ZAAA4AArbGlidm1hY29yZS5zbwAAWCUbAP6dGAHu8VN2cHhkAAHu1VoBzsNjATdPoAGuOKACwO0BbGliYXV0aHpjbGllbnQuc28AAmkGAgLijQICxIUCAb3XngE6CVQBimhUARnGUgOQBQJsaWJjLnNvLjYAAaW+Ug==[/context]>

2019-12-06T13:23:09.270Z info vpxd[59800] [Originator@6876 sub=AuthzStorageProvider] [AuthzStorageProvider::CreateAuthzMgr] Retry for this error: attempt count 29

2019-12-06T13:23:12.314Z warning vpxd[59800] [Originator@6876 sub=VpxdAuthClient] [ConnectAndLogin] Failed to loginBySamlToken: N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:

--> PeerThumbprint: 6B:B6:1F:29:7C:01:E8:65:09:A1:49:C2:46:71:BC:54:11:FB:7F:A8

--> ExpectedThumbprint:

--> ExpectedPeerName: localhost

--> The remote host certificate has these problems:

-->

--> * Host name does not match the subject name(s) in certificate.)

 

 

I don't know why ExpectedPeerName is searching for localhost, I always used fqdn and real ip during process and DNS is correctly resolving IP address & FQDN.

Either using webgui or cli for replacing the machine certificate, vpxd doesn't launch after.

Are there new prerequisites for installing a custom SSL certificate since 6.7.0 ?

vCenter 6.7 - Health warning - vc.health.error.dbjob3

$
0
0

Hi,

 

Today i realized i have this warning on my vCenter:

 

 

Anyone has any idea what it might be?

vCenter Server Appliance Backup Process

$
0
0

vCenter VCSA 6.7

 

I have an FTP site where I want to place the backup files

 

I setup a schedule for backup of the VCSA

 

 

Backup job failed to complete 

 

Where can I find out why this failed?

 

Thank you

 

Tom

Adding Identity Source fails LDAP/LDAPS

$
0
0

Topic Name : Active Directory LDAP Server Identity Source Settings

Product/Version : VMware vSphere/6.7 Appliance

Question :

Want to add new identity source with LDAPS to our Active Directory Server. But all i tried failed.

At the moment we use windows integrated active directory setting to the same windows domain.

 

A check with curl to the needed ips and ports from appliance ssh root user was ok.

I get this error: Check the network settings and make sure you have network access to the identity source.

 

Also ports are open and firewall settings on windows were ok. ldp.exe is running on windows with port 636 and i can access and

bind with a user account.

 

Can someone help?

 

Greets Marko

Problem adding more than three ESXi-hosts to VCSA

$
0
0

Hi together

 

We have VMWare farm with ESXi-Hosts (vSphere Enterprise), administrated in a vCenter Standard VCSA.

Everything's fine.

 

We have also some branch ESXi-Hosts (vSphere Essentials), three of them administrated in a vCenter Essentials VCSA.

But now there was a fourth branch ESXi-Hosts (vSphere Essentials) installed, and when I'm trying to add it in the VCSA, it tells me that only three hosts are able to administrated in this VCSA version.

 

My question is: is there any option, where I'm able to administrate all branch Essential ESXi-hosts in one VCSA?

 

Thank you guys


Missing a pre-defined group on vCenter

$
0
0

I recently migrated to VCSA 6.7

 

Today I needed to add some domain accounts to SystemConfiguration.Administrators and noticed it's not present on the Groups tab of SSO User and Groups. Naturally I attempted to create that group but no dice.

 

Any suggestions on how to restore it?

VCSA 6.7 SMTP Setup

$
0
0

Hi-

 

Trying to configure vcenter server to send smtp alerts using the following article, Configure Mail Sender Settings, but getting stuck at step 3 (pasted below)--i do not see a General tab under Configure for the VCenter VM. I'm probably misunderstanding, but any guidance would be a help. It's a VSphere 6.7 Essentials license, if that matters. Thanks.

 

 

Procedure

 

  1. In the vSphere Client, navigate to the vCenter Server instance.
  2. Select the Configure tab.
  3. Under Settings, select General.
  4. Click Edit.
  5. Select Mail.
  6. In Mail server, type the SMTP server information.

    The SMTP server is the DNS name or IP address of the SMTP gateway to use for sending email messages.

  7. In Mail sender, type the sender account information.

    The sender account is the email address of the sender.

    Note: You must type the full email address, including the domain name.

     

    For example, mail_server@example.com.
  8. Click Save.

vCSA 6.5.0 U2G 13638625 webclient working too slow and giving query timeout dataservice adapters errors

$
0
0

In our environment  we have vCSA 6.5.0 U2G 13638625 with 100 ESXi host and around 600 VMs.  Webclient is running too slow and gives timeout errors (See attached) while trying to pull out any inventory details such as datastores, performance charges, VMs running on the datastores etc.  The refresh sign keep spinning and then it results in query timeout errors.  This issue is recurring after very 2 to 2.5 months.  As a workaround, we planned a reboot every 2 months and it was working as after reboot of appliance, webclient performance seems to be better for few days.  But, this time even after rebooting, it is giving same issue.  The query time out errors are very annoying and end users are unable to work properly due to this. 

Raised a support case with VMware and they tried to increase the memory size of vmware-vpxd-svcs and vsphere-client service to 2048 but it didnt resolve the problem.  Any suggestions on this ?  Has it got something to with this - We still have previous vCSA 6.0 appliance server in powered off mode in this inventory.  (Just considering) or anything else.  We take a daily clone of appliance but we stopped that also in order to check, but it didn't work out.  vcenter error2.JPGvcenter error.JPG

STS Certificate renew

$
0
0

I have a VCSA 6.5 where the builtin sts certificate is only valid for 2 years.

