Add a PowerShell host workflow question

Hello people,

I ran into a problem when I tried to run the add a workflow host Powershell.

Here's what I've done so now...

Installed PowerShell plugin in the system of the vCO.

WinRM service that is configured according to the doc in my vCO server... I want to use the same vCO as a powershell host server too...

I created the krb5.conf file in the installation of vCO location mentioned in the doc.

Ran the workflow manage SSL certificates which was a success.

Now I have to add this as a host of powershell to see in the inventory which fails with the error below.

Connection timed out: connect (name of the dynamic Script Module: addPowerShellHost #16)

Your help is very appreciated!

Kind regards

VMSavvy

1. I suggest to add "-a: option of the Kerberos test to connect to the winrm service" This will ensure that the mechanisym of Kerberos authentication is used.

> winrm identity-r:https:// host_name : port_number -was: Kerberos-sup: user_name Pei:password

2. try to connect vCO PowerShell plugin using shared session and providing user specifiv credentials (but be sure first that this user has enough privileges to connect to the WinRm service using winrm client)

> winrm identity-r:https:// host_name : port_number -was: Kerberos-sup: user_name Pei:password

3. could you give the error reported in vCO?

Tags: VMware

Similar Questions

  • VSphere Orchestrator (vco) - problem to add a Powershell host

    Hello world

    I am currently set up a VSphere Orchestrator server and I have a few problems to add a new host via WinRM with Add a PowerShell host model.

    I followed this tutorial:

    http://blogs.technet.com/b/meamcs/archive/2012/02/25/how-to-force-WinRM-to-listen-interfaces-over-HTTPS.aspx

    I can connect with Powershell to a second server HTTPS but not with the vco...

    This is my setup:

    PS WSMan:\localhost\Client> winrm get winrm/config
    Config
        MaxEnvelopeSizekb = 500
        MaxTimeoutms = 60000
        MaxBatchItems = 32000
        MaxProviderRequests = 4294967295
        Client
            NetworkDelayms = 5000
            URLPrefix = wsman
            AllowUnencrypted = true
            Auth
                Basic = true
                Digest = true
                Kerberos = true
                Negotiate = true
                Certificate = true
                CredSSP = false
            DefaultPorts
                HTTP = 5985
                HTTPS = 5986
            TrustedHosts
        Service
            RootSDDL = O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
            MaxConcurrentOperations = 4294967295
            MaxConcurrentOperationsPerUser = 1500
            EnumerationTimeoutms = 240000
            MaxConnections = 300
            MaxPacketRetrievalTimeSeconds = 120
            AllowUnencrypted = true
            Auth
                Basic = true
                Kerberos = true
                Negotiate = true
                Certificate = false
                CredSSP = false
                CbtHardeningLevel = Relaxed
            DefaultPorts
                HTTP = 5985
                HTTPS = 5986
            IPv4Filter = *
            IPv6Filter = *
            EnableCompatibilityHttpListener = false
            EnableCompatibilityHttpsListener = false
            CertificateThumbprint
            AllowRemoteAccess = true
        Winrs
            AllowRemoteShellAccess = true
            IdleTimeout = 7200000
            MaxConcurrentUsers = 10
            MaxShellRunTime = 2147483647
            MaxProcessesPerShell = 25
            MaxMemoryPerShellMB = 1024
            MaxShellsPerUser = 30
    
    

    PS WSMan:\localhost\Client> winrm enumerate winrm/config/listener
    Listener
        Address = *
        Transport = HTTP
        Port = 5985
        Hostname
        Enabled = true
        URLPrefix = wsman
        CertificateThumbprint
        ListeningOn = 127.0.0.1, 169.254.152.175, 192.168.1.139, ::1, 2001:0:5ef5:79fb:2087:3306:fde2:7302, fe80::5efe:192.168.1.139%14, fe80::2087:3306:fde2:7302%15, fe80::c19d:d401:ff68:98af%13, fe80::c407:cc5e:43dc:6909%18
    
    
    Listener
        Address = *
        Transport = HTTPS
        Port = 5986
        Hostname = host-vsphere.urbanvirtu.local
        Enabled = true
        URLPrefix = wsman
        CertificateThumbprint = 4f00d909810f619876bf5712a22e0fb21382d628
        ListeningOn = 127.0.0.1, 169.254.152.175, 192.168.1.139, ::1, 2001:0:5ef5:79fb:2087:3306:fde2:7302, fe80::5efe:192.168.1.139%14, fe80::2087:3306:fde2:7302%15, fe80::c19d:d401:ff68:98af%13, fe80::c407:cc5e:43dc:6909%18
    
