{"id":2021,"date":"2015-04-14T10:00:52","date_gmt":"2015-04-14T08:00:52","guid":{"rendered":"http:\/\/vm.piszki.pl\/?p=2021"},"modified":"2015-04-14T12:06:50","modified_gmt":"2015-04-14T10:06:50","slug":"vcsa-5-5-ponowne-zarejestrowanie-vcenter-w-sso-w-trybie-wymuszenia","status":"publish","type":"post","link":"https:\/\/vm.piszki.pl\/?p=2021","title":{"rendered":"vCSA 5.5 – ponowne zarejestrowanie vCenter w SSO w trybie wymuszenia."},"content":{"rendered":"

Bardzo lubi\u0119 vCSA, jeden ruch r\u0119k\u0105 i ca\u0142e \u015brodowisko postawione. Niestety ze wzgl\u0119du na wbudowan\u0105 baz\u0119 danych ci\u0119\u017cko jest przeprowadzi\u0107 procedur\u0119 reinstalacji w przypadku wyst\u0105pienia problem\u00f3w. Ostatnio po restarcie vCSA ze zdziwieniem stwierdzi\u0142em, \u017ce vSphere Web Client pokazuje \u201cEmpty inventory\u201d.<\/p>\n

\"emptyinv\"<\/a><\/p>\n

 <\/p>\n

<\/p>\n

Po przeprowadzeniu odpowiedniej analizy, w logu \/var\/log\/vmware\/vsphere-client\/logs\/vsphere_client_virgo.log znalaz\u0142em co\u015b takiego:<\/p>\n

com.vmware.vim.binding.vmodl.MethodFault: The connection to vCenter Server „AB9B69A0-26C1-4EAD-A574-86C01C82BBFE” has been lost.<\/span><\/p>\n

Oznacza to, \u017ce vCenter zosta\u0142o wyrejestrowane z SSO. W vSphere 5.5 tak to dzia\u0142a, vSphere Web Client poka\u017ce ka\u017cde vCenter zarejestrowane w SSO. Dzi\u0119ki temu mo\u017cemy jednym klientem zarz\u0105dza\u0107 kilkoma vCenter. Postanowi\u0142em r\u0119cznie ponownie zarejestrowa\u0107 vCenter w SSO. Na pocz\u0105tku sprawdzamy jakie serwisy s\u0105 zarejestrowane w SSO:<\/p>\n

pvc1:\/etc\/vmware-sso\/register-hooks.d # \/usr\/lib\/vmware-sso\/bin\/vi_regtool listServices <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span>
\nIntializing registration provider…
\nGetting SSL certificates for <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span>
\nAnonymous execution
\nFound 6 services.<\/span><\/p>\n

Service 1
\n———–
\nserviceId=local:f05bcb61-1586-4805-bb99-eca79b326faa
\nserviceName=The administrative interface of the SSO server
\ntype=urn:sso:admin
\nendpoints={[url=<\/span>https:\/\/pvc1.piszki.lab:7444\/sso-adminserver\/sdk\/vsphere.local,protocol=vmomi]}<\/span>
\nversion=1.5
\ndescription=The administrative interface of the SSO server
\nownerId=
\nproductId=product:sso
\nviSite=local<\/span><\/p>\n

Service 2
\n———–
\nserviceId=local:cfb6557b-25fc-415d-90b2-0f90bb9dd95f
\nserviceName=The security token service interface of the SSO server
\ntype=urn:sso:sts
\nendpoints={[url=<\/span>https:\/\/pvc1.piszki.lab:7444\/sts\/STSService\/vsphere.local,protocol=wsTrust]}<\/span>
\nversion=1.5
\ndescription=The security token service interface of the SSO server
\nownerId=
\nproductId=product:sso
\nviSite=local<\/span><\/p>\n

Service 3
\n———–
\nserviceId=local:33ac0b2d-9d69-4684-85ba-c37fff2f7097
\nserviceName=VMware Log Browser
\ntype=urn:logbrowser:logbrowser
\nendpoints={[url=<\/span>https:\/\/pvc1.piszki.lab:12443\/vmwb\/logbrowser,protocol=unknown],[url=https:\/\/pvc1.piszki.lab:12443\/authentication\/authtoken,protocol=unknown]}<\/span>
\nversion=1.0.2175565
\ndescription=Enables browsing vSphere log files within the VMware Web Client
\nownerId=logbrowser-pvc1.piszki.lab-da83b7fb-404c-4ad4-911e-f7b2ab8aaaf8
\nproductId=
\nviSite=local<\/span><\/p>\n

Service 4
\n———–
\nserviceId=local:19c572c9-3501-4278-b440-0606dcff7c2a
\nserviceName=The group check interface of the SSO server
\ntype=urn:sso:groupcheck
\nendpoints={[url=<\/span>https:\/\/pvc1.piszki.lab:7444\/sso-adminserver\/sdk\/vsphere.local,protocol=vmomi]}<\/span>
\nversion=1.5
\ndescription=The group check interface of the SSO server
\nownerId=
\nproductId=product:sso
\nviSite=local<\/span><\/p>\n

Service 5
\n———–
\nserviceId=local:27924ff7-0efb-48bf-b890-651fa58ee08e
\nserviceName=vsphere-client-pvc1.piszki.lab-6991e11e-8470-4f8d-8a90-b13db38c6d81
\ntype=urn:com.vmware.vsphere.client
\nendpoints={[url=<\/span>https:\/\/pvc1.piszki.lab:9443\/vsphere-client,protocol=vmomi]}<\/span>
\nversion=5.5
\ndescription=vSphere Web Client at pvc1.piszki.lab
\nownerId=vsphere-client-pvc1.piszki.lab-6991e11e-8470-4f8d-8a90-b13db38c6d81@vsphere.local
\nproductId=
\nviSite=local<\/span><\/p>\n

