Cannot use the credentials of the Windows session by logging into vCenter

Hello

We have an Active Directory domain that is based on Server 2008 R2. I have successfully deployed a vCenter Server Appliance and joined the field with it. I also added both direct and reverse search in the DNS records and I can see all users and groups when I manage my permissions in vCenter. Connecting to vCenter using a domain account also works very well if you type the user name and password.

The problem starts when I try to check the box 'Use Windows logon credentials'. If I click on connect, I get an error of IDM. The exact error in the log file /var/log/vmware/sso/vmware-sts-idmd.log is the following:

I really need this job, type the user name and password is not an option, unfortunately. You really 'session credentials using Windows '.

ERROR [IdentityManager] could not authenticate main [sspi] for tenant [vsphere.local]

I have setup a test environment with a single domain controller and a customer-vcsa. There, it works fine. So it is something in our existing domain. But I can't know exactly what it could be. I tried to disable any air security, firewalls, etc. It seems to me he's trying to auth as some sspi account. To the best of my knowledge this account does not exist, then it must fail. In my test environment wiith default for most of the configurations I see no trace of 'sspi' in the newspapers.

Any ideas on how to do this diagnosis?

Thank you!

I found the culprit.

It seems vCenter NTLM need to work. Two strategies of local security caused errors occur. When network security: restrict NTLM: NTLM outbound traffic to remote servers and network security: restrict NTLM: NTLM authentication in this area inside local policies > Security Options are both defined to deny everything we see this error.

I hope this can help someone else. It took some time to solve the problems. :)

Tags: VMware

Similar Questions

  • Cannot use the WIndows updates in Windows XP

    Original title: re-installed windows XP Home Edition and the service packs, causing problems

    I recently had to reinstall windows XP home, service Pack 1, 2, and 3.  I can't access updates on the microsoft site.  After the screen that shows that he is control of my computer and then taking me to the 2 choices for the updates - I usually choose recommended but regardless because green lights scroll in an infinite loop and I never move forward.  I used the program microsoft Fix that always finds a problem then it looks more problems which it said it fixed.  I think it is "down" for me.  After a more thorough review of the details, I read that the update files were not where they should have been.  Sometimes at startup, I get a message of recovery of the Windows registry, which reads "one of the files containing the system's registry data had to be recovered by use of a log or other copy.  Recovery succeeded.  I have problems with IE8 and Firefox browser have to close unexpectedly, but I hope it's because I need these updates.   I'm not terribly techno warned, so if anyone can offer some advice thanks to use the KISS method - keep it Simple Sweetheart.  Thank you.

    Hello

    Perform the steps from the link below.

    You cannot install updates from Windows Update, Microsoft Update, or by using the auto update after a repair of Windows XP after installing Windows XP SP3 immediately after a clean installation of Windows XP SP2 or

    Hope this information helps.

  • Cannot use the Windows Partition

    So, I have seen very similar messages and followed several forums, but I can't yet figure out what to do next.

    I have 8.1 Windows on my Mac.  I wanted to repartition the Windows partition and make bigger it because I was running low on space, and the Windows partition is what I use it mostly for graduate studies.  About a year ago, I took an easy youtube video and used Mini Wizard Partition re-partition space and it worked perfectly.  I have found the same video and tried to repartition the Windows partition again, but apparently I royally screwed up.

    My BootCamp is not yet visible more in disk utility.  Under the partitions, there is an option called "disk0s4" greyed, but I'm not allowed to do something with it.  I can't verify or repair.  If I go to Applications, BootCamp Assistant is there, but he wants me to start the installation of BootCamp.  It was not an option to restart Windows more, and when I turned on with alt + market, Windows was not an option more.

    I followed this tutorial:

    http://nerdr.com/bootcamp-partition-lost-repairing-Mac-partitions/

    and when I restarted my Mac, restart Windows was an option. So I thought that I fixed it! EVIL.  My screen was black and said: 'Missing Operating System '.