    

    If I try to connect from a second server via Kerberos with HTTPS it works:

    PS C:\Users\Administrator> winrm identify -r:https://host-vsphere.urbanvirtu.local:5986 -a:Kerberos -u:administrator -p:password
    IdentifyResponse
        ProtocolVersion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
        ProductVendor = Microsoft Corporation
        ProductVersion = OS: 6.3.9600 SP: 0.0 Stack: 3.0
        SecurityProfiles
            SecurityProfileName = http://schemas.dmtf.org/wbem/wsman/1/wsman/secprofile/http/basic, http://schemas.dmtf.org/
    wbem/wsman/1/wsman/secprofile/https/basic, http://schemas.dmtf.org/wbem/wsman/1/wsman/secprofile/http/spnego-kerberos, h
    ttp://schemas.dmtf.org/wbem/wsman/1/wsman/secprofile/https/spnego-kerberos
    

    But with the vco I:

    Name: test

    The Host/IP: Home - vsphere.urbanvirtu.local

    Port: 5986

    Type remote PowerShell: WinRM

    Transport protocol: HTTPS

    Authentication: Kerberos

    Session mode: A shared Session

    User name: administrator

    Password: password

    cap1.JPG

    cap2.JPG

    Someone has had this problem before? What I did wrong?

    Thanks in advance for your help.

    Best regards

    Jean

    Based on the log, I see that "Connection refused:" error was connected to the kdc parameter in the krb5.conf file and you have already defeated it.

    Now, if I understand 'Add a PowerShell host' the workflow remains in working condition and does not end.

    This behavior I observed in the case of PowerShell plugin 1.0.3 is trying to connect to PowerShell host running PowerShell 4.0.

    Would you please provide version of

    the PowerShell vCO plugin version

    PowerShell host - Windows Version

    PowerShell host - PowerShell version

  • Problem - add in plugin PowerShell PowerShell host

    Hello world.

    I want to run PS scripts locally on a host of the vCO.

    I have installed the components on it:

    1 WS 2008 R2

    2 vCO V5.1.0 build 2725

    3 PowerShell plugin V1.0.1

    4 WinRM V2.0

    5 PowerShell V2.0

    I configured WinRM by this command as an administrator:

    WinRM quickconfig

    WinRM set winrm/config/service/authentication @{basic = "true"}

    WinRM set winrm/config/service @{AllowUnencrypted = 'true'}

    WinRM set winrm/config/service/authentication @{basic = "true"}

    WinRM set winrm/config/client @{AllowUnencrypted = 'true'}

    WinRM set winrm/config/client @{TrustedHosts = "vco_host"}

    WinRM get winrm/config

    Config

    MaxEnvelopeSizekb = 150

    MaxTimeoutms 60000 =

    MaxBatchItems 32000 =

    MaxProviderRequests 4294967295 =

    Customer

    NetworkDelayms = 5000

    URLPrefix = wsman

    AllowUnencrypted = true

    AUTH

    Base = true

    Digest = true

    Kerberos = true

    Negotiate = true

    Certificate = true

    CredSSP = false

    DefaultPorts

    HTTP = 5985

    HTTPS = 5986

    TrustedHosts = 127.0.0.1, vco_host

    Service

    RootSDDL = O:NSG:BAD:P(A;;) GA; S:P(ALE;FA;GA;;;) (BA) WD) (AU; SA; GWGX; WD)

    MaxConcurrentOperations = 4294967295

    MaxConcurrentOperationsPerUser = 15

    EnumerationTimeoutms = 60000

    MaxConnections = 25

    MaxPacketRetrievalTimeSeconds = 120

    AllowUnencrypted = true

    AUTH

    Base = true

    Kerberos = true

    Negotiate = true

    Certificate = false

    CredSSP = false

    CbtHardeningLevel = relaxed

    DefaultPorts

    HTTP = 5985

    HTTPS = 5986

    IPv4Filter = *.

    IPv6Filter = *.

    EnableCompatibilityHttpListener = false

    EnableCompatibilityHttpsListener = false

    CertificateThumbprint

    WinRS

    AllowRemoteShellAccess = true

    IdleTimeout = 180000

    MaxConcurrentUsers = 5

    MaxShellRunTime = 2147483647

    MaxProcessesPerShell = 15

    MaxMemoryPerShellMB = 150

    MaxShellsPerUser = 5


    But when I want to add PowerShell host in PowerShell plugin I didn't do good. Nothing in the newspaper.

