VSphere Orchestrator (vco) - problem to add a Powershell host

Hello world

I am currently set up a VSphere Orchestrator server and I have a few problems to add a new host via WinRM with Add a PowerShell host model.

I followed this tutorial:

http://blogs.technet.com/b/meamcs/archive/2012/02/25/how-to-force-WinRM-to-listen-interfaces-over-HTTPS.aspx

I can connect with Powershell to a second server HTTPS but not with the vco...

This is my setup:

PS WSMan:\localhost\Client> winrm get winrm/config
Config
    MaxEnvelopeSizekb = 500
    MaxTimeoutms = 60000
    MaxBatchItems = 32000
    MaxProviderRequests = 4294967295
    Client
        NetworkDelayms = 5000
        URLPrefix = wsman
        AllowUnencrypted = true
        Auth
            Basic = true
            Digest = true
            Kerberos = true
            Negotiate = true
            Certificate = true
            CredSSP = false
        DefaultPorts
            HTTP = 5985
            HTTPS = 5986
        TrustedHosts
    Service
        RootSDDL = O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
        MaxConcurrentOperations = 4294967295
        MaxConcurrentOperationsPerUser = 1500
        EnumerationTimeoutms = 240000
        MaxConnections = 300
        MaxPacketRetrievalTimeSeconds = 120
        AllowUnencrypted = true
        Auth
            Basic = true
            Kerberos = true
            Negotiate = true
            Certificate = false
            CredSSP = false
            CbtHardeningLevel = Relaxed
        DefaultPorts
            HTTP = 5985
            HTTPS = 5986
        IPv4Filter = *
        IPv6Filter = *
        EnableCompatibilityHttpListener = false
        EnableCompatibilityHttpsListener = false
        CertificateThumbprint
        AllowRemoteAccess = true
    Winrs
        AllowRemoteShellAccess = true
        IdleTimeout = 7200000
        MaxConcurrentUsers = 10
        MaxShellRunTime = 2147483647
        MaxProcessesPerShell = 25
        MaxMemoryPerShellMB = 1024
        MaxShellsPerUser = 30

PS WSMan:\localhost\Client> winrm enumerate winrm/config/listener
Listener
    Address = *
    Transport = HTTP
    Port = 5985
    Hostname
    Enabled = true
    URLPrefix = wsman
    CertificateThumbprint
    ListeningOn = 127.0.0.1, 169.254.152.175, 192.168.1.139, ::1, 2001:0:5ef5:79fb:2087:3306:fde2:7302, fe80::5efe:192.168.1.139%14, fe80::2087:3306:fde2:7302%15, fe80::c19d:d401:ff68:98af%13, fe80::c407:cc5e:43dc:6909%18


Listener
    Address = *
    Transport = HTTPS
    Port = 5986
    Hostname = host-vsphere.urbanvirtu.local
    Enabled = true
    URLPrefix = wsman
    CertificateThumbprint = 4f00d909810f619876bf5712a22e0fb21382d628
    ListeningOn = 127.0.0.1, 169.254.152.175, 192.168.1.139, ::1, 2001:0:5ef5:79fb:2087:3306:fde2:7302, fe80::5efe:192.168.1.139%14, fe80::2087:3306:fde2:7302%15, fe80::c19d:d401:ff68:98af%13, fe80::c407:cc5e:43dc:6909%18

If I try to connect from a second server via Kerberos with HTTPS it works:

PS C:\Users\Administrator> winrm identify -r:https://host-vsphere.urbanvirtu.local:5986 -a:Kerberos -u:administrator -p:password
IdentifyResponse
    ProtocolVersion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
    ProductVendor = Microsoft Corporation
    ProductVersion = OS: 6.3.9600 SP: 0.0 Stack: 3.0
    SecurityProfiles
        SecurityProfileName = http://schemas.dmtf.org/wbem/wsman/1/wsman/secprofile/http/basic, http://schemas.dmtf.org/
wbem/wsman/1/wsman/secprofile/https/basic, http://schemas.dmtf.org/wbem/wsman/1/wsman/secprofile/http/spnego-kerberos, h
ttp://schemas.dmtf.org/wbem/wsman/1/wsman/secprofile/https/spnego-kerberos

But with the vco I:

Name: test

The Host/IP: Home - vsphere.urbanvirtu.local

Port: 5986

Type remote PowerShell: WinRM

Transport protocol: HTTPS

Authentication: Kerberos

Session mode: A shared Session

User name: administrator

Password: password

cap1.JPG

cap2.JPG

Someone has had this problem before? What I did wrong?

