<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body text="#000000" bgcolor="#FFFFFF"> FreeIPA logs: [06/Mar/2015:21:51:15 +0700] conn=30 op=0 BIND dn="uid=admin,cn=users,cn=compat,dc=server,dc=local" method=128 version=3 [06/Mar/2015:21:51:15 +0700] conn=30 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=admin,cn=users,cn=accounts,dc=server,dc=local" [06/Mar/2015:21:51:15 +0700] conn=30 op=1 SRCH base="cn=users,cn=compat,dc=server,dc=local" scope=2 filter="(objectClass=inetOrgPerson)" attrs="uid description givenName sn mail useraccountcontrol pwdaccountlockedtime entryuuid" [06/Mar/2015:21:51:15 +0700] conn=30 op=1 RESULT err=0 tag=101 nentries=2 etime=0 notes=P [06/Mar/2015:21:51:15 +0700] conn=30 op=2 UNBIND [06/Mar/2015:21:51:15 +0700] conn=30 op=2 fd=99 closed - U1 vCenter SSO error: Error: Idm client exception: Control not found <div class="moz-cite-prefix">On 3/6/15 8:45 PM, Herwono W Wijaya wrote: </div> <blockquote cite="mid:54F9AF5E.9010001@linuxcoding.org" type="cite"> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> sorry my mistake, okay I'll check slapd log files and try to figure out what happened <div class="moz-cite-prefix">On 3/6/15 8:43 PM, Martin Kosek wrote: </div> <blockquote cite="mid:54F9AEE5.4030306@redhat.com" type="cite">This is the directory on FreeIPA server that the vCenter is authenticating useres against. On 03/06/2015 02:40 PM, Herwono W Wijaya wrote: <blockquote type="cite">there is no directory "/var/log/dirsrv/" in 5.5u2b version On 3/6/15 8:34 PM, Gianluca Cecchi wrote: <blockquote type="cite">On Fri, Mar 6, 2015 at 2:12 PM, Martin Kosek <<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:mkosek@redhat.com">mkosek@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:mkosek@redhat.com"><mailto:mkosek@redhat.com></a>> wrote: Ah, I am not sure what control do they mean. But in general, when, it is always interesting to check the LDAP access logs to see the last failed request and then try the same search with ldapsearch and fix things. Martin see my previous e-mail: /var/log/dirsrv/slapd-REALM-NAME/ contains log and you will see which kind of queries vSphere is doing. Gianluca </blockquote> -- Regards, Herwono W Wijaya <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://linuxcoding.org">https://linuxcoding.org</a> | *VMware vExpert 2014, 2015 <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="https://communities.vmware.com/vexpert.jspa?src=vmw_so_vex_hwija_769&username=herwonowr"><https://communities.vmware.com/vexpert.jspa?src=vmw_so_vex_hwija_769&username=herwonowr></a>* </blockquote> </blockquote> <div class="moz-signature">-- Regards, Herwono W Wijaya <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://linuxcoding.org">https://linuxcoding.org</a> | <a moz-do-not-send="true" href="https://communities.vmware.com/vexpert.jspa?src=vmw_so_vex_hwija_769&username=herwonowr">VMware vExpert 2014, 2015</a> </div> <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> <div class="moz-signature">-- Regards, Herwono W Wijaya <a class="moz-txt-link-freetext" href="https://linuxcoding.org">https://linuxcoding.org</a> | <a href="https://communities.vmware.com/vexpert.jspa?src=vmw_so_vex_hwija_769&username=herwonowr">VMware vExpert 2014, 2015</a> </div> </body> </html>