    I used HTTP, 5985, shared session and user session basis.

    Can someone help me please?

    Thank you.

    micy01

    Your log says: "Unable to load library 'vix'" - done-a you try to install the VERY OLD, obsolete plugin VIX on this host? If so, which causes all sorts of problems.

    1 it requires a basis of vCO Windows Server.

    2 If the initial configuration workflow is not running, it screws the other workflows

    3 If the library files are not unpacked in the correct on the vCO Windows Server folder, random questions appear throughout many parts of the vCO.

    It seems that you have:

    2013-10-23 15:40:27.219 + 0200 WARN [WorkflowHandler] error in the execution of the workflow 'add a PowerShell host '.

    java.lang.UnsatisfiedLinkError: cannot load library 'vix': Uvedeny modul nebyl nalezen.

    2013-10-23 16:46:49.511 + 0200 [performance] execution of workflow INFO ' copy to get virtual computers by name.

    2013-10-23 16:46:49.713 + 0200 WARN [WorkflowHandler] error in the execution of the workflow "copy to get the virtual computers by name.

    java.lang.NoClassDefFoundError: has not been initialized class com.vmware.vmo.plugin.vix.VixServer

    Remove the plugin VIX on your server and restart the Server Service of vCO. Your problems should go away

    Uninstall a plug-in for VMware vCenter Orchestrator

  • Add a PowerShell with Kerberos host

    Hi, I just added my domain controller name powershell host and it works not much, but now I need to add another host and this isn't a field control, but I need to run on a command powershell with domain administrator privileges, so I need to add this host powershell with kerberos authentication, how can I do this?

    I have installed a new virtual machine and add the host with kerberos without problem...

    the problem was the net framework 4.5

  • Add production ESX hosts to a cluster

    Hi all

    I did some research in the admin guides and community forums, and I'm sure that I know what to do, but I would really appreciate a test of consistency here because the manipulation I do is in a production environment:

    I have a campus that contains two ESX areas that are managed by using vSphere and connected to a San. vMotion of works very well, the performance is very good (although the resources of the two boxes are fairly complete upward). However, I recently realized that I'd neglected to set up a cluster HA and DRS.  I want to remedy.

    I created the cluster with these specs:

    • the two HA and DRS, enabled
    • to the left, she also fully automated.
    • the power management of left
    • monitoring and host admission control enabled
    • leave the default settings for the behavior of the virtual machine
    • monitoring VM disabled
    • EVC enabled
    • the storage value of the swap with the virtual machine file

    I think that the next steps would be to add each ESX host consecutively and merged its resources with the cluster. However, here are a few questions:

    • How do you assess the risk factor to do this in a production environment (1 = perfectly safe, is a proven Scenario; 5 = you are out of your bloody mind? Do not)
    • Should I be triple-checking the SAN snapshots and planning of downtime for servers, or is it possible live and without any major qualms?
    • Am I right in assuming that it will increase my performance as well as provide better robustness of the campus, or should I expect a decrease in performance?

    Thank you very much in advance for your advice!

    Hey red,

    Addressing your particular situation, I would say yes to two questions.  Admission control HA is here to help you.  Ensure there are enough resources on the host computer to run the current and any expected load it will be after an HA event.  50% is close to default (but it is really based on the size of the slot) in an environment with two guests when guest cluster failures tolerates is set to 1 in a two and 25% host environment when the percentage of unused reserved as production capacity cluster resources in failover is left to its default value.

    If you have several virtual machines running that allows you to book 50% of your cluster resources (which it sounds like you have), then you have the option of "first category" your virtual machines and their giving priorities to restart event HA.  For their level, you'll want to active DRS (can be set to manual Automation), resource pools and you will need to configure your virtual machine under your HA settings options.  You'll want to pay attention to the priority of restarting VM here.

    I suggest you take a look at blog Duncan Epping http://www.yellow-bricks.com/ and Frank Denneman http://frankdenneman.nl/blog. They are all two fairly well the definitive answer to the HA and DRS questions and advice.

    See you soon,.

