Vcsa Unable to Authenticate. Try Again

03 January

Unable to logon VMware vCenter Appliance with Root

A couple of weeks ago the VMware vCenter 5.five.0b update was released. Fourth dimension to upgrade my abode lab vCenter Server Appliance from version v.5.0a to version 5.5.0b. I am using the appliance so this should exist like shooting fish in a barrel.

When I was trying to login to the management surround with my root business relationship I was getting errors. Unable to authenticate.

Also when I connected with SSH to the Appliance I'm getting mistake messages that my password is not correct.

I know for certain that this password is the right one. I opened a console screen from the vSphere Webclient and that one is besides giving me the error.

Also the VMware vSphere Web Customer is giving an error.

I am unable to logon with the root business relationship of the apparatus.

Ok.. This is a trouble. I remembered reading a web log post of William Lam almost a trouble with the expiration date of the Root Countersign. So I started searching the VirtualGhetto blog site, and found the article. See http://www.virtuallyghetto.com/2013/09/how-to-recover-vcsa-55-from-expired.html

So I followed the steps described in Williams commodity.

1. Boot up vCenter Server using a current Linux live CD. I am using a Ubuntu ISO that I had.
   
2. Mount the VMware vCenter Server Appliance root partition. This should be /dev/sda3
   
3. Edit the /etc/shadow file with your favorite editor. Communication make a copy of the shadow file before editing it.
   

4. When the root password is expired there should be an ten in forepart of the password string. This was the case
   

   

5. Remove the x in front of the countersign string and salve the shadow file.
   
6. Reboot the VCSA. If everything went well y'all are able to logon with the root account.
   

I was able to logon into the apparatus again, but to prevent future problems with the countersign expiration I disabled the expiration in the management page of the VCSA. Because this is my home lab this is ok.

In production environments this is not appropriate

Lessons learned:

• Configure a SMTP server and an warning email account so you will exist notified when the password is going to be expired.
  
• Or in a home lab environment, disable the expiration date of the root countersign.
  

More information:

• The VMware vCenter Server Apparatus release notes: https://www.vmware.com/support/vsphere5/md/vsphere-vcenter-server-550b-release-notes.html
  
• VirtualGhetto blog: http://www.virtuallyghetto.com/2013/09/ambassador-password-expiration-in.html
  

Disclaimer.
The data in this article is provided "AS IS" with no warranties, and confers no rights. This article does not represent the thoughts, intentions, plans or strategies of my employer. Information technology is solely my opinion.

guillaumeadisred.blogspot.com

Source: https://blog.mrpol.nl/2014/01/03/unable-to-logon-vmware-vcenter-appliance-with-root/

Share this post