Posts

Showing posts from 2019

Unable to add permissions or Unable to add any identity source in vCenter 6.x

ssoAdminserver logs [INFO ][2019-12-19T14:50:25.432Z][k4cu9c27-323-auto-91-h5:70000118] auditlogger - {"user":" Administrator@VSPHERE.LOCAL ","client":"","timestamp":"12/19/2019 14:50:25 UTC","description":" Registering the Active Directory as identity source with domain Name 'LAB.LOCAL'","eventSeverity":"INFO","type":"com.vmware.sso.IdentitySourceManagement "} [INFO ][2019-12-19T14:50:25.432Z][k4cu9c27-323-auto-91-h5:70000118] IdentitySourceManagementServiceImpl - [User {Name: Administrator, Domain: VSPHERE.LOCAL} with role 'Administrator'] Registering the Active Directory as identity source w ith domain Name 'LAB.LOCAL' [INFO ][2019-12-19T14:50:25.488Z][k4cu9c27-323-auto-91-h5:70000118] PooledLdapConnectionFactory - New connection created in pool PooledLdapConnectionIdentity [tenantName=null, username=vcsalab.org@vsphere.local ...

missing chunk number 0 for toast value 120710098 in pg_toast_17620; -Postgres corruption

vCenter 6.x with postgres DB corruption making vpxd to crash vpxd logs 2019-04-20T16:26:10.995-06:00 error vpxd[11244] [Originator@6876 sub=Default] [VdbStatement] SQLError was thrown: "ODBC error: (XX000) - ERROR: missing chunk number 0 for toast value 120710098 in pg_toast_17620; --> Error while executing the query" is returned when executing SQL statement "SELECT ID, CONFIG_MANAGER FROM VPX_HOST" 2019-04-20T16:26:10.995-06:00 error vpxd[11244] [Originator@6876 sub=DbBulkLoader] [VpxdDbBulkLoader::Load] Failed to load tableDef 19 from database: "ODBC error: (XX000) - --> Error while executing the query" is returned when executing SQL statement "SELECT ID, CONFIG_MANAGER FROM VPX_HOST" 2019-04-20T16:26:10.995-06:00 error vpxd[11244] [Originator@6876 sub=Default] Win32 invalid_parameter: expression=(null), function=(null), file=(null), line=0 2019-04-20T16:26:11.029-06:00 info vpxd[11244] [Originator@6876 sub=Default] Co...

PNID change issue on 6.7 Update 3

Image
As we know PNID change is supported on 6.7 U3 onwards, however while changing the hostname from VAMI, you may encounter errors “ Failed to create replication placeholder ” and “Network update failed” : To fix the issue, we need to replace the pnid_utils.py file which is at /usr/lib/applmgmt/networking/py/vmware/appliance/networking/pnid/ location with attached one, restart Appliance mgmt. service and try changing PNID again.

Quick Esxi commands

 Esxi’s command’s to make your daily troubleshooting  - Lists all vm's running on hypervisor and provides vmid         vim-cmd vmsvc/getallvms     List the inventory ID of the virtual machine with the command :      vim-cmd vmsvc/getallvms |grep <vm name>     Note: The first column of the output shows the vmid. Check the power state of the virtual machine with the command:       vim-cmd vmsvc/power.getstate <vmid> Power-on the virtual machine with the command       vim-cmd vmsvc/power.on <vmid> Power-off the virtual machine with the command:       vim-cmd vmsvc/power.off <vmid> Reboots vmid referenced from getallvms command           vim-cmd vmsvc/power.reboot vmid      Po...

vPostgres service fails to start with Fatal error : bogus postmaster.pid

I came across this issue today where vPostgres service was failing on VCSA with error Fatal Error. # service-control --start vmware-vpostgres Perform start operation. vmon_profile=None, svc_names=['vmware-vpostgres'], include_coreossvcs=False, include_leafossvcs=False 2019-11-06T21:38:14.283Z   Service vmware-vpostgres state STOPPED Error executing start on service vmware-vpostgres. Details {     "resolution": null,     "detail": [         {             "args": [                 "vmware-vpostgres"             ],             "id": "install.ciscommon.service.failstart",             "localized": " A...