    Mike

    http://VirtuallyMikeBrown.com

    https://Twitter.com/#! / VirtuallyMikeB

    http://LinkedIn.com/in/michaelbbrown

    Note: Epping and Denneman explained that the amount reserved by default resources when you use the host cluster failures tolerates is promising to reserve enough resources to power on virtual machines.  This reserve of resource does not on average current, account, or future default load.  If you want to manipulate this feature, modify the memory and CPU reserves, which are the numbers used to calculate the size of the slot.

    Post edited by: VirtuallyMikeB

  • How can I add a USB host controller high-speed to my PC?

    My OS is windows xp home edition. I get this message that the HI-SPEED device attached to Non HI-SPEED USB Hub.

    The USB Composite device is a USB HI-SPEED device and will function at reduced speed when plugged into a port not HI-SPEED.

    There is no host controller USB HI-SPEED installed on this computer.

    Recommendation: You add a USB host controller high-speed on this computer in order to get maximum performance.

    So, how can I add this USB host controller high-speed to my PC? Is - this material I must add and physically install to my PC?

    As always, any help is greatly appreciated.

    Thank you!

    drake68

    Hi Drake,

    Review the devices USB connected to your PC and make sure that there is not a USB 1.x device connected to the same USB HUB (front or rear).  USB 1.x devices will cause the USB HUB at the bottom shift to 1.x speeds.

    You have an old PC (2002), it is possible that your PC does not have a USB HUB 2.0.  In this case, you need to install a USB PCI adapter card.

  • Get the stock vCO Powershell hosts

    Hello

    Does anyone know how to get Powershell hosts of the vCO stock of the script?

    I would like to run a script on several hosts of Powershell without specifying each (this list of construction and provision of a table would be a good solution).

    Thanks for your help

    var psHosts = Server.findAllForType ("PowerShell:PowerShellHost", null);

  • Question about hospitality add to a Cluster workflow

    Hi all

    I tried to add a host (previously run by an old vCenter) a new vCenter with workflow title mentioned, and I got this error message.

    The authenticity of the host SSL certificate is not

    verified.

    If I do the same task with the vSphere client, I get a warning on the footprint SSL of the host asking me to trust (or not) this print.

    In the case of, I decided to trust him that the host is added in the vCenter.

    Is it possible to simulate the acceptance of digital fingerprint SSL in a vCO workflow?

    Thank you very much for your help!

    BZ.

    Hi again

    referring to your original question, I modified the workflow you used:

    Simply duplicate the workflow and insert the missing lines in task scriptable or import the package added on this post.

    Kind regards, Andreas

    don't forget: assign points to useful answers

    visit http://www.vcoteam.info & http://mighty-virtualization.blogspot.com/

  • Execution of Script PowerShell host - spaces in settings

    Hi guys,.

    How to pass a parameter from vRO to a remote host from PowerShell with a space (for example the subject and the body in the script below)?  If I quote the parameter in the form of vRO, it works fine, but I want to do it programmatically to make sure that my users don't need to use quotes, through vRA.

    Script is similar to:

    var output;

    var session;

    var sender = arguments + "" + recipient + "" + subject + "" + body + "" + smtpServer;

    try {}

    session = host.openSession ();

    script var = "&" ' + externalScript + ' "' + arguments;"

    Output = System.getModule("com.vmware.library.powershell").invokeScript (host, script, session.getSessionId ());

    }

    {Finally

    If {(session)

    host.closeSession (session.getSessionId ());

    }

    }

    Thank you

    Dan

    Hi Dan,.

    Instead of using PowerShell, vRO can send emails too.

    To answer your question, you could include quotes like this:

    "var arguments = sender +" "+ recipient +"\"" + subject + '\' \ "' + body +"------""+ smtpServer;

    Michael

  • Add an esxi host

    Hi I'm new to VMware, I want to add new host esxi 5.5 to my cluster.

    1. I use the HP Blade servers. When assigning the IP I can see 4 network cards,

    I will assign IP to a network card and the 3 other should I keep them connected or disconnected. (I distributed switch and I use interconnected amp module not virtual connect)

    2. this question is not meant to ask here.

    I use HP amp modules interconnected for san switch, should use SC - LC or cable LC - LC of this interconnection modules to the switch of storage?

    1. I use the HP Blade servers. When assigning the IP I can see 4 network cards,

    I will assign IP to a network card and the 3 other should I keep them connected or disconnected. (I distributed switch and I use interconnected amp module not virtual connect)

    You assign the IP address to a VMkernel, not the network adapter interface. The VMkernel interface resides within the virtual switch, and the redundancy of the network, you should have at least two NICs per virtual switch. I recommend that you take a look at the network configuration of your current hosts and keep the same setting for the new.