Thanks in advance for your help.

Best regards

Jean

Based on the log, I see that "Connection refused:" error was connected to the kdc parameter in the krb5.conf file and you have already defeated it.

Now, if I understand 'Add a PowerShell host' the workflow remains in working condition and does not end.

This behavior I observed in the case of PowerShell plugin 1.0.3 is trying to connect to PowerShell host running PowerShell 4.0.

Would you please provide version of

the PowerShell vCO plugin version

PowerShell host - Windows Version

PowerShell host - PowerShell version

Tags: VMware

Similar Questions

  • Add a PowerShell host workflow question

    Hello people,

    I ran into a problem when I tried to run the add a workflow host Powershell.

    Here's what I've done so now...

    Installed PowerShell plugin in the system of the vCO.

    WinRM service that is configured according to the doc in my vCO server... I want to use the same vCO as a powershell host server too...

    I created the krb5.conf file in the installation of vCO location mentioned in the doc.

    Ran the workflow manage SSL certificates which was a success.

    Now I have to add this as a host of powershell to see in the inventory which fails with the error below.

    Connection timed out: connect (name of the dynamic Script Module: addPowerShellHost #16)

    Your help is very appreciated!

    Kind regards

    VMSavvy

    1. I suggest to add "-a: option of the Kerberos test to connect to the winrm service" This will ensure that the mechanisym of Kerberos authentication is used.

    > winrm identity-r:https:// host_name : port_number -was: Kerberos-sup: user_name Pei:password

    2. try to connect vCO PowerShell plugin using shared session and providing user specifiv credentials (but be sure first that this user has enough privileges to connect to the WinRm service using winrm client)

    > winrm identity-r:https:// host_name : port_number -was: Kerberos-sup: user_name Pei:password

    3. could you give the error reported in vCO?

  • Problem - add in plugin PowerShell PowerShell host

    Hello world.

    I want to run PS scripts locally on a host of the vCO.

    I have installed the components on it:

    1 WS 2008 R2

    2 vCO V5.1.0 build 2725

    3 PowerShell plugin V1.0.1

    4 WinRM V2.0

    5 PowerShell V2.0

    I configured WinRM by this command as an administrator:

    WinRM quickconfig

    WinRM set winrm/config/service/authentication @{basic = "true"}

    WinRM set winrm/config/service @{AllowUnencrypted = 'true'}

    WinRM set winrm/config/service/authentication @{basic = "true"}

    WinRM set winrm/config/client @{AllowUnencrypted = 'true'}

    WinRM set winrm/config/client @{TrustedHosts = "vco_host"}

    WinRM get winrm/config

    Config

    MaxEnvelopeSizekb = 150

    MaxTimeoutms 60000 =

    MaxBatchItems 32000 =

    MaxProviderRequests 4294967295 =

    Customer

    NetworkDelayms = 5000

    URLPrefix = wsman

    AllowUnencrypted = true

    AUTH

    Base = true

    Digest = true

    Kerberos = true

    Negotiate = true

    Certificate = true

    CredSSP = false

    DefaultPorts

    HTTP = 5985

    HTTPS = 5986

    TrustedHosts = 127.0.0.1, vco_host

    Service

    RootSDDL = O:NSG:BAD:P(A;;) GA; S:P(ALE;FA;GA;;;) (BA) WD) (AU; SA; GWGX; WD)

    MaxConcurrentOperations = 4294967295

    MaxConcurrentOperationsPerUser = 15

    EnumerationTimeoutms = 60000

    MaxConnections = 25

    MaxPacketRetrievalTimeSeconds = 120

    AllowUnencrypted = true

    AUTH

    Base = true

    Kerberos = true

    Negotiate = true

    Certificate = false

    CredSSP = false

    CbtHardeningLevel = relaxed

    DefaultPorts

    HTTP = 5985

    HTTPS = 5986

    IPv4Filter = *.