Unable to run a automated Script to Backup the VCSA .Failed to run a script which makes connection via API calls 

Image
Error:  A server error occurred: 'com.vmware.vapi.std.errors.unauthenticated': Unable to authenticate user (Server error id: 'vapi.security.authentication.invalid'). Check $Error[0].Exception.ServerError for more details. ERROR:vmware.appliance.vapi.auth:Requested SSO authentication but SSO authentication module is not available vami.log 2019-12-02T18:48:44.336 [50279]INFO:twisted:"127.0.0.1" - - [02/Dec/2019:10:48:44 +0000] "POST /api HTTP/1.1" 200 2783 "-" "vAPI http client" 2019-12-02T18:50:35.336 [50279] ERROR:vmware.appliance.vapi.auth:Could not parse HOK Token Traceback (most recent call last):   File "/usr/lib/applmgmt/vapi/py/vmware/appliance/vapi/auth.py", line 183, in authenticate     token.validate()   File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 529, in validate     signing_chain = self.validate_certificate () ...

My certification

Image

vCenter Convergence

Image
vCenter 6.7 U1 Convergence steps  vCenter with external PSC.  Mount VCSA 6.7 ISO and copy the converge.json from the following folder to local machine.  Edit the converge.json with the details.  Details Below :  ESXi Host name where the current vCenter is running.  Root Password vCenter FQDN or IP.  SSO user name SSO Pwd.  VCSA root appliance password.  Domain Name.  Username to join machine to domain.  Password for domain user DNS IP.  After that open CMD as Admin and browse to D:\vcsa-converge-cli\win32 and run the below command to verify the template.   vcsa-util.exe converge --verify-template-only c:\Converge\converge.json After verifying the template, run  the below command to run the convergence.   vcsa-util.exe converge --no-ssl-certificate-verification --backup-taken --verbose c:\Converge\converge.json            ...

Backup Failure occurring failing to Request HTTP Sessions vCenter

Issue :Commvault backup jobs were failing .Found from the logs Backup jobs are trying to establish an HTTP request to the vCenter and failing to establish the communication with the vCenter. Log snippets from commvault vsbkp.log from the proxy server 15:57:34 2357789 _Connect() - Exception - System.Net.WebException: The request failed with HTTP status 503: Service Unavailable.at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)    at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)at Vim25Api.VimService.RetrieveServiceContent(ManagedObjectReference _this)    at VISDKWrapper.SvcConnection._Connect(String url, String username, String password)  VSBkpCoordinator::OnMsgVMBackupGetNextVM 1  CVMWareInfo::Connect() - VISDKCppBridge::Connect failed [The request failed with HTTP status 503: Service U...

VAPI Endpoint service failure

VAPI Endpoint service failure  ERROR | state-manager1            | StsBuilder                     | Failed to acquire token for the solution user 2018-11-15T21:50:42.647Z | ERROR | state-manager1            | DefaultStateManager            | Could not initialize endpoint runtime state. com.vmware.vapi.endpoint.config.ConfigurationException: com.vmware.vim.sso.client.exception.AuthenticationFailedException: Provided credentials are not valid.         at com.vmware.vapi.endpoint.cis.StsBuilder.createToken(StsBuilder.java:182)         at com.vmware.vapi.endpoint.cis.StsBuilder.rebuild(StsBuilder.java:77)      ...

Manually Replacing the solution user certificate on VCSA/PSC 6.x

Manually Replacing the solution user certificate on VCSA/PSC 6.x Note : -- Take a snapshot of the VC or PSC before proceeding. --  PSC has two solution users : machine and vsphere-webclient. -- VC has four solution users : machine, vpxd, vpxd-extension and vsphere-webclient. -- VC with embedded PSC has four solution users : machine, vpxd, vpxd-extension and vsphere-webclient. -- SSO admin username and password would vary depending on the configuration. -- Windows Install directory may vary depending on your installation.  -- Run the below command to get the machine ID of the node : Appliance :   /usr/lib/vmware-vmafd/bin/vmafd-cli get-machine-id --server-name localhost Windows : "%VMWARE_CIS_HOME%"\vmafdd\vmafd-cli get-machine-id --server-name localhost 0. Take a backup of the old solution user certificates and its private keys. Appliance : /usr/lib/vmware-vmafd/bin/vecs-cli entry getcert --store machine --alias machine...