Service 6
\n———–
\nserviceId=local:3f83bb40-0fd6-453e-b5dc-24fdec238abe
\nserviceName=vCHS Plugin
\ntype=vsphere-client-serenity
\nendpoints={[url=file:\/\/\/usr\/lib\/vmware-vsphere-client\/server\/work\/tmp\/vchs-pckg1520000318964402821.zip,protocol=http]}
\nversion=1.5.1.0
\ndescription=vCHS Plugin
\nownerId=VMware, Inc.
\nproductId=com.vmware.vcim
\nviSite=local
\nReturn code is: Success<\/span><\/p>\n

Zgodnie z oczekiwaniami, nie ma \u015bladu po vCenter. Na wszelki wypadek pr\u00f3bujemy odrejestrowania vCenter z SSO:<\/p>\n

pvc1:\/etc\/vmware-sso\/register-hooks.d # .\/01-vcenter –mode uninstall –ls-server <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span> –user administrator@vsphere.local –password xxxx
\nIntializing registration provider…
\nGetting SSL certificates for <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span>
\nnull
\ncom.vmware.vim.binding.lookup.fault.ServiceFault:
\nerrorMessage = No such object
\ninherited from com.vmware.vim.binding.lookup.fault.ServiceFault
\nReturn code is: UnregisterFailed<\/span><\/p>\n

Zgodnie z oczekiwaniem, nic z tego. Pr\u00f3bujemy ponownego zarejestrowania:<\/p>\n

pvc1:\/etc\/vmware-sso\/register-hooks.d # .\/01-vcenter –mode install –ls-server <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span> –user administrator@vsphere.local –password xx –option vc-admin-principal=root –option sso-deployment-type=embedded
\nIntializing registration provider…
\nGetting SSL certificates for <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span>
\nAnonymous execution
\nSuccessfully saved SSO locations and certificates
\nReturn code is: Success
\nCreating SSO principal for vCenter Server
\nIntializing registration provider…
\nGetting SSL certificates for <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span>
\nvpxd-pvc1.piszki.lab-ad101ef0-9465-483e-b001-4f52d6f83729
\ncom.vmware.vim.sso.admin.exception.DuplicateSolutionCertificateException: vpxd-pvc1.piszki.lab-ad101ef0-9465-483e-b001-4f52d6f83729
\nReturn code is: AlreadyRegistered<\/span><\/p>\n

Niestety, komunikat wyra\u017anie pokazuje, \u017ce vCenter jest zarejestrowane.\u00a0 Kolejna pr\u00f3ba r\u0119cznego wyrejestrowania vCenter z SSO:<\/p>\n

pvc1:\/etc\/vmware-sso\/register-hooks.d # \/usr\/lib\/vmware-sso\/bin\/vi_regtool unregisterService -d <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span>-u administrator@vsphere.local -p xxxx -si id.vc<\/span><\/p>\n

Intializing registration provider…<\/span><\/p>\n

Getting SSL certificates for <\/span>https:\/\/pvc1.piszki.lab:7444\/lookupservice\/sdk<\/span><\/p>\n

null<\/span><\/p>\n

com.vmware.vim.binding.lookup.fault.ServiceFault:<\/span><\/p>\n

errorMessage = No such object<\/span><\/p>\n

inherited from com.vmware.vim.binding.lookup.fault.ServiceFault<\/span><\/p>\n

Dalej bez powodzenia. W tym momencie postanowi\u0142em si\u0119gn\u0105\u0107 po argument ostateczny, ponowne uruchomienie \u201cSetup wizard\u201d. Ju\u017c wcze\u015bniej wiedzia\u0142em, \u017ce ponowne uruchomienie tego kreatora nie powoduje wyczyszczenia bazy danych vCenter ani Inventory. Za to w trakcie ca\u0142ego procesu jest przeprowadzane pe\u0142ne ponowne rejestrowanie us\u0142ug. Oczywi\u015bcie snapshot jest obowi\u0105zkowy zanim cokolwiek zaczniemy. I tutaj bingo! vSphere Web Client pokaza\u0142 pe\u0142ne Inventory!<\/p>\n

\"empty\"<\/a><\/p>\n

<\/div>","protected":false},"excerpt":{"rendered":"

Bardzo lubi\u0119 vCSA, jeden ruch r\u0119k\u0105 i ca\u0142e \u015brodowisko postawione. Niestety ze wzgl\u0119du na wbudowan\u0105 baz\u0119 danych ci\u0119\u017cko jest przeprowadzi\u0107 procedur\u0119 reinstalacji w przypadku wyst\u0105pienia problem\u00f3w. Ostatnio po restarcie vCSA ze zdziwieniem stwierdzi\u0142em, \u017ce vSphere Web Client pokazuje \u201cEmpty inventory\u201d. … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"yasr_overall_rating":0,"yasr_post_is_review":"","yasr_auto_insert_disabled":"","yasr_review_type":"","footnotes":""},"categories":[36],"tags":[57,80,59],"class_list":["post-2021","post","type-post","status-publish","format-standard","hentry","category-analiza","tag-vcenter","tag-vcsa","tag-web-client"],"yasr_visitor_votes":{"stars_attributes":{"read_only":false,"span_bottom":false},"number_of_votes":1,"sum_votes":5},"_links":{"self":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/2021"}],"collection":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2021"}],"version-history":[{"count":4,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/2021\/revisions"}],"predecessor-version":[{"id":2130,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/2021\/revisions\/2130"}],"wp:attachment":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2021"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2021"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2021"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}