Link to home
Start Free TrialLog in
Avatar of TripapHoniC
TripapHoniCFlag for United States of America

asked on

vSphere 5.5 w/ vCenter 5.5 permission to log in denied

Hey guys.  Just deployed a new vCenter Server 5.5 VM and it went extremely smooth.  I can log into the Web Client with the credentials configured during installation but cannot log into the vCenter Server over vSphere from any workstation or locally.  It says "The vSphere client could not connect to "x.x.x.x". You do not have permission to login to the server: x.x.x.x

I did install Single Sign-on ... basically just ran the Simple Install through to completion and it was 100% successful.  It's on a Windows Server 2008 R2 vm

One error or alert I get is related to IIS and port 80.  This was a brand new 2008 server.  No Roles configured and only Feature was .NET 3.5.
2013-09-26-08-22-08.jpg
Avatar of coolsport00
coolsport00
Flag of United States of America image

Silly question, but are you using the credentials of the local admin group of the server vCenter is installed on. You can't use domain credentials, unless of course you configured those to be in the local admin group of the vCenter Server already.

~coolsport00
Avatar of Haresh Nikumbh
Log into the Web Client as admin@system-domain. Single sign on.

Go to Administration > Sign-On and Discovery > Configuration.
Under Identity Sources, verify that your domain is listed
Avatar of TripapHoniC

ASKER

I don't believe I've manually configured any credentials aside from the Single Sign-on addon.  I looked in Administration > Sign-On and Discovery and there was no Sign-On and Discovery listed.  Not a lot listed in fact anywhere.  I assume that's because I haven't added any hosts yet but I don't see any place to change any settings at all.
@takecoffe

When I try to 'Use Windows Session Authentication' in the Web Client I get this ::

The authentication server returned an unexpected error: ns0:RequestFailed: No such provider in tenant [vsphere.local] for domain [XXX.local]. The error may be caused by a malfunctioning identity source.

I can logon, however with the administrator:pass I set when I was configuring vCenter but the web console is empty other than menu content.
This is what I see when I log in as administrator@system.local
2013-09-26-09-59-36.jpg
I have nothing under Administration.  That's the problem.  Found that article and one other that kinda paralleled what my error is but mine has nothing about any SAML tokens.  

Regardless I have nothing to select under Administration.
And what about user : admin@system-domain  ( this is default admin user for SSO)
What would I use for credentials for admin@system-domain?  The domain is ACI.local.
The default Single Sign-On administrator is admin@System-Domain with the password you specified at installation

user name is "admin@system-domain"  

password is which you have enter while installing SSO
That's what I thought.  I've tried logging in with those credentials but they do not work.  The password I'm entering is definitely the right one as I used the same one for everything on this particular vm.

Should I reinstall SSO?
ASKER CERTIFIED SOLUTION
Avatar of Haresh Nikumbh
Haresh Nikumbh
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
administrator@vsphere.local is what the credentials were set to by default.  I couldn't change administrator or vsphere.local when I ran through the setup wizard again.
Well I attempted to log into Web Client with administrator@vsphere.local and it tries to authenticate but gives me this ::

Based on the current configuration, the SSL certificate of the authentication server was not trusted.

I assume I need to do this http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1021514
I ended up spinning up a new VM with Windows 2008 R2 and logged in using administrator@vsphere.local

Could never resolve the credential issue.