    I downloaded EaseUS Data Recovery Wizard for Mac (because it was another suggestion), and I was able to recover and see the files on the NTFS disk0s4, so I'm quite positive, they have not all been completely erased.  Or at least the part of basic Windows is still there.  I can't recover the drive to anything, because it tells me that I will just be fitness on the same drive, and I honestly don't know how to retrieve these files will help with the side of the partition of things.

    I also used TestDisk and it seemed to find my missing partition, but in the middle of analysing it, it says something like "disk too small."  After further research, I went through and took only the most recent score that seemed to be deleted with NTFS, and when you are trying to do, it would allow me to make a 'logic' partition because he said something in red, as 'bad file.'

    My Mac still works perfectly, but I'm terribly need to recover my windows.

    Here are my findings from a similar position:

    Last login: Wed Mar 9 16:30:28 on ttys001

    Anna-Owenss-MacBook-Pro: ~ acowens1$ sudo gdisk/dev/rdisk0; "exit";

    GPT fdisk (gdisk) version 1.0.1

    WARNING: Open with shared lock devices will not have their

    table partition automatically reloaded!

    Scanning partition table:

    MBR: hybrid

    BSD: absent

    APM: absent

    TPG: present

    Found a valid GPT with hybrid MBR; using GPT.

    Command (? for help): p

    Disk/dev/rdisk0: 625142448 sectors, GiB 298,1

    Logical sector size: 512 bytes

    Identifier (GUID) of disc: 0000429B-368F-0000-CB2D-000003440000

    Partition table contains up to 128 entries

    First usable sector is 34, last usable area is 625142414

    The partitions will be aligned with the boundaries of sector 8

    Space free total is 277435021 areas (132,3 GiB)

    Starting number (sector) end (sector), Code name of size

    409639 40 1 200.0 MiB EF00 EFI system partition

    2 409640 268314855 127.7 giB customer AF00

    3 268314856 269584391 619.9 MiB AB00 Recovery HD

    4 547018752 625141759 37.3 giB 0700 BOOTCAMP

    Command (? for help): r

    Recovery/processing command (? for help): o

    Size of the disk is 625142448 areas (298,1 GiB)

    MBR disk identifier: 0x0000711C

    MBR partitions:

    Code of State sector Boot start end sector number

    1 1 547018751 primary 0xEE

    2 * 547018752 625141759 0 x 07 elementary school

    Recovery/processing command (? for help): h

    CAVEAT! Hybrid MBRs are flaky and dangerous! If you decide to not use one,

    Simply press enter at the prompt below and your partition table MBR will be

    be intact.

    Type one to three GPT partition numbers, separated by spaces, to be

    added to the hybrid MBR, in order: 2 3 4

    Partition of EFI GPT (0xEE) place first in the MBR (good for GRUB)? (Y/N): y

    Create entry for the #2 GPT partition (partition MBR #2)

    Enter a hex code MBR (default AF): n

    Set the bootable flag? (Y/N): n

    Create entry for the #3 GPT partition (partition MBR #3)

    Enter a hex code MBR (default AB):

    Set the bootable flag? (Y/N): n

    Create entry for the #4 GPT partition (partition MBR #4)

    Enter a hex code MBR (default 07):

    Set the bootable flag? (Y/N): y

    Recovery/processing command (? for help): o

    Size of the disk is 625142448 areas (298,1 GiB)

    MBR disk identifier: 0x0000711C

    MBR partitions:

    Code of State sector Boot start end sector number

    1 1 409639 primary 0xEE

    2 409640 268314855 primary 0 x 01

    3 268314856 269584391 primary 0xAB

    4 * 547018752 625141759 0 x 07 elementary school

    Recovery/processing command (? for help):

    Now, my major dilemma is that in the original post, he said to the partition of the hybrids with the numbers of 3-4-5, but I was unable to do so.  When I tried 5, he said "partition does exist or is too large."  So I used the 2 3 4 numbers.  Now, I'm at the point where I use the w command (to write), but I don't want to do it if I didn't the other steps correctly.

    1 mini Partition tool is very dangerous and should never be used on a Mac, in particular, more than once.