    IPv6Filter = *.

    EnableCompatibilityHttpListener = false

    EnableCompatibilityHttpsListener = false

    CertificateThumbprint

    WinRS

    AllowRemoteShellAccess = true

    IdleTimeout = 180000

    MaxConcurrentUsers = 5

    MaxShellRunTime = 2147483647

    MaxProcessesPerShell = 15

    MaxMemoryPerShellMB = 150

    MaxShellsPerUser = 5


    But when I want to add PowerShell host in PowerShell plugin I didn't do good. Nothing in the newspaper.

    I used HTTP, 5985, shared session and user session basis.

    Can someone help me please?

    Thank you.

    micy01

    Your log says: "Unable to load library 'vix'" - done-a you try to install the VERY OLD, obsolete plugin VIX on this host? If so, which causes all sorts of problems.

    1 it requires a basis of vCO Windows Server.

    2 If the initial configuration workflow is not running, it screws the other workflows

    3 If the library files are not unpacked in the correct on the vCO Windows Server folder, random questions appear throughout many parts of the vCO.

    It seems that you have:

    2013-10-23 15:40:27.219 + 0200 WARN [WorkflowHandler] error in the execution of the workflow 'add a PowerShell host '.

    java.lang.UnsatisfiedLinkError: cannot load library 'vix': Uvedeny modul nebyl nalezen.

    2013-10-23 16:46:49.511 + 0200 [performance] execution of workflow INFO ' copy to get virtual computers by name.

    2013-10-23 16:46:49.713 + 0200 WARN [WorkflowHandler] error in the execution of the workflow "copy to get the virtual computers by name.

    java.lang.NoClassDefFoundError: has not been initialized class com.vmware.vmo.plugin.vix.VixServer

    Remove the plugin VIX on your server and restart the Server Service of vCO. Your problems should go away

    Uninstall a plug-in for VMware vCenter Orchestrator

  • Add a PowerShell with Kerberos host

    Hi, I just added my domain controller name powershell host and it works not much, but now I need to add another host and this isn't a field control, but I need to run on a command powershell with domain administrator privileges, so I need to add this host powershell with kerberos authentication, how can I do this?

    I have installed a new virtual machine and add the host with kerberos without problem...

    the problem was the net framework 4.5

  • Get the stock vCO Powershell hosts

    Hello

    Does anyone know how to get Powershell hosts of the vCO stock of the script?

    I would like to run a script on several hosts of Powershell without specifying each (this list of construction and provision of a table would be a good solution).

    Thanks for your help

    var psHosts = Server.findAllForType ("PowerShell:PowerShellHost", null);

  • Have a problem to add file icon

    Hello
    I have a problem to add file icon to my desktop applications.
    I add the box not incorporated, checked...
    but I still have the problem
    Can someone tell me in detail how to solve this problem and exactly the place to put the .png file...

    Thanks in advance...

    Hello
    Thanks for the immediate response...
    I could solve the problem... in fact I just edit the .xml file in the bin-debug folder when I release build it has been verified the .xml file in the src folder and throwing the error.

  • Add production ESX hosts to a cluster

    Hi all

    I did some research in the admin guides and community forums, and I'm sure that I know what to do, but I would really appreciate a test of consistency here because the manipulation I do is in a production environment:

    I have a campus that contains two ESX areas that are managed by using vSphere and connected to a San. vMotion of works very well, the performance is very good (although the resources of the two boxes are fairly complete upward). However, I recently realized that I'd neglected to set up a cluster HA and DRS.  I want to remedy.