The documentation says it should be 10 years.

I only use the built in VMCA and no custom certs.

Is the builtin sts certificate automatically renewed ?

All other certificates are also valid for 2 years, will the VMCA automatically renew them ?

 

thx

Chris

customization and Administrator password

$
0
0

Hello,

I'm trying to do a raw windows 2019 template and then use VmWare Using customization to do the rest.

 

info:

  • Template already has the build in "Administrator" with password
  • in the customization i set the same password
  • Generate a new security identity (SID) is checked
  • Check in log in automatically as Administrator once ( as i want to join domain and set hostname)

 

Issue: After customization is run,

Windows now asked for resetting the windows administrator password. Meaning that the login x time in the customization template will work only after manual reset.

This breaks the automation. Any way to fix this? (windows 2016 and windows 2019 tested)

 

 

/Martin

 

Message was edited by: martin strom syntax

Upgrading only vCenter from 6.5 to 6.7 without support agreement

$
0
0

Hello,

I have a client who doesn't want to extend service agreement for vSphere and vCenter.

Their current specs are ;

vCenter 6.5 8815520

vSphere: 6.5 8935087

 

As Flash support on all browsers ends by Dec, 2020, they have to upgrade to 6.7 Update3, but they don't have service agreement.

So I went to my.vmware.com and was able to download 6.7 Update 3 for vCenter. What is the consequence of installing this update for vCenter without service agreement?

Will it be just for them not having technical support if the upgrade encounters any problem?

 

Also, is it OK, just to upgrade vCenter only, not vSphere? I think it's OK as vCenter 6.7 supports ESXi vSphere 6.0...

failed to get the psc thumbprint when decom external psc

$
0
0

I am trying to decom my external psc but keep getting the error shown.

 

I tried rebooting the psc and reboot my machine and close browser logoff etc... but still

 

any idea?Capture.PNG


TAGS Categories & Custom Attributes

$
0
0

Vcenter 6.7 ESXI 6.7

 

I have two vcenters and setting up custom attributes categories and tags on both vcenter 1 no issues at all.  On vcenter 2 I added 8 categories and it will not let me add any more.

 

I was creating a new TAG and then when I looked for the newly created categories it was not listed.  I tried to create from the Add TAG function same result.

 

 

Any thoughts on why I can not add any more categories?

 

Thank you

 

Tom

503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x00007f285000c480] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)

$
0
0

Hi guys,

Last week, when I try to login to VCSA, it seem something wrong and I can't login. So I try to reboot the VCSA.

When it boot up,the website only show the text below:

503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x00007f285000c480] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)

And there is a lot of service can not be started.

root@dr-vcsa [ ~ ]# service-control --status

StartPending:

vmware-perfcharts

Stopped:

pschealth vmcam vmware-content-library vmware-eam vmware-imagebuilder vmware-mbcs vmware-netdumper vmware-rbd-watchdog vmware-sps vmware-statsmonitor vmware-updatemgr vmware-vapi-endpoint vmware-vcha vmware-vpxd vmware-vpxd-svcs vmware-vsan-health vmware-vsm vsan-dps

Running:

applmgmt lwsmd vmafdd vmcad vmdird vmdnsd vmonapi vmware-analytics vmware-certificatemanagement vmware-cis-license vmware-cm vmware-pod vmware-postgres-archiver vmware-rhttpproxy vmware-sca vmware-sts-idmd vmware-stsd vmware-topologysvc vmware-vmon vmware-vpostgres vsphere-client vsphere-ui

 

What should I do?

vmware-vapi-endpoint failed to start

$
0
0

Hi,

 

For unknown reason, VMware-vapi-endpoint this service failed to start on our vcsa 6.5, i tried to dig out by vecs-cli, but with no luck, here are the error messages:

 

#/usr/lib/vmware-vmafd/bin/vecs-cli entry list --store TRUSTED_ROOT_CRLS

Number of entries in store :    1

vecs-cli failed. Error 11: Possible errors:

LDAP error: Administrative limit exceeded

Win Error: Operation failed with error ERROR_BAD_FORMAT (11)

 

#/usr/lib/vmware-vmafd/bin/vecs-cli entry list --store TRUSTED_ROOT_CRLS --text | less

vecs-cli failed. Error 4312: Possible errors:

LDAP error: Unknown (extension) error

Win Error: Operation failed with error ERROR_OBJECT_NOT_FOUND (4312)

 

Is it related to TRUSTED_ROOT_CRLS issue ?

 

Thanks

VCSA Issue

$
0
0

Hello,

 

After I move The VCSA from one host to another host I cannot reach the VCSA.

So I try to connect to the ESXi host and I see the VCSA not taking IP I check on Setting I found an error on the front of CPU Memory and storage with the below message:

As this host resources are being managed by vcenter server, some configuration option are disabled.if you wish to change this VM's resources settings, please do so from vcenter server.

VCSA 7.0 restore issue

$
0
0

I am restoring VCSA 7.0 from Backup which is on FTP. while Step 1 is completed successfully step 2 is getting the error with below statement

 

Metadata and system validation failed.

 

Error: Unknown system resource type vtsdblog

Error: Unknown system resource type vtsdb

 

and so on attached.

 

I have installed the VCSA 7.0 with default settings and backup taken on FTP. Now when restoring it from backup it throws these errors any clue please ?

 

Thanks

Manish

Viewing all 5185 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>