    2. article NERDR is the most irresponsible article about these issues and causes and exacerbates still more data loss.

    3. Please do not rewrite the MBR/GPT with Gdisk.

    4. you must return to Testdisk. TestDisk is used only for scanning, not for the updates. All updates using Gdisk, not binding Testdisk, once the right partition headers have been found.

    5 Please after the release of

    diskutil list

    Cs diskutil list

    sudo TPG - vv - r see the/dev/disk0

    sudo fdisk/dev/disk0

  • Cannot use the Windows disc Image burner

    When I right-click on an ISO file, the option "burn disc image" does not appear. How can I use this program or set to its default value? (I have used other software with ISO files before. Does make a difference?)

    The application is isoburn.exe which is located in \windows\system32
     
     

    Thanks for responding. This isn't a huge problem, as you have reason to believe that I also have a perfectly functional third party burning software. I just wanted to test effectiveness compared to other solutions Windows disc Image burner. To clarify: I used the virtual drive software installation with ISOs before, and now Windows wants to open the ISOs with one application other than disc Image recorder. If I select open with..., the Windows Disk Image burner is not an option. If you can direct me to the Image disk application recorder connect in my C drive, I could then set it as the default option.

  • Cannot use the Windows from the bottom of the unit key

    I went abroad and need to format my laptop. I lost my original copy of Windows XP in transit so I used a copy instead. I don't think it would be a problem since I was my product etc. on the machine key.

    I cannot validate my copy of windows now. Is anyway to do this without having to buy the software?

    Hello

    The Toshiba Recovery CD has already been activated.
    If you have lost your Toshiba Recovery CD you can order from the authorized Toshiba maintainer in your country!
    To my knowledge, the key does not work with all versions of Win

  • Cannot use the Windows 7 backup program

    "The backup application could not start due to an internal error:
    You must be logged on as administrator to perform this task.
    (0 x 81000010)"

    It is a certain parameter specified in a GPO, but no idea what setting, Google does not help.

    http://social.technet.Microsoft.com/forums/en-us/w7itprogeneral/thread/07a5731c-efe1-4bfc-8195-319d9fd5e6a8/

  • vSphere client using the name Netbios on ESXi host does not connect using the credentials of a Windows session

    I have 3 ESXi 5.5 hosts, all connected to a single server vCenter, where we try to authenticate directly to the host by using the windows logon credentials. I have installation of the Administrators group of ESX and filled with the admin accounts that I want to be able to authenticate to the host. The Netbios name of the domain is tstdomain (for example) where the domain name is tstdomain.com. If I connect directly to a host and check the checkbox 'Use Windows Session Credentials', the vSphere client will default by using the Netbios name of tstdomain\adminusername and the connection will fail indicating that the username and/or password is incorrect. If I enter the domain name of tstdomain.com\adminusername, I am able to connect to the host without error.

    Does anyone know how get past that this matter have the vSphere client uses the domain name or to use the Netbios name and connect with the credentials to active directory? I looked by editing the file/etc/hosts and checked that the SPN of the host is correct in active directory with the command hostname setspn - l, with no luck on one. I also tried to change the field of research for the Netbios name of tstdomain rather than the tstdomain.com domain name, also did not work.

    Thanks in advance for your suggestions on how to correct the problem.

    Seems that this issue was due to a slow network and the connection timeout when you try to talk to the domain controller. I am able to connect with windows creds now, but the connection is very slow. I increased the default period of 30 to 60 seconds to help work around the problem.

  • Cannot receive or send mail using the Windows Mail get 0x800CCC18 error number

    How can I fix the problem?
    Cannot receive or send mail using the Windows Mail get 0x800CCC18 error number
    Windows mail was working fine until about 2: 30 EST 2011-12-14 and tried to send an email and got the above error msg.

    Check with your mail service provider to make sure that there is not an intermittent interruption of service.  If you have webmail capabilities, you can also check.  Otherwise, compact and repair the database (www.oehelp.com/WMUtil/) and if that doesn't help, remove your e-mail account, close and reopen WinMail and then add it back back.  Also check 3rd party program interference such as antivirus software (see www.oehelp.com/OETips.aspx#3).