    I created the cluster with these specs:

    • the two HA and DRS, enabled
    • to the left, she also fully automated.
    • the power management of left
    • monitoring and host admission control enabled
    • leave the default settings for the behavior of the virtual machine
    • monitoring VM disabled
    • EVC enabled
    • the storage value of the swap with the virtual machine file

    I think that the next steps would be to add each ESX host consecutively and merged its resources with the cluster. However, here are a few questions:

    • How do you assess the risk factor to do this in a production environment (1 = perfectly safe, is a proven Scenario; 5 = you are out of your bloody mind? Do not)
    • Should I be triple-checking the SAN snapshots and planning of downtime for servers, or is it possible live and without any major qualms?
    • Am I right in assuming that it will increase my performance as well as provide better robustness of the campus, or should I expect a decrease in performance?

    Thank you very much in advance for your advice!

    Hey red,

    Addressing your particular situation, I would say yes to two questions.  Admission control HA is here to help you.  Ensure there are enough resources on the host computer to run the current and any expected load it will be after an HA event.  50% is close to default (but it is really based on the size of the slot) in an environment with two guests when guest cluster failures tolerates is set to 1 in a two and 25% host environment when the percentage of unused reserved as production capacity cluster resources in failover is left to its default value.

    If you have several virtual machines running that allows you to book 50% of your cluster resources (which it sounds like you have), then you have the option of "first category" your virtual machines and their giving priorities to restart event HA.  For their level, you'll want to active DRS (can be set to manual Automation), resource pools and you will need to configure your virtual machine under your HA settings options.  You'll want to pay attention to the priority of restarting VM here.

    I suggest you take a look at blog Duncan Epping http://www.yellow-bricks.com/ and Frank Denneman http://frankdenneman.nl/blog. They are all two fairly well the definitive answer to the HA and DRS questions and advice.

    See you soon,.

    Mike

    http://VirtuallyMikeBrown.com

    https://Twitter.com/#! / VirtuallyMikeB

    http://LinkedIn.com/in/michaelbbrown

    Note: Epping and Denneman explained that the amount reserved by default resources when you use the host cluster failures tolerates is promising to reserve enough resources to power on virtual machines.  This reserve of resource does not on average current, account, or future default load.  If you want to manipulate this feature, modify the memory and CPU reserves, which are the numbers used to calculate the size of the slot.

    Post edited by: VirtuallyMikeB

  • How can I add a USB host controller high-speed to my PC?

    My OS is windows xp home edition. I get this message that the HI-SPEED device attached to Non HI-SPEED USB Hub.

    The USB Composite device is a USB HI-SPEED device and will function at reduced speed when plugged into a port not HI-SPEED.

    There is no host controller USB HI-SPEED installed on this computer.

    Recommendation: You add a USB host controller high-speed on this computer in order to get maximum performance.

    So, how can I add this USB host controller high-speed to my PC? Is - this material I must add and physically install to my PC?

    As always, any help is greatly appreciated.

    Thank you!

    drake68

    Hi Drake,

    Review the devices USB connected to your PC and make sure that there is not a USB 1.x device connected to the same USB HUB (front or rear).  USB 1.x devices will cause the USB HUB at the bottom shift to 1.x speeds.

    You have an old PC (2002), it is possible that your PC does not have a USB HUB 2.0.  In this case, you need to install a USB PCI adapter card.

  • Problemas al move vm to host Red

    Hola,

    Recently me he con sown a problema al mover unas vm host (vmware server 1.0.10), he rated UN of United Nations host maquinas movido an otro, los misma version SO welcome back (win 2003 x 64) y vmware 1.0.10, el resultado are Quebec City of formed an aleatoria pierden the conexion of red of forma aleatoria, if reinicias el equipo vuelve a funcionar pero al poco tiempo vuelve a fallar.) Lo curioso es Québec in el donde mas accommodate me falla tambien he movido a otro host linux vms con esas y vms me how correctamente.  Las vmware tools estan actualizadas.

    He read documents in los foros of vmware, also of problemas con bastante certain red cards, the duplicidad of mac address, uuid...

