Link to home
Start Free TrialLog in
Avatar of beardog1113
beardog1113Flag for China

asked on

vcenter 4.1 AD authentication

hello Expert
i just build up a vcenter with edition is 4.1, could you teach me how i can add Active Directory authentication for this vCenter so that i can delegate permissions for each domain account?

thank you
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Is your vCenter Server installed and added to a Member Server of a Domain ?
Avatar of beardog1113

ASKER

hello
it looks like make the vShpere host join domain and authenticate againstit, if i have 100 host under the vcenter, may i need do this 100 times for each host?
does it possible make the vcenter to authenticate against the domain directly?

thank you
hi Andrew
yes it is, the vcenter is a domain member server.

thanks
ASKER CERTIFIED SOLUTION
Avatar of Abhilash
Abhilash

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
hello Abhilash
your options is under login with "Administrator" right?

hello Andrew
of course i am using the account belong to "domain admins" to login the vcenter, but it told me that i don't have the permission to login. also as Abhilash mentioned, while add the permission, how can i update the domain list? i mean i have several domains in our organization which is totally trust domain relationship, how can i display other domains in the list?

thank you all
Avatar of Abhilash
Abhilash

Yes you will get the options when you login with Administrator if that is what you are asking.
Any user who has Administrator login to vCenter can do these changes.
I not sure if this is possible in vCenter 5.0 and below. I'm sure it can be done from 5.1 and above.
Are you Domain Administrator accounts, members of the Local Administrators group on the member server? (which is usually the Default).

Any member of this group has Default Access to vCenter, and when you've logged in, then we can suggest how you modify permissions, and add groups and roles.

If the trusts are in place, those domains, should be able in the pick lists.
thank you