    Steve

  • Users on the network cannot use the files after upgrade to Windows 10

    When I switch to win 10 people on the network cannot use the files on my computer

    Hello

    Thanks for posting your query on the Microsoft Community.

    With the description, I understand that you have problems with network connectivity and access files on network on your Windows 7 machine. I will certainly help you to the query.

    I would be grateful if you could help me with more information to better understand the problem and a solution:

    1 is this computer connected to a network domain or home?

    2. what exactly happens when users on the network try to use/access files on this computer? Do they get an error message/code?

    In the meantime, I suggest you refer to the below mentioned thread and check if this is useful:

    http://answers.Microsoft.com/en-us/Insider/Forum/insider_wintp-insider_web/Windows-10-network-file-sharing/18fba63e-7b6c-46FE-BA23-575a634fcee8

    Hope this information is useful. Please write us back with the required information for assistance, we will be happy to help you.

  • Error: "Windows cannot start the windows firewall/internet connection sharing (ICS) service.

    On my Eee PC under XP Home edition tablet, I get the error "Windows cannot start the windows firewall/internet connection sharing (ICS) service" when I try to access my firewall. I also can't connect to my router Wireless Lan to go on the internet. This may be due to some viruses that have been deleted using Microsoft Security Essentials.But the problem persists. Could recharge SP2 solve this problem or am I condemned to reload the operating system?

    Hi jdmanel,

    NOTE: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following link. http://support.Microsoft.com/kb/322756

    Follow the steps in the article.

    You cannot start the Windows Firewall service in Windows XP SP2

    Troubleshooting settings of Windows Firewall in Windows XP Service Pack 2 for advanced users

    For reference:

    How to manually open ports in Internet Connection Firewall in Windows XP

  • How to use the Windows character map with the Arc keyboard?

    When I "Select" and "Copy to Clipboard" character as a checkbox and then enter any rich text field, it is for some unknown reason, out with the bad temper, that I did not choose. I don't think it's related to the Arc keyboard fault, since I do it only with my mouse ArcTouch.

    My "copy to clipboard" feature has always worked well in the past until I installed this Arc keyboard and the copy function continues to operate properly with anything but Windows XP Pro SP3 32 Character Map.

    So I want to try to enter a character by typing the standard code for the character... but the Arc keyboard doesn't have a "Numlock", because it does not have a dedicated digital keyboard and by the statement, you cannot use the number keys "at the top".
    "Product Guide" for the Arc keyboard is not very useful except on how to plug it in 28 languages.
    Is there a work around these two examples?
    Thank you.

    Someone told me that you can not add whatever it is wiped from the map of characters in a field of type text such as Notepad, that she must be rich text applicable as Wordpad. Not true..., I guess?
    Oh well, it's here where I got to go to... [Is it safe? [I'm going to cross that off my list].

    I forgot to say in the last post, & slipped a character of the fonts map does not either, on most of the trials if he drag & drop is of course the bad character and it is not just "Wingdings", but several I tried.

    When you say "characters in some fonts like"Wingdings"and"Symbol"will not display properly if changed to a different font - even if the code is correct."

    Can you help me understand what that means or how that could happen or what I can do to change the font?

    When I choose a check mark in the Wingdings font and then enter it here, it's: [u]. I don't know I wasn't looking to change police in Wingdings to something else between selecting and placing it here.

  • My windows firewall does not illuminate. Windows cannot start the Windows firewall Service ICS.

    How can I solve unless I need to have this problem to download protection software.

    Hi Octavia10,
     
    -What version of service pack of Windows XP you are using?
     
    Try the methods listed in the given article to resolve this problem:
     
    Note: The steps are applicable to the other version of Windows XP as well.
  • Unable to enter some charatcers, i.e. a, e, i, o, u, s but can eneter other i.e. h, w, q, etc. When you use the Windows product key update tool

    I am changing the product windows on a machine key recently image. To do this I use the Windows product key update tool. Usually, when I use the tool all right and there is no problem; However, in this case it I cannot enter certain keys as in a, e, i, o, u, s, etc.. I tried copy and pasting from Notepad and it sticks only certain letters like h and q.

