Can't log into web client after upgrade ESXi version 8.0.3 Build 24022510

[Man Tran]

Hello,
We have a DL380 Gen10 HPE server that when re-imaged with ESXi 8.0.3, i can't log in with my domain admin account. The host is able to join the domain but only root account can log in. If I re-imaged it back with version 7.0.3g, I'm then able to log in with that same domain account. I've verified config.hostagent.plugins.hostssvc.esxAdminsGroup value is ESX Admins and we have that Domain Group in AD.  This 8.0.3 build 24022510 is the only only version I can go with. Any help would be appreciated? 

[Andrea Consalvi]

Hi,

It looks like your ESXi 8.0.3 host joins the domain fine, but you're only able to log in with the root account. Let's go step by step to figure out what's going on.

First, can you check if the domain is actually recognized by ESXi? Run this command and let me know if your domain appears in the output:

esxcli system auth pam list

If the domain is there, the next thing to check is whether ESXi is properly seeing users and groups from Active Directory. Try running these commands and share what you get:

wbinfo -u | head -10

wbinfo -g | head -10 

These will show a few domain users and groups. If nothing shows up or the output doesn't look right, it might mean ESXi isn't pulling AD info correctly. Let me know what you find, and we'll figure out the next step together!

[Man Tran]

Thanks for reply. 

However I was unable to run any of those commands, the output is "Unknown command or namespace system auth pam list".  I'm able to do nslookup on some of clients in my domain if that helps.