    2. this question is not meant to ask here.

    I use HP amp modules interconnected for san switch, should use SC - LC or cable LC - LC of this interconnection modules to the switch of storage?

    It depends on. Depends on each type of connector you have beside storage and switch, I think it will be LC... in any case you can only need to add new cables just because you add a new blade. I recommend that you check with the SAN administrator to check if this is really necessary or not.

  • PowerShell host - window vRO 6.0.2

    Hello

    I try to configure the host powershell on vRO 6.0.2 installed on Windows 2012R2. When I run the workflow I get the error message "cannot locate the default domain (the name of the dynamic Script Module: addPowershellHost #).

    I'm trying to locate the krb5.conf file but there is no path c:\Program Files VMware vCenter Server - Java Components\lib\security I only c:\Program Files\Common Files\VMware.

    When I set up host using Basic authentication and Administrator local, everything is Ok.

    Kind regards.

    Pawel

    Hi Pawel,

    try to store the krb5.conf in this path: C:\Program Files\VMware\CIS\jre\lib\security

    (This works fine for me)

    Kind regards

    Marc

  • Automator workflow question

    I have a lot of saved Web pages that I had liked to convert to PDF format.  A solution is: get the URLS specified > URL for download in PDF format.  I can add each this way for the first part, but I have so that this one will be a lot of time.

    If I have several tabs open, is it a reasonably simple way to obtain the URL of each tab in the workflow at the same time before you download them in PDF format?

    Thanks in advance.

    This web site allows you to make the conversion by email.

    http://www.web2pdfconvert.com/

    also

    http://pdfcrowd.com/

    R

  • Workflow question

    I have a question and I would be very interested to hear the opinions of experienced users.

    When you create a montage composed of many individual scenes the typical workflow would be to have a project and begins to run accumulate all the scenes or create projects for each scene and then bring them all together later.

    Thanks in advance.

    Hi Mark,

    You can create different locations to organize your clips at import and then just create a new sequence for each 'scene' that you want to work, so really you have just several chronologies by tabs that you can switch between. The sequences will be returned as elements in the tray and can be moved to a timeline. So just "assemble" the finished scenes assemble you clips in a timeline. Nice, it works! I'm going to break big marriages in Preps, ceremony, Park, front desk, for example, Recap and then just put it all together at the end for export.

    Glad I could help

    Thank you

    Jeff Pulera

    Safe Harbor

  • Add background images 100% width questions

    Hello again,

    This is another issue that I'm trying to overcome.

    I added these subtle geometry type forms in the background of the Web site to fill the blank gradient area in the case of a person like me consults the Web site on screen 27 inches.

    Untitled-6.jpg

    Now on screen 27 inch, everything seems perfect and the way I want it, but here is the strange part, when I adjust the side window beside it contracts and expands as it should.

    Untitled-8.jpg

    but when I use the bottom bar to move from left to right, look at what is happening.

    Untitled-7.jpg

    Now, is not so much a big problem on screen 27 inches because if I develop the window full screen it will look like perfectly on both sides of the web page.

    but this is the result when you open this page even on lets say 13-inch macbook, the left side is perfect, but the right side?


    Screen shot1.jpg

    Screen shot 3.jpg


    The same phenomenon occurs with the Ipad. I understand that the question is the image in the background, but how is the image of the left hand has no problem, but the right hand image is. It should reveal only the background image gradually if your screen is wider than 960px (width I put for my site) not the whole background in a go image. Once I have remove the background graphics, I don't have these problems, and it seems fine on my macbook 13 inch or an iPad. But I don't want these images,

    image2.jpg

    image2 (1).jpg

    Sorry for so many images, but I wanted to make sure that everyone understands what is my problem and can help with this problem.

    Thank you very much

    In the case of the use that you use do not add your background for the page itself. Add as a fill for browser - not an element of the width of 100%.

  • Add a new host in already created vDistributed Switch

    I want to add new host in distributed Switch but I created distributed in New Data Center switch.

    You can help... How can add new host in already created vDistributed switch.

    Thanks for the reply. My problem has been resolved. In fact, I created vDS with option "vSphere Distributed Switch Version 5.1.0" and tries to add the version 5.0.0 of the host. Now, I added the host in vDS after upgrade the version of the existing host machine.

Maybe you are looking for