    Someone at - it suggestions/ideas on how to solve this problem without having to re - install Windows?

    Sorry, we had used the wrong key for the version of the o/s.

  • I can't install software to windows 7 using the windows vista product key

    In our firm, we use windows vista OS of PC licensed. can I install windows 7 OS with licensed windows vista product key?

    Hello

    No, you cannot use the PK of Vista to install Windows 7.

    @@@@@@@@@@@@@@@@@@@@@@@@

    Windows 7 is not free; you have to buy.

    Microsoft sells more Windows 7; Try Amazon.com.

    @@@@@@@@@@@@@@@@@@@@@@@

    This offer is free years; long expired.

    How does the Windows 7 upgrade Option?

    The Windows 7 upgrade Option is available through participating PC manufacturers on some PC and Microsoft on any purchase of packaged product Windows Vista. The Windows 7 upgrade Option applies to Windows Vista Home Premium, Business and Ultimate editions. Your upgrade to Windows 7 will be the comparable version: so you will get either Windows 7 Home Premium, Windows 7 Professional (upgrade to Windows Vista Business) or Windows 7 Ultimate, respectively. The Windows 7 upgrade Option program works on June 26, 2009 through January 31, 2010. Some manufacturers may choose to shorten the time of upgrade Option.

    @@@@@@@@@@@@@@@@@@@@@@@@@

    Before purchasing Windows 7, follow these steps:

    Go to your computer / computer laptop manufacturer Web site and see if Windows 7 drivers are available for your make and model computer / laptop.

    If this is not available, Windows 7 will not properly work for you.

    Run the "Windows 7 Upgrade Advisor.

    http://www.Microsoft.com/en-US/Download/details.aspx?ID=20

    Check if your specifications are compatible for Windows 7:

    "Windows 7 system requirements"

    http://Windows.Microsoft.com/en-us/Windows7/products/system-requirements

    Windows 7 upgrade paths:

    http://TechNet.Microsoft.com/en-us/library/dd772579 (v = ws.10) .aspx

    See you soon.

  • Java, I can't uninstall java (TM) 7 update3 using the windows uninstall program what do I do?

    I can't uninstall java (TM) 7 update3 using the windows uninstall program what do I do?

    Hello

    1. what happens when you try to uninstall it?

    2 have you made changes on the computer before this problem?

    3. facing this problem with Java?

    I suggest that you run the patch from the following link and check the status of the issue.

    Problems with programs that cannot be installed or uninstalled.

    http://support.Microsoft.com/mats/Program_Install_and_Uninstall

    You can also refer to:

    http://www.Java.com/en/download/uninstall.jsp

Maybe you are looking for

  • Save copies of my pictures on my computer

    I tried to secure the originals of the pictures, but the Apple tutorials are trash and do not help. Please, anyone?

  • Hard drives on the Satellite C650-198

    I have a Satellite C650-198 running Windows 7 (64-bit) and notice that the size of the 250 GB drive is divided into two main readers of 116 GB each (I accept that the remaining 18 GB is the section of system recovery and have no problem there). I rei

  • In Firefox 5, the home button is not found

    After the upgrade to Firefox 5, the home button disappeared. I went to personalize toolbars and I searched the home button drag upwards as I had done before, but to my surprise it wasn't there. Where he could hide?

  • Problem of transfer function

    Hello I created this function to transfer in Labview. But I realized that a small entry value (in my case, I used 0.0014) will produce a different result to compare with that of Matlab. I couldn't understand what the problem is. Could you help me in

  • The Alienware X 51 (r1) and 960 GTX

    So, I recently bought myself a GTX 960 4 GB PNY version for my 51 x video card. When it arrived I plugged it got the drivers installed and everything worked out perfectly well. After about 2-3 days of use my computer closed out of no where and will n