    He created una vm nueva added los discos of the vm as openaing y me ha pasado lo mismo. UNO los los temas what habla are the mac address y el uuid, which are training correcta estos values change, if are what deben al mover change host...

    In the end a worm TR alguien is ha encotnrado con este error y tiene the respond

    Gracias

    Hola Klxout,

    Por eso is replaced by Recomiendan quitar el sweet of las while, generan mas a cabeza dolor generalmete.

    Honestly all the clients that tenemos optar por vmware server cuando necesitaron usar dejaron cvomo nic teaming features y demas features.

    Te recommend that uses Esxi are gratuito y you permite los teams realize of forma transparent.

    Mando you cordially.

    Diego

    No olvides destacar if respuesta fue the correcta o ayuda resultó.

    Be sure to give the right answer or assistance.

  • SQL vCenter Orchestrator config problem

    I recently downloaded and installed vSphere 5. I installed vCenter and added my esxi servers successfully. I'm trying to configure Orchestrator. When I connect and try to set up the database, I can not connect. I'm not sure what to put. I entered the ip address of the local computer, which is where I installed the vCenter server. When I installed vCenter he installed SQL 2008. I guess it creates the database for Orchestrator, is this correct. If this is not the case, what should I do to get this working. I downloaded SQL 2008 express manager but cannot even see that the database. How to solve this problem?

    Hello

    The vCenter Server Setup does not create a database for Orchestrator.

    Here's what you need to do to set up the database of the vCO.

    First configure SQL Server Express to the remote connection. Here are the steps:

    http://pubs.VMware.com/vSphere-50/topic/com.VMware.vSphere.vco_install_config.doc_42/GUID-0F8AE76E-6BB0-4679-B597-973E4ECB8177.html

    Then manually create the database of vCO. For SQL Server Express, you can use the osql tool (just search osql on the computer on which you installed SQL Server Express). The osql.exe file can be found here:

    C:\Program Files (x 86) \Microsoft SQL Server\90\Tools\Binn\

    or here:

    C:\Program Files\Microsoft SQL Server\100\Tools\Binn\

    The steps for creating a database with OSQL are:

    1. start the osql tool in a command prompt.

    (a) go to the installation directory.

    (b) type osql.exe EI

    (EI means approved connection).

    2. create the database of vCO, vco, for example.

    (a) on the first line type: CREATE DATABASE vco

    (b) on the second line type: GO

    Finally, you can configure vCO to work with SQL Server Express using the interface Configuration of the vCO. The steps to do this are provided as examples in the subject to: http://pubs.vmware.com/vsphere-50/topic/com.vmware.vsphere.vco_install_config.doc_42/GUID841EB9F0-2CBC-44E3-9AC2-4EBAE36F6942.html

    I hope this helps.

  • vCenter / Orchestrator configuration problem

    Hello

    While the implementation of vCenter Server and Orchestrator configuration, I had trouble to finish. I am not able to find any user who is a member of the Group of Directors vCO to fill the Plug-ins section which is necessary to Boot Options. The other Orcestrator server cannot run to add a user in the Administration Group (assuming that this is the place that it should be done) wihout fill first the Startup Options section in the Web Configuration.

    The back Orchestrator Installation and Configuration Guide not clearly how do a user member of the management group until the administrator has started, however, it says "enter the credentials of a user who is a member of the group administrator Orchestrator." I tried the default user (vmware), the user I set up in the pub for vCenter Server service running and the local administrator, but he keeps giving the error «Bad credentials for the installation of the plugin.» "Unable connect user: vCenter, unknown user.

    Any help is appreciated how go about this situation.

    Hi Martell,

    I'm sorry to hear that you are having problems with the configuration.

    Let me see if I could erase this until relations are here.

    1. the user name that you used to connect to the Configurator is not related to any configuration in the configurator.

    2. the user of the plugin in the plugin name must be in the ad group that you specified in the LDAP tab under group admin vCO.  Here is my config of the sample for the vCO admin group: "CN = vco - admin, CN = Users, DC = pm - vco, DC = local.

    I guess that if you add the service account used by running vCenter Server to the group admin vCO listed above you will be ok.

    Let us know if it works.

    SIA

  • vCenter - vSphere Web Client problem

    Hello

    We have some problems with our Web Client vSphere. The vCenter 5.1 is installed on a Windows Server 2012, and you can connect to the Web Client.

    When you log on as "Administrator" (the Windows account) everything works fine, but when you use the admin@System-Domain account you can connect, but there is no display resources:

    No ESXi hosts, no VMs, no data warehouses, nothing.

    CU

    Well you would login to VC using the account administrator (via the web client), click on the Victoria Cross and select the permissions tab, and then add the admin@system-domain and assign the required permissions.

    Girish

  • VMware vCenter Orchestrator Configuration problem

    Hi guys,.

    My company has just installed VMware vCenter Orchestrator and we try to create a new host to vCenter server with version 5.0.1.

    Can someone point me to documentation that shows me how to configure the web page in the print screen attached?  Or can someone please tell me what is needed in the empty fields, etc.?  When we try to enter info, we get alerts of service of red light of the vCenter Server tab and the tab startup options.  Both give us a red circle indicating a problem.

    Thank you!

    A free IP address? Oh... No, this plugin configuration is not actually CREATE a vCenter for you, it allows you to configure the vCO to speak to an EXISTING vCenter server you must already have a server vCenter configuration somewhere and you must use the FULL domain name or address IP of this server in this configuration.

  • Problems with having a Remote Host for the server vCenter Server vSphere?

    Hello

    We have a single vSphere Host located in the United Kingdom and a host vSphere cluster type 3 in France. I plan to add the vSphere Host UK to the France of vCenter Server.

    Does anyone know of any problem with the addition of a vSphere Host of a vCenter Server that is in a remote site rather than on the local network?

    See you soon

    Vince

    I put my vCenter without problems. Just keep in mind not to create a cluster with 2 teams who are on different nodes. Only you can manage the remote ESX host

  • Problems to add maps for portfolio apple

    I recently bought a Apple SE and wanted to add my HSBC account we based as I live in France and could not complete the operation.

    I called HSBC and they say you must be present in the United States to do this. I entered my credit card Chase on my portfolio of France and had no problems. I seems that banks call centers are uninformed of the phone smart payment applications.

    Anyone has any useful suggestions, thank you?

    Fredrick

    Hello

    Different banks may use different criteria when it decides to approve the applications to add their cards to pay Apple - which may include information about your location as you seek to add to the map.

    These decisions are based with the card issuers, not with Apple.

Maybe you are looking for

  • The data type double in CT that is converted to PDM

    Hi allIn short, to be able to remove channels and groups of a PDM file, I convert the file to a tdm, delete channel or group storage using screws and the convert to PDM. The problem is when tdms is converted to tdm, double data types (64-bit) became

  • It still work?

    I'm a little worried that there could be some cases where this would not be out to true. If so, is there a better way to do it? Just noticed if min = value ucrrent to check he will say new min even if there isn't, so I count to do this. But I'm more

  • Laptop HP Pavillion: Realtek RTL8723BE 802.11b/g/n WIFI adapter not ANSWER DO NOT

    Hello I just bought a HP Pavilion laptop 2 weeks ago and I noticed that it takes about 5 minutes to connect to the internet. It says I'm connected but the initial loading of a Web page takes awhile for some reason any. What is the reason for this? Al

  • Acer Aspire switch 11 Umschaltung in Tabletmodus geht nicht devising

    Hallo, I hope bin ich mit meinem switch right Forum gelandet im ich habe seit kurzem Windows 10 auf meinem Switch, works die automatic Umschaltung leider in den Tabletmodus nicht. Wenn ich die abclipse keyboard, erhalte ich eine message Infocenter un

  • USB device not recognized error

    I am running Windows 7 on an acer 4810 tMy computer keeps telling me that I have an unknown USB device.In Device Manager, the device will appear and then disappear every few seconds.The only USB device I have ever used with this PC is an external mou